Intune, Windows, Apple and Windows 365: enrolling devices, pushing policy and keeping endpoints managed from one place.
Windows Autopilot has been around for years, and many admins have built entire deployment processes around what we now call “Autopilot V1.” But recently, there’s been a ton of buzz around Autopilot Device Preparation—also known as Autopilot V2. On the surface, V1 and V2 look nearly identical: A new device is purchased, Windows boots into […]
IT admins still fall into two common traps when managing local administrator accounts across user workstations: Using the same password across all endpoints. Allowing end users to be local administrators on their devices. While this can make things easier operationally it creates a massive attack surface. Those same users can install malware, fall victim to […]
Onboarding new devices has traditionally been one of the most painful, time-consuming tasks for IT teams. Hours are wasted configuring operating systems, installing applications, and applying security settings before a new hire can even log in. But with Windows Autopilot, all of that changes. Autopilot streamlines device provisioning so that you no longer have to […]
Below you will find a list of security controls for Microsoft Intune that will help secure your environment. Keep in mind these are recommendations and will not be able to be used in all environments due to unique constraints. Each control should be evaluated and tested appropriately. I have also written security baselines across the […]
Many MSPs have been using a third-party tool like JAMF or Addigy to manage macOS devices in customer environments because of the limitations of Intune. Over the years, Microsoft has been adding a good amount of management functionality specifically for macOS devices. One of the latest releases is giving you the ability to manage the […]
Protecting corporate data on unmanaged devices like personal cell phones is extremely important in today’s remote workforce. App protection policies that are part of Microsoft Intune provide an easy way to start containerizing corporate data without inhibiting user productivity. It also provides flexibility so that the device does not need to be unenrolled in a […]
Microsoft recently came out with public pricing for Windows 365 as of August 2nd, 2021. In this article, I wanted to break down some of the considerations when choosing a plan and provide some thoughts on positioning this offering to your customers. Above is a breakdown of all the pricing based on different specs. As […]
I wanted to put this article together as a living document to track any helpful tips for Windows 365. I have been doing some more extensive testing and wanted to share some of my experience. Business vs Enterprise Windows 365 business plans have a lightweight deployment where you only need to license users. Cloud PCs […]
Enrolling Devices into Intune can sometimes seem daunting. We are so used to pushing out an agent like we do with our RMM tools. There has traditionally always been problems with how users would enroll their device via the work or school settings because they were not a local admin. In this video, I am […]
Microsoft Intune supports both corporate owned and BYOD (personal) devices. This support extends to both the MDM and MAM solutions that are offered today. When devices are enrolled into the solution, they are automatically classified as either corporate or personal. As an MSP, it is important to understand how these devices get classified so that […]
Microsoft Intune can be extremely powerful because of its MDM and MAM capabilities. Mobile Application Management (MAM) enables MSPs to securely protect corporate data on personal or BYOD devices without having to enroll in the full MDM solution. This is significant so that all administration is scoped only to devices that the company owns. For […]
In this video, I show you how to federate a Microsoft Azure Active Directory domain to Apple Business Manager. This federation allows you to automatically create managed Apple IDs and allows users to authenticate with their Azure Active Directory credentials. This is most beneficial with Intune, where you can control the device lifecycle when it […]
See which Intune and device settings need attention, in about a minute.
CloudCapsule scans 300+ Microsoft 365 controls, including the Intune settings and admin roles that leave a single point of failure, then watches for drift so a fixed setting stays fixed.
No credit card required. Results in < 2 minutes.
