SyncML Viewer via Winget

To make your life easier, I’ve submitted SyncML Viewer to the official Windows Package Manager Community Repository (winget). From now on you can get it by a simple command: winget install SyncMLViewer After a quick install you can use it: You have to open a new shell as the path variable is updated, then type…

Read More

How to configure Cloud PKI certificate-based WiFi with Intune

Maybe you have read the previous article How to configure certificate-based WiFi with Intune already and asked how to do the same with the freshly released Microsoft Cloud PKI. Then you don’t have to wait any longer, I promised to write about it and here is the setup with Microsoft Cloud PKI. I’ll dive into…

Read More

Enhancing usability of SyncML Viewer

As promised in my last post about WiFi and certificate-based authentication, I spent some time creating a new SyncML Viewer version v1.3.0. This time I would say I focused on the usability of the tool. I added a lot of features since version 1.2.0. I’m going to demonstrate a few of them and release the…

Read More

How to configure certificate-based WiFi with Intune

I think everyone agrees about the fact that most users are working with a laptop nowadays. This means a majority of their time they are using WiFi connections to do their work. So, in a cloud era where we don’t have many on-premises services anymore, the connectivity to get internet access is absolutely crucial. This…

Read More

MDM Local Management using SyncML Viewer

A month ago, I published a new version of the SyncML Viewer to support MMP-C. With this release I came to the idea of integrating some SyncML requests functionality. Sending local SyncML requests to the Windows OS and letting it process the OMA DM commands and get results back. After quite some research how to…

Read More

New SyncML Viewer version

Quite some time ago now, I published the SyncML Viewer to monitor the MDM protocol between a Windows client device and the Microsoft MDM backend (Intune). In the meantime, Microsoft brought to life the Microsoft Managed Platform Cloud (MMP-C) and uses the so-called Declared Configuration protocol which is still using the underlying OMA-DM SyncML protocol.…

Read More

Autopilot Manager with additional automation

New enhancements to Autopilot Manager are here. This time I focused on further optional automations of the import process based on customer feedback. Another year is gone and Autopilot Manager once again gets new features. Ironically last time I introduced new features (Evolving Autopilot Manager) was also ~1 year after the initial release. So here…

Read More

Post ESP Intune Win32 apps installations

In enterprise environments, we have to deal with a lot of requirements when it comes to app management. One of the common challenges is to control the installation moment during enrollment. We already have some basic controls in place. If the Enrollment Status Page (ESP) is configured during the enrollment all device targeted apps are…

Read More

Deep dive of SCEP certificate request/renewal on Intune-managed Windows clients

Today we are going to look under the hood of certificate requests or renewals on an MDM (Intune) managed Windows client. The environment is simple and uses a Windows client and SCEPman as the Cloud CA, which is easily set up and nothing more than an Azure App Service. It is especially interesting, as this…

Read More

Get back your Intune Win32 App Requirement and Detection Scripts

It looks like getting back all the script content in Intune is of high interest 😉, soon after I published how to get back your Proactive Remediation Scripts, I got another request for the Intune Win32 Application scripts (Detection and Requirement scripts). So here we go, another small script to get back all the Win32…

Read More

Get back your Intune Proactive Remediation Scripts

One of my blog readers kindly asked if I can provide a similar script like the one downloading all Intune PowerShell scripts for the Proactive Remediation Scripts. I’m happy to provide a modified version of my script to do exactly this. It uses the same technique as I used in my old script. There are…

Read More

Deploy an Intune application with user device affinity

Today I’m going to show how we can achieve user device affinity with Intune application deployment as known from ConfigMgr. When we are going to deploy applications to users, we are independent of the user’s devices. The application belongs to a user and it can be installed or it gets automatically installed on all his…

Read More

Monitoring Intune policy configuration changes

In a lot of Microsoft Intune environments there is often the requirement to monitor configuration changes and taking action based on changes. The most simple and common action is to send someone or a group of people an email that a policy was modified. These monitoring requirements are often given for special purpose devices like…

Read More

IME debugging and Intune Win32 App decoding – Part 2

Three years ago, I coded a small utility to decode Intune Win32 Apps and wrote a blog post about it – How to decode Intune Win32 App Packages. In addition to the small Decoder utility, I wrote a short PowerShell script to parse the Intune Management Extension (IME) log file to extract the necessary decryption…

Read More

Evolving Autopilot Manager

A year ago, I released the Autopilot Manager to support Autopilot hash imports during Windows OOBE via an approval process (if not already familiar with Autopilot Manager, please read here Introducing Autopilot Manager first) and the solution is used by a lot of companies in the meanwhile. This is quite some time to discuss about…

Read More

Comprehensive guide to managing macOS with Intune

Microsoft Intune is great when it comes to managing Windows devices and for sure it doesn’t need to hide when it comes to mobile phones like Android phones or Apple phones. Most companies I engage with do have the majority of devices running Windows, but there is always a certain amount of percentage running macOS.…

Read More

Ignite 2021 – Modern Management recap

Ignite 2021 is almost over and most of the content I was hunting after is also available as on-demand sessions. So, a good time to start a blog about my impressions. In this post I will go over my highlights I captured for the Windows and Modern Management with Microsoft Endpoint Manager area. As I…

Read More

Set preference for a suitable wallpaper with Intune

If you deliver a concept of a modern managed Windows 10 desktop managed with Intune, you take care of security settings and necessary Windows configurations. One part of the important configurations, beside security settings, are the small corporate identity things like corporate logon screen or corporate wallpaper. I’m totally okay with the option in Intune…

Read More

Company Portal stuck in a different language?

This is a very small follow up post for my article about language change How to completely change Windows 10 language with Intune. I mentioned the Company Portal and the issue that it sometimes got stuck at a language. During that time I didn’t realized something very simple :-). Actually the Windows Settings are telling the…

Read More

Top 10 modern management posts of 2020

I thought it might be nice to end the year 2020 with a short collection of my most viewed blog articles in 2020. For me the number one is not a real surprise, measured on the feedback it is a real helper for many out there. My own guess would have predicted some other posts…

Read More

Introducing Autopilot Manager

Autopilot Manager simplifies Windows Autopilot imports by using a small client program and an Azure app service. It provides end user feedback during import and has several modes to operate at. A self-service mode or an help desk approval mode.

Read More

Working with Hyper-V VMs in an Intune Lab environment

As a lot of my blog readers probably know :-), I’m working a lot with Microsoft Endpoint Manager – Intune and testing a lot of things in the Modern Management approach with Windows 10. It is absolutely necessary to have a good lab setup to test all these new features in a save way. For…

Read More

New Edge sync policy in action

A lot of people waited for this enhancement a long time, it is a rather small enhancement, but with a fairly big impact in user experience. So, I thought that it is worth a small blog post :-). In the past if you installed the new Edge on Chromium basis and started it for the…

Read More

Triggering Intune Management Extension (IME) Sync

During some recent automations I got the question about triggering Intune Management Extension (IME) somehow. The typical action I take in my lab environment is to restart the IME service: Of course this will re-initialize everything and also start a new Sync, but I thought there must also be a way to accomplish the Sync…

Read More

Enhance Intune Management Extension (IME) Logging

Everyone working with Microsoft Endpoint Manager (MEM) and using the Intune Management Extension (IME) has seen these log files: Here we find all relevant information about the processing of the Intune Windows Agent. We get deeper understanding what the agent is actually doing and it is the location to start troubleshooting Intune related error regarding…

Read More