Author: Eswar Koneti

Friend of mine had asked for help to create device based dynamic group with deviceOSType=iOS ,and deviceOSversion less than 12.4.1. The reason for this group was to limit anything below iOS 12.4.1 for iPhone devices and MDM managed devices only to have a collection. So that ,we can exclude them from VPN to restrict users from internal resources. This is because of vulnerability issues on lower version (12.4.1) as per Apple blogs. First when i read this request ,i thought this can be achieved with dynamic group membership rules available from Azure AD and i have shared the Microsoft Docs…

I did detailed blog post on 'how to get office 365 proplus activation status' with help of extended MOF file and inventory changes. With this method ,you will get the activation details such as user email address, shared computer activation etc. For more information, please refer http://eskonr.com/2018/10/how-to-get-office-365-proplus-activation-status-and-excluded-apps-etc-using-sccm-configmgr/ .This method requires extension of MOF files ,make changes to hardware inventory which will then create new SQL views . If you don't' want go through all these , but just looking for office activation status (yes or No) ,then this blog will help you to achieve it.In this blog post, we will…

Recently ,we had requirement to allow ipad devices to connect to corporate network. This is due to the fact that ,some of the iOS apps that are being developed inhouse need to be tested with corporate network ONLY. In order to evaluate and test the app , the ipad devices need to connect to office network (corporate) . The team who does the testing are at remote site and there is no corporate network. If you are pure MAM shop, please do note that MAM does not enforce device compliance. The reason being, you cannot enforce device configuration policies. That…

I have worked on couple of office 365 proplus rollout projects. In all projects ,one of the critical task is to manage MSI based deployments for visio/project 2016 on computer that runs office 365 proplus (Click-to-Run).Click-to-Run is the technology used to install Office 365 proplus subscription based .Windows Installer technology (MSI) was used to install the volume license editions of older versions of Office 2016 and older, such as Microsoft Office Professional Plus ,Microsoft Office Standard,visio and project.Until now ( if you are not on office 365) ,we usually deploy volume licensed versions of Project 2016 and Visio 2016 by…

Microsoft has just released update 1906 for Configuration Manager current branch is available as an in-console update. You can apply this update on sites that run version 1806, 1810, or 1902 from the console. If you want to install new site ,you can download 1902 as baseline build and install the update. Before we start upgrading the site to latest build ,lets review the features that are newly added and deprecated: Features added/updated: Site infrastructure: Site server maintenance task improvements Configuration Manager update database upgrade monitoring Management insights rule for NTLM fallback Add a SQL AlwaysOn node Cloud-attached management: Azure…

Configuration Manager site database contains a large collection of information about the network, computers, users, user groups, and many other components of the computing environment. Being SCCM Admin, you need to understand the different categories of the SQL views, what information is stored in each view, and how the SQL views can be joined to one another to create reports that return the required information. For more information about SQL views please refer https://gallery.technet.microsoft.com/SCCM-Configmgr-2012-R2-SQL-5fefdd3b Hardware inventory views contain information about the computer hardware .Many hardware inventory views are created in ConfigMgr by default, and many can be enabled or created…

Introduction: We can use app configuration policies in Microsoft Intune to provide configuration settings for an iOS or Android app. These configuration settings allow an app to be customized by using an industry standard approach to app configuration and management. The configuration policy settings are used when the app checks for them, typically the first time it is run. App configuration policies can be applied to managed devices (intune enrolled iOS and Android ) or managed apps (MAM-WE) . To know more about App configuration policies in Intune ,please read https://docs.microsoft.com/en-us/intune/app-configuration-policies-overview With the recent changes that Microsoft introduced to Edge…

Problem:Recently ,i was looking at customer intune related issue (POC) . Customer had setup conditional access policies (device to be compliant or hybrid Azure AD join) ,intune device compliance policies and also configured Mobility (MDM and MAM).Customer is purely using on-prem domain join and no hybrid azure AD join and no SCCM. They want to try intune features to manage windows 10 devices for now .as part of testing , they have enrolled windows 10 device which was on-prem domain joined to intune using work /school account and device enrollment was successful. Under the work/school account, i can see the…