Blog

Latest blog posts

Get notified of a Conditional Access Policy change

Conditional Access, Graph API, Microsoft Teams, Security

The purpose of this blog post is to inform you how to get notified via Adaptive Cards in Microsoft Teams on a Conditional Access Policy change.

Enforce MFA on Windows logon with Intune and Duo

Azure AD, Device Enrollment, Endpoint Security, Intune, Security, Windows

The purpose of this blog post is to inform you how to enforce Multi-Factor Authentication (MFA) via an external device during Windows logon and UAC prompts. A 3rd party tool Duo Security makes this possible.

Enforce BitLocker startup PIN on Windows with Intune

Company Portal, Endpoint Security, Intune, PowerShell, Proactive Remediation, Scripts, Windows

The purpose of this blog post is to inform you how to enforce a BitLocker startup Pin for standard users. I was inspired by the solution of Oliver Kieselbach, but his solution was user-driven and not enforced so I decided to change some settings, make a proactive remediation script, and create a custom Compliance check to enforce the BitLocker startup pin.

The missing naming convention to increment your AutoPilot devices

AutoPilot, Device Enrollment, Graph API, Intune, SharePoint, Windows

The purpose of this blog post is to inform you how to configure your AutoPilot naming convention with new variables like incrementing the device number.

Filtering on @odata.type via Microsoft Graph API

Graph API, KB item

This knowledgebase item to helps you out with filtering on @odata.type via Microsoft Graph API without Invalid filter clause error

Configure all Attack Surface Reduction Rules via custom configuration profile

ASR, Endpoint Security, Intune, Microsoft Defender, PowerShell, Security, Windows

The purpose of this blog post is to inform you how to configure Attack Surface Reduction (ASR) via Intune. There are several options to configure ASR and some blog posts on how to configure ASR. I will explain the custom configuration and why I have chosen not to use the built-in option.

Rami Al-zayat
Auto assign Managed Google Play (Android) apps14/10/2023 - 21:22
Albert Stoynov
Configure Defender SmartScreen via Settings catalog with Intune21/09/2023 - 19:22
Andrea De Santis
Automate your retire actions and report15/08/2023 - 13:42

Followon Twitter Subscribeto RSS Feed

Latest blog posts

Get notified of a Conditional Access Policy change

Enforce MFA on Windows logon with Intune and Duo

Enforce BitLocker startup PIN on Windows with Intune

The missing naming convention to increment your AutoPilot devices

Filtering on @odata.type via Microsoft Graph API

Configure all Attack Surface Reduction Rules via custom configuration profile

About Me

Latest blog posts

Search

Subscribe to my security newsletter