If you are starting your Intune journey, you don't want to miss out on this session with Rob York, James Robinson | MVP and me at 3pm today - Implementing Modern Management - Consultant Notes from the Field at MMS 2024 at MOA sched.co/1cK2D MMS Minnesota #MMSMOA Sched #MSIntune

Coming to our session on device security tomorrow and have deeper thoughts or questions for me or MikeDano?
We're also doing Stargazing sessions right after! Go find Wally to sign up!

sched.co/1cK1s

Absolutely blown away that the #OpenIntuneBaseline was referenced in the Windows Hardening session by the excellent Kent Agerlund and Jörgen Nilsson! 💛
#MMSMOA #Community #Security

Quote of the week from #MMSMOA so far.. goes to Adam Nichols “making Hybrid Windows Autopilot succeed was a bit like winning a race that nobody ran” #Priceless

Last 36 hours or so has been a blur, but it's time for some MMS Minnesota craziness.
#Intune #Community

New Blog Post! 📤
Taking a peek behind what makes the new Dell BIOS Configuration in #Intune tick, but also explaining how I screwed up, so you don't have to!

Definitely didn't forget I finished this...
skiptotheendpoint.co.uk/under-the-hood…

Only a few more hours to go until Jóhannes and I are live with Danny Guillory Jr and Steve Thomas - PM@MSFT - MBA Candidate - Cat Valet talking all things #Intune !

aka.ms/UEM/MVPsOnMana…

If all you anti-AI admins out there could stop trying to disable or block everything that for some people can be vital accessibility tools.
Would you disable spell-check for those with things like dyslexia? How about deleting the Calculator app for those with dyscalculia?

When you love #Lego but you also have #ADHD , a brick separator you inevitably have lying about on your desk can breaking into your new meds a breeze!

Let's break down the device management landscape. What should every IT pro consider in an accelerated world of AI experiences and evolving security needs? Bring your questions and thoughts to Unpacking Endpoint Management April 30th - aka.ms/UEM/MVPsOnMana… #MSIntune

This new mechanism seems to completely ignore all supported policies blocking the MS Store and users accessing Winget.
This is a pretty considerably issue as far as I see it Jason Sandys Demitrius Nelon

3.9.6 Released! Breaking Changes due to default app is being decommissioned. Other changes include skip basic properties in Compare, added support for MSIX apps etc.  Important! Read github.com/Micke-K/Intune… for more info.

Coming to MMS Minnesota?
Come catch me and MikeDano talk device security, and why you and your security team need actually work *together* rather than them just dictating stuff at you.
Security guys, this one is definitely for you too😉

mms2024atmoa.sched.com/event/1cK1s/ju…

We have now fixed the issue for non-EN OS - if you have already tested out the new Security Baseline for 23H2, then you need to create a new baseline with the fix.
Thanks to everyone that has been providing feedback on this.
#MSIntune

I've just released v3.1 of my #OpenIntuneBaseline , code-name 'Well-Known SID'.
Bringing tweaks, fixes, additions, and most importantly, a change log!
github.com/SkipToTheEndpo…

Jörgen Nilsson James Robinson | MVP Intune Support Team 2/2
For customers using a non-English OS, PLEASE AVOID deploying the baseline as is until we’ve confirmed the fix has rolled out to avoid significant impact to devices. We truly apologize for the convenience and appreciate your patience as we sort this out.”

Trying to apply the new 23H2 #Intune Baseline and using a non-English OS? You'll probably break the ability to log into devices because the group names are localised.
Intune Support Team These need changing to the equivalent well-known SID or a lot of devices are gonna go pop.

Tried the new Dell BIOS configuration in #Intune yet?
If you're going to, I stress that you read the docs before you yeet out a policy and unwittingly enable what I'm calling 'BIOS LAPS'

Glad I was writing a new #UnderTheHood blog post, this gets _really_ interesting...

schadenfreude
/ˈʃɑːd(ə)nˌfrɔɪdə/
noun
pleasure derived by someone from observing other admins struggling with hybrid join in autopilot

So after some initial testing on this, a word of warning.
Setting 'Enable App Installer' to 'Disabled' will completely break the ability to install Store-delivered apps via Company Portal, regardless of install context.

Is this the intended behaviour Demitrius Nelon?