Auto Assign Scope Tags Based on User Location
The purpose of this blog post is to inform you how to assign scope tags on a device via the assigned user his location, which can be used for configuring RBAC
Author Archive for: René Laas
Entries by René Laas
Get notified of a Conditional Access Policy change
The purpose of this blog post is to inform you how to get notified via Adaptive Cards in Microsoft Teams on a Conditional Access Policy change.
Enforce MFA on Windows logon with Intune and Duo
The purpose of this blog post is to inform you how to enforce Multi-Factor Authentication (MFA) via an external device during Windows logon and UAC prompts. A 3rd party tool Duo Security makes this possible.
Enforce BitLocker startup PIN on Windows with Intune
The purpose of this blog post is to inform you how to enforce a BitLocker startup Pin for standard users. I was inspired by the solution of Oliver Kieselbach, but his solution was user-driven and not enforced so I decided to change some settings, make a proactive remediation script, and create a custom Compliance check to enforce the BitLocker startup pin.
The missing naming convention to increment your AutoPilot devices
The purpose of this blog post is to inform you how to configure your AutoPilot naming convention with new variables like incrementing the device number.
Filtering on @odata.type via Microsoft Graph API
This knowledgebase item to helps you out with filtering on @odata.type via Microsoft Graph API without Invalid filter clause error
Configure all Attack Surface Reduction Rules via custom configuration profile
The purpose of this blog post is to inform you how to configure Attack Surface Reduction (ASR) via Intune. There are several options to configure ASR and some blog posts on how to configure ASR. I will explain the custom configuration and why I have chosen not to use the built-in option.
How to get the offline Company Portal App
This is a knowledgebase item to get the offline company portal from Store For Business. Hope it helps you out someday.
Enable Hyper-V via Intune with Remediation Scripts
The purpose of the blog post is to inform you how to enable Hyper-V via Intune on Windows 10 or Windows 11. Hyper-V is required for e.g. Windows Defender Credential guard, Application Guard and Application Control. You can enable Hyper-V in various ways, but I’ll explain in this blogpost the Proactive remediations Script method.
Enable Hyper-V via Intune with PowerShell Scripts
The purpose of the blog post is to inform you how to enable Hyper-V on Windows 10 or Windows 11 via Intune. Hyper-V is required for e.g. Windows Defender Credential guard, Application Guard and Application Control. You can enable Hyper-V in various ways, but I’ll explain in this blogpost the PowerShell script method.
About Me
Hi! My name is René Laas. I have passion and enthusiasm for the Microsoft 365 Cloud. I am based in the Netherlands.
Latest blog posts
Andrea De SantisAutomate your retire actions and report15/08/2023 - 13:42- Retire or do not retire your devices!27/07/2023 - 21:36
Albert Stoynov
Andrea De Santis