EMS – All about Microsoft Endpoint Manager

Troubleshooting Azure MFA call to phone option missing (TwoWayVoiceMobile)

Posted on January 14, 2023 by Eswar Koneti | 0 Comments | 228 Views

Recently, while working on an office 365 hardening project, I came across an issue that was causing problems for many users in verifying the 2nd factor authentication (Azure MFA). During the 2nd factor authentication process, users were presented with the following screen. As you can see, the user has the option to verify their identity…

Intune manage write access to mobile storage and removable data drives

Posted on November 11, 2022 by Eswar Koneti | 0 Comments | 476 Views

I was recently working on an assignment to manage windows 10 devices using Microsoft Intune. One of the ask is to Block the write access to the mobile storage devices when the user plugs into the windows device and Allow write access to the removal data drives (thumb drives) if they are bitlocker protected. I…

Add bulk devices to the Azure AD security groups for Intune deployments

Posted on July 18, 2022 by Eswar Koneti | 0 Comments | 2,208 Views

I was recently involved in a task to have the Intune deployments targeted to multiple groups (Pre pilot, pilot, and prod). Each phase has a large set of devices from various regions and they all have different naming conventions too. All the devices are hybrid Azure AD joined. The list of devices from each phase…

How to manage the bitlocker reboot (toast notification) in intune with device compliance policy

Posted on July 12, 2022 by Eswar Koneti | 3 Comments | 1,615 Views

There was recently a discussion on twitter on how the bitlocker encryption is being enforced using intune and what the possible ways to bring the device into compliant state post the bitlocker task is done. Read the conversation here Based on the discussion, I thought I would probably write a blog post on how to…

Troubleshooting windows Autopilot – stuck at account setup working on it

Posted on May 6, 2022 by Eswar Koneti | 4 Comments | 27,382 Views

Updated: 27-May-2022 Windows Autopilot is a collection of technologies such as Azure AD, Microsoft Intune etc., used to set up and pre-configure new devices, getting them ready for productive use. When working with windows autopilot, there is one common question that keep rising in the forums is, account setup stuck and takes longer time while…

How to upgrade the Intune certificate connector

Posted on April 26, 2022 by Eswar Koneti | 10 Comments | 10,056 Views

Microsoft recently announced that, Starting April 2022, certificate connectors earlier than version 6.2101.13.0 will be deprecated and will show a status of Error. This status does not affect functionality. Starting June 2022, such connectors will not be able to issue certificates. This includes both the PFX Certificate Connector for Microsoft Intune and Microsoft Intune Connector,…

Powershell script to audit all Azure AD app registrations and notify secret key or certificate expiration

Posted on February 7, 2022 by Eswar Koneti | 1 Comment | 5,478 Views

This week, I have another real-time use case about the audit of all azure AD app registrations and notify the application credential (secret key or certificate) near to expiration. Registering an application in Azure AD establishes a trust relationship between your app and the Microsoft identity platform, The application registration can be used to authenticate…

Use PowerShell to audit the Conditional Access Policies and alert via email

Posted on January 27, 2022 by Eswar Koneti | 4 Comments | 3,382 Views

Conditional Access in Azure Active Directory needs no introduction. To read more information about Conditional Access, please refer to https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview In my recent assignment, there was an ask to back up the conditional access policies every day and also notify through email for a list of conditional policies that are created or modified in the…