MEM – All about Microsoft Endpoint Manager

Intune manage write access to mobile storage and removable data drives

Posted on November 11, 2022 by Eswar Koneti | 0 Comments | 1,316 Views

I was recently working on an assignment to manage windows 10 devices using Microsoft Intune. One of the ask is to Block the write access to the mobile storage devices when the user plugs into the windows device and Allow write access to the removal data drives (thumb drives) if they are bitlocker protected. I…

How to migrate standalone MBAM to SCCM for bitlocker

Posted on November 10, 2022 by Eswar Koneti | 5 Comments | 5,381 Views

We all know that Microsoft BitLocker Administration and Monitoring (MBAM) is an administrative tool for managing BitLocker Drive Encryption for windows devices that are on-prem domain joined. MBAM mainstream support ended on July 2019 and is currently in extended support until April 2026. To know more about mainstream support and extended support, please read the…

Troubleshooting windows Autopilot – stuck at account setup working on it

Posted on May 6, 2022 by Eswar Koneti | 5 Comments | 39,260 Views

Updated: 27-May-2022 Windows Autopilot is a collection of technologies such as Azure AD, Microsoft Intune etc., used to set up and pre-configure new devices, getting them ready for productive use. When working with windows autopilot, there is one common question that keep rising in the forums is, account setup stuck and takes longer time while…

SCCM Right click tools–find missing updates of a client

Posted on January 2, 2022 by Eswar Koneti | 14 Comments | 8,840 Views

Managing software updates and creation of custom reports in ConfigMgr is OCEAN. You have so much data to visualize based on your needs. One of the very common requirements or reports is, find out the missing/required updates of a device that is managed by SCCM. If you have not moved the device management solution to…

Microsoft Intune – zscaler client connector connectivity issues cant reach login.microsoftonline.com

Posted on July 23, 2021 by Eswar Koneti | 0 Comments | 7,504 Views

Introduction: I was recently involved to setup Microsoft 365 POC (zero trust) and manage the endpoints such as windows, iOS, android using Microsoft Endpoint Manager (Intune). The windows devices were set up using autopilot and are purely azure AD joined with Bitlocker keys in the cloud. To secure the internet web traffic and to enforce…

How to disable Firewall and network protection notifications using Microsoft Intune

Posted on January 29, 2021 by Eswar Koneti | 4 Comments | 6,712 Views

In this blog post, we will see how to use Microsoft Intune to disable the firewall and network protection notifications that pop-up on windows 10 workstation. The use case could be that, if you have POS devices where you need to disable/hide all notifications. We are not disabling the firewall instead it will be notifications…

Get a list of devices based on iOS enrolment type – dynamic groups in Azure Active Directory

Posted on November 28, 2020 by Eswar Koneti | 2 Comments | 7,936 Views

A year ago, Apple announced a new method of iOS/iPad device enrolment which is called User Enrollment. This enrolment method is available in iOS 13 and macOS 10.15 Catalina and later OS. with user enrollment, we can use federated authentication to link Apple Business Manager to your instance of Microsoft Azure Active Directory (Azure AD). As…

The case of unexplained – Android Enterprise Work Profile password in Intune

Posted on November 28, 2020 by Eswar Koneti | 0 Comments | 6,875 Views

I was helping a customer who was trying to set up an android enterprise personally enabled (BYOD) work profile configuration. In this blog post, I will try to explain the expected behavior (based on my testing) of the Android Enterprise work profile password. A work profile is something that you can be set up on…