I did several Intune projects by customers, and with almost every implementation a subset of users’ needs to have local administrator rights (for example developers). There are several ways to grant users these rights, for example via a separate Autopilot profile where you specify that users need to be local Administrator. Or via the “additional local administrators on all Azure AD joined...
Category - Microsoft
Autopatch, Intune, Microsoft, Microsoft 365
How to deploy Windows Autopatch with Microsoft Endpoint Manager – Intune
Windows Autopatch is a new service from Microsoft that automates the update process of Windows (both quality updates and feature updates), Microsoft 365 Apps for Enterprise (aka Office apps), the Microsoft Edge browser and Microsoft Teams. Once the service is enabled in your tenant and devices are onboarded successful you don’t need to worry about updates of the supported products anymore...
Intune, Microsoft, Microsoft 365
How to add or remove system apps in the Android Enterprise Work Profile with Microsoft Intune
Depending on the use cases and the requirements of the company, Android Enterprise Work Profile can be a great enrollment mode for both BYOD devices and company owned devices (in fully managed mode) when using Microsoft Intune. With an Android Enterprise Work Profile, you separate private apps and data from the corporate apps and data to prevent data leakage. Depending on the manufacture and the...
Intune, Microsoft, Microsoft 365, Remote Help
How to enable and configure Microsoft Remote Help in Microsoft Intune
Recently Microsoft made Remote Help generally available. Remote Help is an application to offer remote assistance to end users that are using Windows 10 or 11 endpoints. Remote Help is a Microsoft Endpoint Manager Premium add-on. It can be fully configurated within the Microsoft Endpoint Manager admin center. Both the IT support engineer and the end user needs to authenticate through Azure AD...
Intune, Microsoft, Microsoft 365
How to update Security Baselines in Microsoft Intune to a newer version
Security Baselines in Microsoft Intune are templates that contains policy configurations that by default are configured with the best practice from the Microsoft security teams. And that makes a Security Baseline the perfect starting point when creating a new policy set for the modern workplace. When creating a Security Baseline, all settings are pre-configured with the security best-practice...
Intune, Microsoft, Microsoft 365
How to exclude Shortcuts from syncing to OneDrive with Microsoft Endpoint Manager – Microsoft Intune
Microsoft OneDrive is a great service for storing your files. And when you have “Known Folder Redirection” enabled, your Desktop, Documents and Pictures folders are redirected to OneDrive and synched to the cloud. This way you have the same Desktop, Documents and Pictures folders available on every device which benefits the user experience. However, you have applications that place a...
Microsoft, Windows 11, Windows Server
How to move or restore a Windows 11 VM in Hyper-V with TPM enabled (Shielded VMs)
In my previous blog I showed you step-by-step how to install Windows 11 as a VM in Hyper-V. The difference with Windows 10 is that Windows 11 requires a TPM (Trusted Platform Module) chip in order to boot. As you could read in my previous blog, this is no problem at all. However, I’m the kind of guy that regularly reinstalls my laptop/desktop and also uses multiple devices to run the same...
Windows 11 has now been released over a month ago and many companies are now considering the switch. It is always good to test extensively first and get some hands-on experience. If you don’t have a physical PC available to test Windows 11, a good alternative is to do this in a virtual machine (VM). Personally, I use VMs a lot when I need to test Microsoft Intune configurations or when...
Intune, Microsoft, Microsoft 365
How to setup Android Zero-Touch Enrollment with Microsoft Endpoint Manager – Microsoft Intune
Android Zero-Touch Enrollment is a (free) service to automate and enforce MDM enrollments for Android devices running Android 9 or higher, independent of device manufacture. It offers end-to-end security because the MDM enrollment cannot be skipped by the user. The first time the user tuns on the device, clear instructions will be displayed to start the enrollment. All policies and applications...
Intune, Microsoft, Microsoft 365
How to add iOS devices manually in the Apple Business Manager (ABM) for automatic Microsoft Endpoint Manager – Microsoft Intune enrollment
It’s a best practice to enroll corporate owned iOS/iPadOS devices via the Apple Automated Device Enrollment (ADE) program (PKA Device Enrollment Program – DEP). It offers “out of the box” security because the enrollment with the MDM solution will start automatically and the user can’t work around it. Next to automatic device enrollment it makes it possible to set...
Intune, Microsoft, Microsoft 365, Windows 365 Cloud PC
How to create and deploy a Windows 11 custom image with Windows 365 Enterprise Cloud PC
Less then a month ago I wrote a blog about How to create and deploy Windows 365 Enterprise Cloud PC Custom Images. What could be the case with cloud services such as Windows 365 is that developments can go fast. So, what have changed in the last 4 weeks after wring my previous blog? In this case a lot! First of all, Microsoft released Windows 11 (Oct, 5) and made it directly available for Windows...
Microsoft, Microsoft 365, Power Automate, Privileged Identity Management (PIM)
How to stop receiving “Your weekly PIM digest” emails – A workaround
Microsoft Privileged Identity Management (PIM) is a powerful Azure AD service that provides time-based and approval-based role activation for access to resources in Azure, Azure AD and connected Microsoft services like Microsoft Intune and Microsoft 365. In company environments I always recommend to use PIM. Once PIM is activated you will receive a “Weekly PIM digest” if you have Privileged Role...
Intune, Microsoft, Microsoft 365, Windows 365 Cloud PC
How to create and deploy Windows 365 Enterprise Cloud PC Custom Images
UPDATE : A new version of this blog with Windows 11 Gen2 images is available here. With Windows 365 you can deploy your Cloud PCs with a standard Azure Gallery image. There are Windows 10 Enterprise images available optimized for Cloud PC, with or without the Microsoft 365 Apps pre-installed on it (including Microsoft Teams with AV redirection optimization). However, with Windows 365 Enterprise...
Intune, Microsoft, Microsoft 365, Windows 365 Cloud PC
How to implement and manage Microsoft Windows 365 Cloud PC
In August 2021, Microsoft released Windows 365 Cloud PC. A new cloud-based service that provides Cloud PCs to end users. With this Windows 365 Cloud PC, users get their own personalized desktop in the cloud, which can be accessed from anywhere on any device. It is optimized for Microsoft 365 including Microsoft Teams AV redirection. Unlike Azure Virtual Desktop you pay a fixed price per-user per...
About Robin Hobo
I am a Technology Specialist working for Microsoft with focus on the Modern Workplace. I am specialized in Microsoft Intune, Azure Virtual Desktop (AVD), Windows 365, Windows 11 and Azure AD. Also interested in mental health, NLP and personal development.
For more information, see the About Me page or my LinkedIn profile.