Azure Active Directory – Page 3 – All about Microsoft Endpoint Manager

How to create device based Azure AD group with OSType and OSVersion using powershell for intune

Posted on September 14, 2019 by Eswar Koneti | 1 Comment | 10,901 Views

Friend of mine had asked for help to create device based dynamic group with deviceOSType=iOS ,and deviceOSversion less than 12.4.1. The reason for this group was to limit anything below iOS 12.4.1 for iPhone devices and MDM managed devices only to have a collection. So that ,we can exclude them from VPN to restrict users…

Unable to see the intune enrolled windows 10 device in Azure portal – You can’t get there from here

Posted on July 9, 2019 by Eswar Koneti | 0 Comments | 16,711 Views

Problem: Recently ,i was looking at customer intune related issue (POC) . Customer had setup conditional access policies (device to be compliant or hybrid Azure AD join) ,intune device compliance policies and also configured Mobility (MDM and MAM). Customer is purely using on-prem domain join and no hybrid azure AD join and no SCCM. They…

Powershell script to get list of B2B domains that are added in Allow invitations only to the specified domains (most restrictive)

Posted on May 17, 2019 by Eswar Koneti | 7 Comments | 5,895 Views

We can use the Azure portal to invite B2B collaboration users. You can invite guest users to the directory, to a group, or to an application. After you invite a user through any of these methods, the invited user's account is added to Azure Active Directory (Azure AD), with a user type of Guest. The…

Intune device enrollment the sync could not be initiated 0x82ac019e

Posted on April 26, 2019 by Eswar Koneti | 1 Comment | 16,624 Views

Enrolling your devices into Microsoft Intune allows your Windows 10 devices to get access to your organization’s secure data, including email, files, and other resources. If your users want to access your organization's data from their BYOD windows 10 device , they can do so by themselves with simple steps without the need of admin.…

How to delegate permissions for managing MFA in Azure Active Directory

Posted on April 10, 2019 by Eswar Koneti | 10 Comments | 60,303 Views

There are many users voice requests and also questions in different forums ,asking for ‘How to reset MFA’ ‘how to delete permissions for managing MFA’ ‘allow service desk to reset MFA ’ . Until today ,if user want to reconfigure their MFA for several reasons ,service desk or user will reach out to Global admin…

Managing Microsoft Edge browser on iOS/Android (Notes from the field)

Posted on February 21, 2019 by Eswar Koneti | 0 Comments | 6,513 Views

Edge browser for iOS and Andriod has been out since year (First released on Dec 2017) to give you continuous browsing experience from your mobile device to windows device. Microsoft previously had intune managed browser as a secure browser to open Microsoft office and other apps managed by Microsoft Intune. Since Apr 2018 ,there…

How create Conditional Access policy for Microsoft Surface Hub Allow access to Office 365 applications using Named locations

Posted on November 29, 2018 by Eswar Koneti | 2 Comments | 5,141 Views

Introduction: The Microsoft Surface Hub is an all in one multi-touch screen solution that empowers people, groups and organizations to connect and collaborate effortlessly. The Surface Hub is a wall-mounted or roller-stand-mounted device with either a 55-inch (140 cm) 1080p or an 84-inch (210 cm) 4K 120 Hz touchscreen with multi-touch and multi-pen capabilities, running…

How to configure Hybrid Azure AD Join without ADFS for Office 365 and Co-Management Activities– Part 2

Posted on September 12, 2018 by Eswar Koneti | 8 Comments | 8,905 Views

In part 1 of this series on setup hybrid Azure AD Join without ADFS , we talked about Hybrid Azure AD ,prerequisites on how to configure device options. In part 2 of this series in post ,we will see how to configure 2nd prerequisite i.e enable Seamless Single Sign ON through Azure AD Connect…