Intune

How to exclude Shortcuts from syncing to OneDrive with Microsoft Endpoint Manager – Microsoft Intune

November 18, 2021Enterprise Mobility + Security, Intune, Microsoft Endpoint ManagerNo comments

Microsoft OneDrive is a great service for storing your files. And when you have “Known Folder Redirection” enabled, your Desktop, Documents and Pictures folders are redirected to OneDrive and synched to the cloud. This way you have the same Desktop, Documents and Pictures folders available on every device which benefits the user experience. However, you have applications that place a shortcut on the desktop the first time you log in to a new system, for example the Microsoft Edge browser and Microsoft Teams. This results in many of the same shortcuts on your desktop (copy offs) if you switch devices often.

How to setup Android Zero-Touch Enrollment with Microsoft Endpoint Manager – Microsoft Intune

November 13, 2021Intune, Microsoft Endpoint ManagerNo comments

Android Zero-Touch Enrollment is a (free) service to automate and enforce MDM enrollments for Android devices running Android 9 or higher, independent of device manufacture. It offers end-to-end security because the MDM enrollment cannot be skipped by the user. The first time the user tuns on the device, clear instructions will be displayed to start the enrollment. All policies and applications that are assigned in Microsoft Intune will be automatically provisioned on the device.

How to add iOS devices manually in the Apple Business Manager (ABM) for automatic Microsoft Endpoint Manager – Microsoft Intune enrollment

November 11, 2021Enterprise Mobility + Security, Intune, Microsoft Endpoint Manager1 comment

It’s a best practice to enroll corporate owned iOS/iPadOS devices via the Apple Automated Device Enrollment (ADE) program (PKA Device Enrollment Program – DEP). It offers “out of the box” security because the enrollment with the MDM solution will start automatically and the user can’t work around it. Next to automatic device enrollment it makes it possible to set devices in supervised mode, which offers more policy settings to apply and in combination with the Apple Volume Purchase Program (VPP), no Apple ID is required during enrollment and for installing company published applications.

How to implement and manage Microsoft Windows 365 Cloud PC

September 5, 2021Windows 365 Cloud PC4 comments

In August 2021, Microsoft released Windows 365 Cloud PC. A new cloud-based service that provides Cloud PCs to end users. With this Windows 365 Cloud PC, users get their own personalized desktop in the cloud, which can be accessed from anywhere on any device. It is optimized for Microsoft 365 including Microsoft Teams AV redirection. Unlike Azure Virtual Desktop you pay a fixed price per-user per-month, no matter you many hours you use the Cloud PC in a month (license, exclusive network egress fees in case of Enterprise version). The price of the license depending on the size and specs of the Cloud PC.

How to manage your Windows Virtual Desktop session hosts (single user) with Microsoft Endpoint Manager – Microsoft Intune.

April 5, 2021Azure Virtual Desktop (AVD), Intune6 comments

By default all Windows Virtual Desktop session hosts are joined with your domain. And in most cases you will apply policy configurations to them via Group Policy Objects (GPO). If you also using Microsoft Endpoint Manager – Microsoft Intune for managing Windows 10 devices, it might also be worth considering to manage your WVD session hosts VMs with it as well.

How to start with Shared iPads for Business with Microsoft Endpoint Manager (Intune) and Apple Business Manager

November 3, 2020Enterprise Mobility + Security, Intune, Microsoft Endpoint Manager13 comments

I get the following question regularly; “can we configure our Apple iPads as Shared device. Where you as a user, can login and logoff without seeing each other’s data?”. Most of the time it’s about medical personal that works in shifts and don’t have a personal device. But you can also think of maintenance and field agents or flight crew members for example. In this case you want to let the employees use their applications across a pool of shared devices. They should be able to pick any random device from that pool, login and do their work.

How to configure automatic Contact Syncing from Microsoft Outlook to the native Contacts App including Contact Fields filtering on iOS and Android BYOD devices with Microsoft Endpoint Manager

March 17, 2020Enterprise Mobility + Security, Intune15 comments

After companies apply Mobile Application Management (MAM) / App Protection Policies to their employees’ mobile devices, and forced them to use the Managed Outlook app instead of the native mail application, one of the most frequently asked questions are “how can I see who’s calling me?” and “where are my contacts? I don’t see them in my native contacts app”. This has everything to do with the fact that contacts are now in a “isolated/secured app container” and not accessible by other non-managed / secured applications.

VLOG#5 – How to deploy Microsoft Office 365 ProPlus with Microsoft Endpoint Manager (MEM)

March 5, 2020Enterprise Mobility + Security, Intune, Vlogs2 comments

In VLOG#5 I will show you step by step How to deploy Microsoft Office 365 ProPlus with Microsoft Endpoint Manager (MEM) / Intune. In this VLOG I will cover the following topics step-by-step: – Publish and deploy a customized Microsoft Office 365 ProPlus installation with Microsoft Endpoint Manager / Intune. – Test the result on a new Windows 10 device managed by Microsoft Intune

Quicker assign multiple resources within Microsoft Intune with Policy Sets

October 26, 2019Enterprise Mobility + Security, Intune

With the October 14, 2019 Microsoft Intune update, management of Microsoft Intune has become a little easier. And with “little easier” I mean that it is now possible to assign multiple resources like applications and policies at once. With Policy Sets you can assign applications, application protection policies (MAM), configuration-, compliance- and type restriction policies, AutoPilot profiles and enrollment status page with one single assignment. The resources itself don’t have to be assigned separately to users or devices.

Tag: Intune