Intune – All about Microsoft Endpoint Manager

MyApps and Conditional Access – Exclude with ease

Posted on January 26, 2023 by Eswar Koneti | 0 Comments | 574 Views

Azure Active Directory (Azure AD) Conditional Access is a powerful feature that allows administrators to control access to cloud applications based on specific conditions. These conditions can include factors such as location, device type, and network status. By using Conditional Access, administrators can ensure that only authorized users are able to access sensitive resources, and…

Efficiently Identify Co-Managed Devices: Techniques and Tools

Posted on January 17, 2023 by Eswar Koneti | 0 Comments | 498 Views

Co-management is a feature that allows organizations to manage their devices using both Microsoft Intune and System Center Configuration Manager (ConfigMgr). This enables organizations to take advantage of the latest security features and cloud capabilities, such as conditional access and device compliance policies, while also being able to manage certain client actions without the need…

Troubleshooting Azure MFA call to phone option missing (TwoWayVoiceMobile)

Posted on January 14, 2023 by Eswar Koneti | 0 Comments | 229 Views

Recently, while working on an office 365 hardening project, I came across an issue that was causing problems for many users in verifying the 2nd factor authentication (Azure MFA). During the 2nd factor authentication process, users were presented with the following screen. As you can see, the user has the option to verify their identity…

Intune manage write access to mobile storage and removable data drives

Posted on November 11, 2022 by Eswar Koneti | 0 Comments | 478 Views

I was recently working on an assignment to manage windows 10 devices using Microsoft Intune. One of the ask is to Block the write access to the mobile storage devices when the user plugs into the windows device and Allow write access to the removal data drives (thumb drives) if they are bitlocker protected. I…

How to migrate standalone MBAM to SCCM for bitlocker

Posted on November 10, 2022 by Eswar Koneti | 2 Comments | 1,790 Views

We all know that Microsoft BitLocker Administration and Monitoring (MBAM) is an administrative tool for managing BitLocker Drive Encryption for windows devices that are on-prem domain joined. MBAM mainstream support ended on July 2019 and is currently in extended support until April 2026. To know more about mainstream support and extended support, please read the…

Add bulk devices to the Azure AD security groups for Intune deployments

Posted on July 18, 2022 by Eswar Koneti | 0 Comments | 2,218 Views

I was recently involved in a task to have the Intune deployments targeted to multiple groups (Pre pilot, pilot, and prod). Each phase has a large set of devices from various regions and they all have different naming conventions too. All the devices are hybrid Azure AD joined. The list of devices from each phase…

How to manage the bitlocker reboot (toast notification) in intune with device compliance policy

Posted on July 12, 2022 by Eswar Koneti | 3 Comments | 1,621 Views

There was recently a discussion on twitter on how the bitlocker encryption is being enforced using intune and what the possible ways to bring the device into compliant state post the bitlocker task is done. Read the conversation here Based on the discussion, I thought I would probably write a blog post on how to…

Troubleshooting windows Autopilot – stuck at account setup working on it

Posted on May 6, 2022 by Eswar Koneti | 4 Comments | 27,420 Views

Updated: 27-May-2022 Windows Autopilot is a collection of technologies such as Azure AD, Microsoft Intune etc., used to set up and pre-configure new devices, getting them ready for productive use. When working with windows autopilot, there is one common question that keep rising in the forums is, account setup stuck and takes longer time while…