Let’s say you want to enable BitLocker during a Windows Autopilot user-driven deployment, and you want “maximum security” by changing the default BitLocker encryption settings to instead use XTS-AES 256-bit encryption (instead […]
Have you ever wondered what actually happens during each phase of the Enrollment Status Page (ESP) and each step within a phase? Or maybe more simply, what exactly is it tracking? If […]
It’s a question that I’ve been asked a number of times, and one that I actually asked myself when doing initial tests with Windows 10 1903. And the answer is interesting – […]
If you’ve gone poking around in the available device configuration policies in Intune, you might have seen this one in the “Device Restrictions” category for “Windows 10 and later” devices, in the […]
One of the new features in the ConfigMgr 1906 release (and in previous tech preview releases) is the task sequence debugger. See the What’s new documentation that talks about it, and the […]
Sometimes I can’t explain them, but I can at least pass them on so that you don’t tear your hair out trying to figure out what’s going on. The enrollment status page […]
If you are like me and open lots of saved event log files (*.evtx), such as those captured by the “mdmdiagnosticstool.exe -area Autopilot -cab c:\autopilot.cab” command, you probably end up with an […]
Some customers have asked “how do I delegate access to manage Windows Autopilot devices in Intune.” Well, Intune has a robust Role-Based Access Control (RBAC) mechanism that can be used to create […]
I always get into this “philosophical” debate with IT pros: When buying new Windows 10 devices, what kind of configuration is recommended? It’s certainly not “buy the cheapest possible PC you can […]
How many of you remember the Unified Update Platform, a.k.a. UUP, being announced in 2016? Let me remind you: And there was another update in 2017: There was some documentation published in […]
