Sometimes I should probably pay more attention. I use PowerShell a lot. I use Windows 10 a lot. But I still missed this one: Some highlights: Want to know if the device […]
The most useful PowerShell cmdlet I didn’t know existed
Fun with Azure: Creating an Azure function
Sometimes you need to run some code – somewhere. You don’t care where. But clients need to be able to get to it. You don’t want servers, VMs, or web apps, just […]
You can use Intune to create a local admin account, but that doesn’t mean its a good idea
There are a variety of blog posts that talk about creating a local account on a device, to be used as a “break glass” account in case anything ever happens where the […]
More help with Windows Autopilot diagnostics
I’ve talked about the Get-AutopilotESPStatus.ps1 script a few times in previous blogs (like this one). Well, here’s another one. First, I added some additional diagnostics information at the top of the output: […]
Windows enrollment restrictions
It seems some days become worthy of a blog post, if only due to the coincidental collision of research and customer questions. Today is one of those days. I started off the […]
Podcast episode #2: Group tags
I did my first podcast episode back in March. Because I didn’t know any better, it was posted at a higher bitrate than necessary, so it used up a significant amount of […]
VLSC is getting monthly updates for Windows 10 media!
If you routinely sign into the VLSC portal at https://www.microsoft.com/vlsc to download Windows 10 media you may have noticed something interesting recently. Here’s a snapshot of Windows 10 1909 from mid-March: And […]
My guide to setting up Windows Server 2019 for VPN (with no guarantees that it will work)
Sadly, I can remember setting up my first Remote Access Service (RAS) on Windows NT Server 4.0. It was a very simple process: First you added the Remote Access Service in network […]
Publish Certificate Services CRL and OCSP sites to the internet using Azure App Proxy
I have set up a variety of test domains over the years, and inevitably I need to set up Active Directory Certificate Services (ADCS) on them because I need to issue certificates […]
Random news of the week: New white glove fix, updated Intune module
In the category of “stuff probably not worth a separate blog” category, I’ll combine some notes together into a single post. Let’s go through those one at a time. New white glove […]
Deploying Edge without a desktop shortcut, the easier (but not easiest) way
As Per Larsen blogged this week, the recent Edge stable release now has a new MSI parameter to skip the desktop shortcut. From the release notes: Added an MSI command line parameter […]
Fun with Windows Autopilot Group Tags
This one falls squarely in the “I can’t believe I’m doing another blob about group tags” category. Past examples: Group tags with spaces? Fun with Azure AD dynamic groups Now you can […]
Correlating Hyper-V VMs that are registered with Windows Autopilot
Over time, I’ve created a whole bunch of VMs for testing Windows Autopilot. They are named so that I can keep track of the Windows 10 build, the environment they are tied […]
Another new Get-AutopilotESPStatus script posted
Building on top of the script that I blogged about just over a month ago (time flies), I’ve now posted a new version. A few changes this time around: Apparently the MSI […]
Outlook and Azure AD Join: Automatically configuring the user’s mailbox
In an average day, I provision a bunch of Windows 10 devices using Microsoft Intune and Windows Autopilot, including Office 365 ProPlus. But somehow I never actually launched Outlook (or if I […]
Intune + certificates: something everyone should set up
If you are using Intune and haven’t yet set up a mechanism to deliver certificates to your MDM-managed devices, you should probably do so – at some point you’ll need to, and […]
Group tags with spaces? Fun with Azure AD dynamic groups
Many of you using Windows Autopilot have used Azure AD dynamic groups for various purposes, leveraging the Group Tag value that has been assigned to a device. Somewhere along the line, people […]
Include Microsoft Edge in your ESP blocking app list
A quick note: A few people noticed that you couldn’t select the new Microsoft Edge app types when selecting the list of blocking apps in an enrollment status page profile. That’s been […]
An experimental script to check out your Windows Autopilot devices
I published a new script on the PowerShell Gallery called AutopilotDeviceSync. This grabs a list of all your Windows Autopilot devices, Azure AD devices (including Hybrid Azure AD Join devices synced from […]
Importing a device hash directly into Intune
I resisted the urge to add a switch to the Get-WindowsAutopilotInfo script to add the device to Windows Autopilot using the Intune Graph API. But since people were doing it anyway in […]
Out of Office Hours 
You must be logged in to post a comment.