Azure – You can now create exception for Azure Security Center recommendations

Leave a Comment / Microsoft Azure, Security / / / , , ,

As you know, Azure Security Center (ASC) is your one stop shop to get an overview of your Azure security posture and custom recommendations based on your Azure environment. Well, while this quite an important capability, there are some limitations, such as not being able to be selective on which resource(s) a recommendation should apply.

Azure – You can now create exception for Azure Security Center recommendations Read More »

Intune – Android 11 can no longer install trusted root certificate

Leave a Comment / Endpoint Configuration Manager, Microsoft Intune / / / , , , , ,

This is a breaking change introduced by Android 11 when a device is being enroll as Android device administrator. Android 11 can no longer install trusted root certificate on the device – this does not affect Samsung devices. If you are using non Samsung devices enrolled as Android device administrator you will need to manually

Intune – Android 11 can no longer install trusted root certificate Read More »

Azure – You can now use a managed storage account for the VM boot diagnostics

Leave a Comment / Microsoft Azure / / / , , ,

As you know, it is recommended to enable the virtual machine boot diagnostics to help gathering information when troubleshooting virtual machine boot issues (or to simply being able to see if the VM is booting up or has crashed with a blue screen). As you know, the boot diagnostics require the use of a storage

Azure – You can now use a managed storage account for the VM boot diagnostics Read More »

Intune – Use the Group Policy Analytics report to prepare the migration of your GPO to Endpoint Configuration Manager MDM

Leave a Comment / Endpoint Configuration Manager, Microsoft Intune / / / , , , ,

For years, IT administrators have been using group policy objects (GPO) – and still continue today – to manage/configure devices, both clients and servers. With the move to a cloud-based devices management, the need to replicate as much as possible settings set using GPO is more and more relevant. To help you prepare moving from

Intune – Use the Group Policy Analytics report to prepare the migration of your GPO to Endpoint Configuration Manager MDM Read More »

Intune – You can now monitor your Windows Defender devices from the portal

Leave a Comment / Endpoint Configuration Manager, Microsoft Intune / / / , , , ,

As you know, you can manage Windows Defender settings by creating device configuration profiles using Intune/Endpoint Configuration Manager, including devices managed by SCCM (aka on-premises server) – see https://t.co/VG0DaErni1. Well, you can now monitor the health of all the devices protected by Windows Defender directly from the Intune/Endpoint Configuration Manager portal, including the ones managed

Intune – You can now monitor your Windows Defender devices from the portal Read More »

Azure AD – You can now automate actions when reviewing guest/external users access

Leave a Comment / Azure Active Directory / / / , , , , ,

As you  know, you can invite external users (known as guest) to your organization, leading to the creation of a guest account in your Azure AD. You also know that reviewing such external access is always a complicated tasks. To assist in this process, Microsoft has introduced some time ago already a feature called Azure

Azure AD – You can now automate actions when reviewing guest/external users access Read More »

Intune – Additional permissions for the Endpoint Security Manager role

Leave a Comment / Endpoint Configuration Manager, Microsoft Intune / / / , , ,

As you know, you can delegate permissions to allow certain administrative or management tasks using RBAC (Role Based Access Control) on Intune/Endpoint Configuration Manager. Well, new permissions have been added to the Endpoint Security Manager role: Initiate Configuration Manager action Microsoft Defender ATP Reboot now Remote lock Rotate BitLockerKeys (preview) Rotate FileVault key Shut down

Intune – Additional permissions for the Endpoint Security Manager role Read More »

Intune – You can now configure application updates settings for Android Devices

Leave a Comment / Endpoint Configuration Manager, Microsoft Intune / / / , , , ,

As you know, Intune/Endpoint Configuration Manager allows your administrators to publish applications from the various app stores (Google Play, Apple App Store, custom…) to your mobile devices. Well, administrators can now also define the application update settings (user choice, never, using Wi-Fi only or Always). To enable this option, you need to use an Android

Intune – You can now configure application updates settings for Android Devices Read More »

Teams – Update for the automatic admittance in Teams Meeting

Leave a Comment / Microsoft Teams / / / , , , ,

As you know, when setting up a Teams meeting you can define who can be automatically admitted to join the meeting, defined by your Teams administrator using Meeting policies. Until now, there was few options between everyone, everyone in your organization and everyone in your organization and federated ones, Well, you can now also automatically

Teams – Update for the automatic admittance in Teams Meeting Read More »

Azure AD – Continuous access evaluation is now in preview to improve Conditional Access evaluation

Leave a Comment / Azure Active Directory / / / , , , , , ,

As you know you can implement Conditional Access on Azure Active Directory to determine conditions of access to applications published through Azure AD. You may also already know that Conditional Access evaluation may be delayed because authentication token obtained previously by the client is not yet expired. This means when a connection condition change it

Azure AD – Continuous access evaluation is now in preview to improve Conditional Access evaluation Read More »