Starting with Window 10 build 1709, it is possible for administrators to re-initialize Windows 10 devices to remove personal files and settings and revert the device to an original state, while keeping the device enrollment. Enable the policy To make Windows Automatic Deployment available from the logon screen, you must first enable the policy; which …
Intune – Enable Windows Redeployment from logon screen Read More »
A new option has been his apparition on the Intune management portal when assigning applications. You can now assign an application as available to all users with enrolled devices; you do not need anymore to assign it to a group At the time of writing this post, this option is only available for Microsoft Store …
Intune – You can now assign mobile app to all users Read More »
With the latest Intune update, you can now Remote lock a registered device from the Company Portal To do so, just logon to the Company Portal, select the device you want to remote lock and click on the Remote Lock button
The latest update for SCCM Current Branch is now available and includes the announced co-management feature. The co-management feature allows you to manage your devices with Intune and SCCM without having to setup an Intune subscription on SCCM. Especially in scenarios where Windows 10 Azure AD Joined device needs to use the SCCM agent. Once …
SCCM – Co-management is now available in SCCM Current Branch (1710) Read More »
On January 2018, conditional access policies for Intune will be moved for good to Azure AD. Until now (and January 2018), conditional access configuration is/was available through the ‘classic’ Silverlight Intune portal, Intune App Protection (MAM) blade and classic Azure AD portal. If you have policies configured on any of these previous access point, you …
Intune – Conditional Access is moving to be only on Azure AD Read More »
With Windows 10 build 1709 (Fall Creators Update) and Intune, you can now provide details to the end-user while enrolling the device. This can be quite helpful to let them know what is going on as well as for troubleshooting purpose. To enable and configure it, you need to logon to your Azure ARM portal …
UPDATE January 2023 It is now easier to enable this option without a custom device profile https://t.co/IVCMZ5nCmk UPDATE 21 nov 2017 You can also use the registy key HKLM\Software\Policies\Microsoft\AzureADAccount to enable this. Create a DWORD key named AllowPasswordReset with the value 00000001. I have tested with an AAD Joined device managed with SCCM. Will test …
Azure AD – Allow end-users to reset password or PIN from the login screen Read More »
Troubleshooting Intune issues can be painful and complicated. To help you in this task, a new troubleshooting assistant has been introduced. Access to this troubleshooting assistant is easy: either use the direct URL http://aka.ms/intunetroubleshooting or through the portal by searching for Intune and go to the Help and Support\Troubleshoot section Then you start troubleshooting the …
Intune – Troubleshooting assistant to resolve end-user’s issues Read More »
With the June 2017 updates for Intune, it is now possible to switch the MDM (mobile device management) authority from Intune to SCCM Hybrid and vice-versa without opening a support request AND without having to re enroll devices already enrolled (see https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/change-mdm-authority)
In the coming months, Microsoft Intune will be updated to allow only iOS 8.x or later to be enrolled. Existing enrolled devices will not be impacted and will continue to be managed for a limited time but it will not be possible to enroll new devices running older version of iOS. As usual, this is …
Microsoft Intune – Enrollment support change for iOS Read More »
