Author: Eswar Koneti

Few months ago ,Microsoft announced the preview of Administrative templates which include hundreds of settings that you can configure for Internet Explorer, OneDrive, remote desktop, Word, Excel, and other Office programs.These templates give administrators a simplified view of settings similar to group-policy, but they're 100% cloud-based.This feature supports Windows 10 and later operating system.As part of mobile device management (MDM) solution, we can make use of these administrative templates (admx) and create configuration profiles to complete different tasks. In this blog post ,we will see ,how to create device configuration profile with Onedrive settings and deploy to users/devices for the…

You can use Intune app protection policies independent of any mobile-device management (MDM) solution which means ,if you device is already enrolled to airwatch ,mobile iron,black berry ,these devices can still be managed with intune using Mobile application Management (MAM).we are into MAM (MAM-WE) and no enrollment . So when we setup intune MAM protection policy ,we choose Require PIN in Access requirements with value 4 (user is prompted to set up this PIN the first time they run the app in a work or school context.)As you can see below ,the access requirement settings, we have setup the PIN…

Enrolling your devices into Microsoft Intune allows your Windows 10 devices to get access to your organization’s secure data, including email, files, and other resources. If your users want to access your organization's data from their BYOD windows 10 device , they can do so by themselves with simple steps without the need of admin. Here is the Quick start: Enroll your Windows 10 device https://docs.microsoft.com/en-us/intune/quickstart-enroll-windows-device Even though the steps are simple to enroll windows 10 device using the quick start guide , it is always required to create user guide documentation with limitations and some FAQ’s as per the…

Microsoft made Office cloud policy service for Office 365 ProPlus generally available and supported for all Office 365 ProPlus customers. The Office cloud policy service is a cloud-based service that enables you to enforce policy settings for Office 365 ProPlus on a user’s device, even if the device isn’t domain joined or otherwise managed. The policy settings roam to whichever device the user signs into and uses Office 365 ProPlus. The Office cloud policy service is part of a portal for managing Office 365 ProPlus and includes many of the same user-based policy settings that are available when using Group…

Issue Description:Few months ago, I have migrated the Primary SCCM site along with its secondary sites to SCCM build 1806 . Update of Primary site along with secondary site upgrades went fine except 1 secondary site. The failed secondary site throw the following error code in log.On the secondary site ,in the root of windows directory (C:\) ,you will find log called Configmgrsetup.logServer components are experiencing fatal errors.Failed to create process of SetupWpf.exe. return value 1Error code 1 means Incorrect function.While reading the log file ,found Registered OCX: D:\Configmgr\bin\x64\smsprov.dll with regsvr32.exeIt looks to me that ,it is failing to register…

There are many users voice requests and also questions in different forums ,asking for ‘How to reset MFA’ ‘how to delete permissions for managing MFA’ ‘allow service desk to reset MFA ’ . Until today ,if user want to reconfigure their MFA for several reasons ,service desk or user will reach out to Global admin who can only reset the MFA for user.Since the Global administrator accounts are very limited (recommended not to have more than 2-3) per tenant ,it would be difficult for GA’s to be available all the time to reset MFA for end-users.Until today ,organizations found different…

Issue description: On intune MAM scenario ,user trying configure outlook/teams/onedrive app on android device to access corporate resources. Device already has company portal app which is broker app for android and authenticator app for iOS. If the user doesn't have broker app installed on android device when trying to authenticate for the first time ,(the broker app can be either the Microsoft Authenticator for iOS) ,user will be redirected to store to install broker app. When user launch the outlook app ,it prompt with the following screen .This happened because user was using the outlook app managed by intune earlier…

Microsoft released SCCM Configmgr Technical preview build 1903 for this month (March 2019).  Technical previews are intended to use Lab purpose only and cannot be used in production environment. The technical preview introduces new functionality that Microsoft is working on. It introduces new features that aren't yet included in the current branch of Configuration Manager. These features might eventually be included in an update to the current branch. Before we finalize the features, we want you to try them out and give us feedback. If you already have technical preview lab running on build 1808 and above, you can get…