90 Minutes to PAW
A Privileged Access Workstation is still one of the strongest ways to reduce risk around admin accounts. In hybrid environments, that matters even more — privileged access tends to sprawl across cloud consoles, on-prem tooling,…
Category: Entra ID
Windows LAPS is getting better
Windows Local Administrator Password Solution (LAPS) introduced last year features that enhance the management of local administrator accounts. These settings are not at the moment visible in the GUI but I think its worth using…
Compliance failure with Pluton TPM
During and enrolment of a customer we experienced a strange thing. On our Lenovo devices with AMD cpu we couldn't get them compliant in Intune. The device itself was all good, TPM enabled, Bitlocker working…
Splitting sub and root domains
In a project for a customer I was doing a T2T migration but, since this was a fashion retailer with a lot of stores we needed to find a way to slowly move the computers…
Dynamic groups for devices
In this blog post, we'll explore the steps to create dynamic device groups using PowerShell, they can bes used for targeting configuration and other polices iwhtin Intune. Make sure you have an Azure subscription with…
Bulk wipe Autopilot devices
Useful for schools and devices that change users often. If there is a need for bulk wipe devices that are registered in Autopilot we can use PowerShell and Graph to make this an easy task.…