The purpose of this blog post is to inform you about designing a compliance policy and why you need a compliance policy and how to create the right compliance policy.

This is a knowledgebase item. Hope it helps you out someday if you are using group membership “nested” in a dynamic Azure AD group.

The purpose of the blog post is to inform you how to create Azure AD dynamic populated groups that always contain an increasing number of users.

The purpose of this blog post is to inform you how to create a dynamic device group for all devices that have been enrolled by a Device Enrollment Managers or a specific user.

The purpose of this blog post is to inform you how to configure RBAC for Intune in a secure way via Role-assignable groups. So, the RBAC groups can only be populated by a Global administrator or Privileged role administrator.

The purpose of this blog post is to inform you how to assign scope tags on a device via the assigned user his location, which can be used for configuring RBAC

The purpose of this blog post is to inform you how to enforce Multi-Factor Authentication (MFA) via an external device during Windows logon and UAC prompts. A 3rd party tool Duo Security makes this possible.

The purpose of the blog post is to inform you how to create randomly populated groups with Azure AD.
As I already mention in my blog post about Update rings, I want to deploy the Windows updates in different rings.
As my roll-out strategy for the update rings, I also want to roll out my configuration changes.