Benoit's Corner

Intune – More devices information now available

The close integration of SCCM and Intune/Endpoint Configuration Manager has made one more step. As you know, you can now see Device Collections and SCCM Client Details from the Intune/Endpoint Configuration Manager (see https://t.co/mp0I0MntlM). Well, now you can also get access to the CMPivot feature (see https://docs.microsoft.com/en-us/mem/configmgr/core/servers/manage/cmpivot), a timeline showing the last activities or Resource […]

Intune – More devices information now available Read More »

Azure – Unable to delete an empty recovery vault

Leave a Comment / Microsoft Azure / Benoit HAMET / September 8, 2020 / Azure, Azure Recovery, Azure Recovery Vault, Recovery, Recovery Vault

Recently I had an interesting issue with an Azure Recovery vault I was not able to delete with the error telling me there was still resources within the vault (see below). Off course I have double or even triple check there was no resources still in the vault or still protected by the vault. Vault

Azure – Unable to delete an empty recovery vault Read More »

Intune – Deploy printers used with Universal Print with Intune/Endpoint Configuration Manager

Leave a Comment / Beta / Preview, Endpoint Configuration Manager, Microsoft Intune / Benoit HAMET / September 7, 2020 / Endpoint Configuration Manager, Intune, Universal Print

As you may know, a new service called Universal Print has been released in preview allowing you replacing your on-premises print servers (see https://t.co/gOagPc8slW). Well, you can now deploy the printers used by with Universal Print using Intune/Endpoint Configuration Manager to your devices. Off course, the first thing to do is to implement and configure

Intune – Deploy printers used with Universal Print with Intune/Endpoint Configuration Manager Read More »

Azure AD B2C – New access risk insights and Conditional Access are now available in preview

Leave a Comment / Azure Active Directory, Beta / Preview, Security / Benoit HAMET / September 4, 2020 / AAD B2C, AAD Conditional Access, Azure Active Directory B2C, Azure AD B2C, Azure AD Conditional Access, Conditional Access, Insights Access Risk, Insights Risk

As you know Microsoft Cloud services identity is based on Azure Active Directory (AAD). You may also know that Azure AD is not only available for corporate authentication for your users or external partners companies but you can leverage Azure AD for you business to consumer (B2C) application with Azure AD B2C. Well, Azure AD

Azure AD B2C – New access risk insights and Conditional Access are now available in preview Read More »

Azure – Automatically block IP’s in Network Security Group when brute force attack is detected

Leave a Comment / Microsoft Azure, Security / Benoit HAMET / September 2, 2020 / ASC, Azure, Azure Security, Azure Security Center, Network Security Group, NSG, Security

As you know Azure Security Center is your one stop shop to help you stay on top of your security posture for your resources hosted in Azure. As there is more and more resources hosted on cloud services, security and protection against attack is more important than ever. As you know you can protect your

Azure – Automatically block IP’s in Network Security Group when brute force attack is detected Read More »

Intune / SCCM – You can now apply Microsoft Defender policy using Intune/Endpoint Configuration Manager on devices managed by SCCM

Leave a Comment / Endpoint Configuration Manager, Microsoft Intune, System Center / Benoit HAMET / August 31, 2020 / Defender, Endpoint Configuration Manager, Intune, Microsoft Defender, SCCM, SCCM 2002, SCCM Current Branch 2002, System Center, System Center Configuration Manager, System Center Configuration Manager 2002, System Center Configuration Manager Current Branch, System Center Configuration Manager Current Branch 2002, Windows Defender

As you know, SCCM and Intune/Endpoint Configuration Manager are being more and more close with each other. Well, now you can define and apply Microsoft Defender policy from Endpoint Configuration Manager on devices managed by SCCM. To be able to do it, you need to use the latest version of SCCM Current Branch 2002 with

Intune / SCCM – You can now apply Microsoft Defender policy using Intune/Endpoint Configuration Manager on devices managed by SCCM Read More »

Azure AD – Conditional Access policies now applied to all client application by default

Leave a Comment / Azure Active Directory, Security / Benoit HAMET / August 31, 2020 / AAD, AAD Conditional Access, Azure Active Directory, Azure Active Directory Conditional Access, Azure AD, Azure AD Conditional Access, Conditional Access, Security

By now, you should already know the Conditional Access feature provided with Azure AD, helping you defining conditions to authorize access to applications/resources – like requesting multi factor authentication when outside of the corporate network. You should also know that legacy authentication endpoints (like SMTP, POP or IMAP) should be blocked. Well, an important update

Azure AD – Conditional Access policies now applied to all client application by default Read More »

Intune / Windows 10 – Unable to turn on BitLocker with conflicting group policy error

10 Comments / Endpoint Configuration Manager, Microsoft Intune, Security, Windows / Benoit HAMET / August 27, 2020 / BitLocker, ECM, Endpoint Configuration Manager, Intune, Windows 10

Recently I came across an issue turning on BitLocker with the error on a Windows 10 device BitLocker Drive Encryption cannot be applied to this drive because there conflicting Group Policy settings for recovery options on fixed data drives. Also got the error before starting the troubleshooting You can’t create both a recovery password and

Intune / Windows 10 – Unable to turn on BitLocker with conflicting group policy error Read More »

SCCM – You can now use the Company Portal for software deployment

Leave a Comment / Endpoint Configuration Manager, Microsoft Intune, System Center / Benoit HAMET / August 25, 2020 / ECM, Endpoint Configuration Manager, Intune, Microsoft Intune, SCCM, SCCM 2006, SCCM Current Branch 2006, System Center, System Center Configuration Manager, System Center Configuration Manager 2006, System Center Configuration Manager Current Branch, System Center Configuration Manager Current Branch 2006

If you are using System Center Configuration Manager Current Branch (SCCM CB), also known as Microsoft Endpoint Configuration Manager Current Branch, in co-management mode, you can now also use the Company Portal application for the software deployment workload. To be able to use the Company Portal for your software deployment when the Client apps workload

SCCM – You can now use the Company Portal for software deployment Read More »

Azure – You can now get notification when your Secure Score downgrade

Leave a Comment / Microsoft Azure, Security / Benoit HAMET / August 21, 2020 / Azure, Azure Secure Score, Azure Security, Secure Score

After releasing a Power BI dashboard to follow up on the evolution of your Azure Secure Score (see https://t.co/U1I15FSuBP), you can now get an email notification if your Secure Score is reducing. The playbook is available for deployment in the Azure Security Center Github repository here https://github.com/Azure/Azure-Security-Center/tree/master/Secure%20Score/Secure%20Score%20Reduction%20Alerts Connect to the above URL and use the

Azure – You can now get notification when your Secure Score downgrade Read More »