EMS – Page 2 – All about Microsoft Endpoint Manager

Intune manage write access to mobile storage and removable data drives

Posted on November 11, 2022 by Eswar Koneti | 0 Comments | 1,322 Views

I was recently working on an assignment to manage windows 10 devices using Microsoft Intune. One of the ask is to Block the write access to the mobile storage devices when the user plugs into the windows device and Allow write access to the removal data drives (thumb drives) if they are bitlocker protected. I…

Add bulk devices to the Azure AD security groups for Intune deployments

Posted on July 18, 2022 by Eswar Koneti | 0 Comments | 6,218 Views

I was recently involved in a task to have the Intune deployments targeted to multiple groups (Pre pilot, pilot, and prod). Each phase has a large set of devices from various regions and they all have different naming conventions too. All the devices are hybrid Azure AD joined. The list of devices from each phase…

How to manage the bitlocker reboot (toast notification) in intune with device compliance policy

Posted on July 12, 2022 by Eswar Koneti | 5 Comments | 2,899 Views

There was recently a discussion on twitter on how the bitlocker encryption is being enforced using intune and what the possible ways to bring the device into compliant state post the bitlocker task is done. Read the conversation here Based on the discussion, I thought I would probably write a blog post on how to…

Troubleshooting windows Autopilot – stuck at account setup working on it

Posted on May 6, 2022 by Eswar Koneti | 5 Comments | 39,417 Views

Updated: 27-May-2022 Windows Autopilot is a collection of technologies such as Azure AD, Microsoft Intune etc., used to set up and pre-configure new devices, getting them ready for productive use. When working with windows autopilot, there is one common question that keep rising in the forums is, account setup stuck and takes longer time while…

How to upgrade the Intune certificate connector

Posted on April 26, 2022 by Eswar Koneti | 13 Comments | 14,067 Views

Microsoft recently announced that, Starting April 2022, certificate connectors earlier than version 6.2101.13.0 will be deprecated and will show a status of Error. This status does not affect functionality. Starting June 2022, such connectors will not be able to issue certificates. This includes both the PFX Certificate Connector for Microsoft Intune and Microsoft Intune Connector,…

Powershell script to audit all Azure AD app registrations and notify secret key or certificate expiration

Posted on February 7, 2022 by Eswar Koneti | 4 Comments | 8,356 Views

This week, I have another real-time use case about the audit of all azure AD app registrations and notify the application credential (secret key or certificate) near to expiration. Registering an application in Azure AD establishes a trust relationship between your app and the Microsoft identity platform, The application registration can be used to authenticate…

Use PowerShell to audit the Conditional Access Policies and alert via email

Posted on January 27, 2022 by Eswar Koneti | 4 Comments | 4,601 Views

Conditional Access in Azure Active Directory needs no introduction. To read more information about Conditional Access, please refer to https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview In my recent assignment, there was an ask to back up the conditional access policies every day and also notify through email for a list of conditional policies that are created or modified in the…

Using filters to restrict security information registration from trusted devices

Posted on January 16, 2022 by Eswar Koneti | 0 Comments | 1,870 Views

It has been a while since Microsoft has released the combined registration (security) feature that helps users to register for both MFA and SSPR can register once if the methods in the Azure AD Multi-Factor Authentication and SSPR policies are enabled. For more information about Combined security information registration please read https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined One of the…