Azure AD

How to configure Conditional Access with Session Management for Windows Virtual Desktop (WVD)

January 15, 2020Azure AD, Azure Virtual Desktop (AVD)10 comments

Recently I implemented Windows Virtual Desktop (WVD) for a customer. This customer has the policy that you always needs to get challenged by Multi-Factor Authentication (MFA) before you get access to a Remote Application or Desktop, except when connecting from a managed device. To achieve this with Windows Virtual Desktop, an Azure Conditional Access policy must be created with session settings (at this moment, I know there are some great improvements on the roadmap for this).

How to implement and manage Azure AD Domain Services (Azure AD DS) for a fast Windows Virtual Desktop (WVD) PoC deployment

December 17, 2019Azure AD Domain Services, Azure Virtual Desktop (AVD)8 comments

I recently visited a customer who wanted a Windows Virtual Desktop PoC. And although it is customary for me to implement a Windows Virtual Desktop PoC within the current production environment and take it in production after a successful PoC right away, this customer wanted the PoC to be in a completely separate environment. The customer even wanted to implement this Windows Virtual Desktop PoC in a whole new Azure tenant.

How to setup Android Enterprise – Corporate-owned dedicated devices with Microsoft Intune

February 14, 2019Azure AD, Enterprise Mobility + Security, Intune5 comments

Earlier I wrote about how to configure Android Enterprise – Work Profile. This Android Enterprise mode is designed for personal-owned mobile devices. For corporate-owned devies there are two Android Enterprise modes, one for dedicated devices and one for fully managed user devices. In this blog I will show you how to configure Android Enterprise – Corporate-owned dedicated device mode within Microsoft Intune.

How to Enable Android Enterprise and configure Personal devices with a Work Profile in Microsoft Intune – The ultimate Step-By-Step Guide

January 30, 2019Azure AD, Enterprise Mobility + Security, Intune5 comments

This year Google will stop with the support of Android Device Admin API’s with the release of Android 10. This means that the traditional way to manage Android devices is no longer possible with new Android 10 devices or older Android devices that are upgrading to Android 10 (or higher). Android Enterprise is the new way to manage Android devices. With Microsoft Intune you can manage Android devices with Android Enterprise in different modes. In this blog I will show you step-by-step how to enable Android Enterprise and configure the Work Profile mode (I will write a separate blog for the other modes). There are a lot of things that needs to be taken into account and I want to deal with them all in this blog.

How to install the Application Proxy Connector and publish an on-premise web application or website in Microsoft Azure

December 18, 2018Azure AD6 comments

In Microsoft Azure Active Directory you can publish web based (SaaS) applications and websites in a few different ways. The easiest way is via the Azure App Gallery, in that case you have added the application in just a few steps. If the application is not available in the Azure App Gallery you can add it manually. When adding the application manually you can either add cloud hosted web apps and websites or on-premise hosted web apps and websites.

How to integrate Citrix XenMobile with Azure AD for auto enrollment with AutoPilot or Azure AD Join

July 19, 2018Azure, Windows 10, XenMobile

In my previous blog I took you through the steps to configure Windows AutoPilot in combination with Microsoft Intune. In this blog, I want you to show that it is also possible to use Windows AutoPilot or Azure AD Join with other MDM/EMM solutions, like in this case, Citrix XenMobile. In this scenario, after the Windows 10 out-of-box-experience (OOBE) setup, the Windows 10 device is automatically enrolled with Citrix XenMobile, ready to receive all the assigned policies and applications.

How to setup Windows AutoPilot and add existing devices the quickest way

July 5, 2018Enterprise Mobility + Security, Intune, Windows 1027 comments

UPDATE (Dec, 2 2020) : There is now an even faster way of adding devices to Autopilot. Step 3 of this blog can be replaces with new steps described in this blog : How to add Windows 10 devices to Windows Autopilot even faster Windows 10 Modern Management is hot. More and more companies are looking for the possibilities to manage Windows 10 devices with their Enterprise Mobility Management (EMM) product. This does not only mean that they want a single tool with which they can manage all type of devices (like iOS, Android and Windows), but also a new way of managing their Windows 10 devices. With this new way of management the end user and the administrator are more flexible. The location of the device has become irrelevant and a local domain join or a VPN connection to the company location to receive the latest updates, applications and policies are no longer needed.

How to configure Citrix ShareFile SSON with Microsoft Azure AD

September 1, 2016Azure, ShareFile1 comment

In the last few years I have mostly implemented ShareFile Enterprise as part of the XenMobile Enterprise edition and therefor configured the XenMobile server as a SAML identity provider for ShareFile SSON. In the last few months I also see some companies that were only interested in the Citrix ShareFile solution without XenMobile. In this case there are some alternative ways to provide users single sign-on (SSON) to ShareFile, for example ADFS.

Tag: Azure AD