Author name: Benoit HAMET

Azure AD – You can now use Kerberos to authenticate against Azure AD (preview)

As you know you can use either NTLM and/or Kerberos when authenticating against Active Directory and authentication against Azure AD is using OAuth or SAML. Well, you can now also use Kerberos to authenticate against Azure AD, in the current scenario to access Azure File shares configured to use Azure AD authentication. To be able […]

Azure AD – You can now use Kerberos to authenticate against Azure AD (preview) Read More »

SCCM – The new version – 2111 – of SCCM helps you to prepare to upgrade to Windows 11

With the release of the new version of SCCM (2111), you can now use an updated task sequence to validate the requirements for Windows 11 (TPM 2.0) as well as a new servicing dashboard which includes Windows 11 devices. The updated task sequence now has the option to check for the TPM 2.0 chipset which

SCCM – The new version – 2111 – of SCCM helps you to prepare to upgrade to Windows 11 Read More »

SCCM – You can now ensure applications are uninstalled when users fall out of scope of deployment

As you may already know, the previous version of SCCM (2107) introduced the ability to automatically uninstall application when a device fall out of the scope of deployment. Well, with the release of the new version (2111), you can now also do the same for users

SCCM – You can now ensure applications are uninstalled when users fall out of scope of deployment Read More »

SCCM – The new SCCM Current Branch version 2111 is available

If you use SCCM (also known as Endpoint Configuration Manager), the new version 2111 is now available. As always the deployment will be made gradually but if you want to already install it right away you can use the usual PowerShell script available here https://go.microsoft.com/fwlink/?linkid=2099733 As part of this new release, please keep in mind

SCCM – The new SCCM Current Branch version 2111 is available Read More »

Azure AD – You can now define device filters for conditional access

As you know, with Azure AD you can configure Conditional Access policies to protect and secure access to your resources. These policies apply to users, devices and now to service principals too. Well, sometime you may want to have a conditional access policy to apply to specific devices but you can not create a specific

Azure AD – You can now define device filters for conditional access Read More »

Azure AD – You can now configure conditional access policies for workloads identities (preview)

As you know, if you have at lease Azure AD P1 license you can configure and use Conditional Access to protect and secure access to your resources. The Conditional Access feature has been evolving a lot over the past few years and policies apply to either users/groups or devices. Now a new feature (in preview)

Azure AD – You can now configure conditional access policies for workloads identities (preview) Read More »

Intune – You can now manage when a new Feature Update is being made available

As you know you can manage Windows Feature Upgrade using Intune to ensure your devices are being updated with the latest version of Windows. Well until then you could only define which version of Windows will be deployed with no control on when this version will be made available for installation to the devices. Good

Intune – You can now manage when a new Feature Update is being made available Read More »

Intune – You can now manage the priority for mobile application updates

As you know you can use Intune to deploy application to your mobile devices (Android, iOS). Well, you can now also manage the priority for the application to be updated for Android devices only. This means you can ensure your applications are updated as soon as an update is available and you no longer rely

Intune – You can now manage the priority for mobile application updates Read More »

Azure AD – You can now create custom security attributes (preview)

If you use a Microsoft Cloud service like Office 365 you already know that identity and authentication are managed by Azure Active Directory (Azure AD). Azure AD is very similar to Active Directory meaning objects (users, groups or devices) have attributes you can managed using either the Azure AD portal and/or Azure AD PowerShell. Well,

Azure AD – You can now create custom security attributes (preview) Read More »

Intune – You can now use the new remote assistance tool (preview)

UPDATED to provide the download link to the new remote assistance tool As you know, one of the challenge with Intune/Endpoint Configuration Manager is the ability to provide remote assistance. Well, until know you had either to use the TeamViewer Connector (which in my opinion is not very good – better to simply use a

Intune – You can now use the new remote assistance tool (preview) Read More »