Sometimes I can’t explain them, but I can at least pass them on so that you don’t tear your hair out trying to figure out what’s going on. The enrollment status page […]
Event Viewer and “Saved Logs”
If you are like me and open lots of saved event log files (*.evtx), such as those captured by the “mdmdiagnosticstool.exe -area Autopilot -cab c:\autopilot.cab” command, you probably end up with an […]
Creating a Windows Autopilot role in Intune
Some customers have asked “how do I delegate access to manage Windows Autopilot devices in Intune.” Well, Intune has a robust Role-Based Access Control (RBAC) mechanism that can be used to create […]
What does an enterprise Windows 10 device look like?
I always get into this “philosophical” debate with IT pros: When buying new Windows 10 devices, what kind of configuration is recommended? It’s certainly not “buy the cheapest possible PC you can […]
UUP is (still) coming soon, and dynamic update is (still) important
How many of you remember the Unified Update Platform, a.k.a. UUP, being announced in 2016? Let me remind you: And there was another update in 2017: There was some documentation published in […]
Join me for a Q&A session
One of the things that I’ve wanted to do for a while is to have an open Q&A call – you know, the typical “office hours” concept from your college days, where […]
Configuring the Intune Connector for AD to use a proxy server
As I discussed previously, proxy servers are a pain. I wish they could be wiped from the face of the earth. But since that’s about as likely as everyone being off of […]
Trying out Windows Autopilot with Windows 10 1903? Install the latest update.
As you kick the tires on Windows Autopilot scenarios (whether new scenarios like white glove or existing ones), make sure you’ve installed a recent cumulative update and aren’t using just the original […]
Want to watch the MDM client activity in real time?
In the past, you could use the Microsoft Network Monitor to capture network traces, showing the gory details of all the network traffic to and from the machine. That utility morphed into […]
Windows Autopilot and the joy of networking
One of the biggest challenges that we run into with customers who want to adopt Windows Autopilot for deploying new devices is the variety of network setups. This can be broken down […]
Have you implemented “hybrid”?
I’ve had lots of conversations with customers about Hybrid Azure AD Join, as it’s used as part of a key Windows Autopilot scenario. But it seems this leads to a bunch of […]
Inside Windows Autopilot user-driven Hybrid Azure AD Join
I already talked about user-driven mode with Azure AD Join – that’s the easiest scenario. Now let’s talk about user-driven mode with Hybrid Azure AD Join. For those who have no idea […]
Using MFA with Azure AD Join
Here’s an easy one to try. In Azure AD, you can enable an option to require MFA before a user can join a device to Azure AD: When not using ADFS or […]
Options for Terms of Use
Some organizations want to display a “terms of use” page to users when the join or enroll in the organization. (Personally, I think this is a bit silly, but if it makes […]
CSP partners: Add devices to Windows Autopilot using Partner Center and PowerShell
I’ve given presentations at a variety of events that included this slide, talking about the different mechanisms that are available for registering devices with Windows Autopilot: For customers, you can register devices […]
Automatically setting up OneDrive for Business via Intune
The OneDrive for Business team has made a number of changes to support automatic configuration of OneDrive, including support for automatically signing in, configuring known folder migration, enabling offline files, and more. […]
Inside Windows Autopilot user-driven mode with Azure AD join
We’ve already talked about device registration and the initial Windows Autopilot profile download. That’s all prep work for the “real” provisioning process performed by Windows Autopilot. Now let’s look at the provisioning […]
TPM Attestation: What can possibly go wrong?
First off, it would be good to touch on what TPM attestation is, and then talk about why you care. From some older Windows Server documentation, here’s a decent overview: With TPM […]
What happens when a Windows Autopilot-registered device starts up?
The last time, I talked about the device registration process – preparing for deploying a device using Windows Autopilot. This time, I want to switch to the device itself and explore what […]
Self-serving post: Follow my blog from Outlook
If you are like me, you live and breathe through Outlook – it’s the center of my work world, enabling me to rapidly sift through obscene amounts of e-mail effectively. (You might […]
Out of Office Hours 
You must be logged in to post a comment.