How To

When we think about administrative rights on Intune-enrolled Windows 10 devices, we need to consider two possible device states for that device: Azure AD joined (AADJ), or Hybrid Azure AD joined (HAADJ).  This is due to the different administrative roles available at the directory level. For Azure AD joined devices, at the time of performing… Read More

Windows Terminal is delivered by Microsoft as a packaged app through the Microsoft Store and on GitHub in MSIX format. But because of the way Windows Terminal is developed and packaged, there are some challenges when it comes to elevating privileges. Users have called for Microsoft to allow tabs in Windows Terminal to optionally run… Read More

One of the most interesting features of Windows Terminal is the ability to customize the appearance of each tab. But until recently, customizations were only possible by editing a JSON settings file. In Windows Terminal version 1.7, which has just been released on the stable channel to the Microsoft Store and GitHub, Microsoft has added… Read More

If you want to run virtual machines (VM) on Windows 10, you'll need to install Hyper-V. Hyper-V is a hardware-based hypervisor that lets you run VMs in their own isolated spaces. You can run multiple VMs at the same time, provided you have enough resources like disk space, RAM, and CPU capacity. Hyper-V supports Windows,… Read More

Microsoft announced recently that the rollout of a new feature in Teams usage reporting has completed and should be available for all. This will put many an IT Pro's minds' at rest, at least a little more. :) Prior to the rollout of MC244599, the Teams admin center exposed user identifiable information (PII) like AAD… Read More

One of the best ways to secure your systems is to make sure that Active Directory (AD) domain controllers (DCs) are running an up-to-date version of Windows Server. DCs are critical infrastructure because they manage the security and access to all your IT resources. If a DC is compromised, then you should consider your entire… Read More

Supporting a remote workforce, especially if you haven't had the time to plan, assess, execute, and support it, can be daunting. Almost all organizations have had this thrust onto their IT departments' plates for over a year now. Regardless of what your company's long-term plans are for where your employees will work, it would behoove… Read More

Enrollment restrictions are sets of rules assigned to Azure AD groups.  There are two types of enrollment restrictions: device type and device limit.

I do most of my Azure work in both North Central US and Central US. However, I had a recent project where I needed to deploy some Azure storage in the new South Africa North region. Random, I love how the names get names by their dates of entry and there is a funny story… Read More

On-premises Active Directory domain-joined PCs have typically been managed with tools such as Group Policy.  At larger scales, you may have Configuration Manager or third-party tools.  The availability of Intune (part of Endpoint Manager) in Microsoft 365 subscriptions such as Business Premium and E3 has opened up an alternative.  The benefit many are seeing over… Read More

As part of the Automatic VM Guest Patching for Azure VMs preview announced at Ignite in March, Microsoft introduced Windows Server hotpatching. Hotpatching lets organizations apply security patches to Windows Server without rebooting. A feature that's been part of other server platforms for years, hotpatching finally comes to Windows Server. But there are some caveats.… Read More

Intune Administrators can deploy, make optionally available, or uninstall Win32 apps with the help of Windows 10's Intune Management Extension (IME).  The IME is a service installed on Windows 10 that acts as the engine to execute these actions and, additionally, PowerShell scripts (which were originally its only purpose).  Win32 apps in the context of… Read More

Microsoft announced at its recent Ignite conference that WAC in the Azure Portal in now available in public preview. Prior to this update, it was only possible to manage VMs at the infrastructure level in the Azure Portal. But WAC in the Azure Portal lets administrators manage Windows Server VM guests at a more granular… Read More

Here is the simple way to set an out of office message using Microsoft Teams.

To protect data at rest on your Intune-managed Windows devices, BitLocker disk encryption can be applied automatically using the BitLocker CSP.  If you are deploying devices with Autopilot, this will also allow you to encrypt them at the time of deployment.  Existing devices will be encrypted as soon as the device checks in with Intune… Read More