Microsoft announced that Multi Admin Approval (MAA) now also applies to Graph API calls made by apps and service principals. Until now MAA only applied when an admin made changes in the Intune portal. But that changed. From now on, automated scripts and tools that use app-only tokens are intercepted too.
Continue Reading
In the first sip we landed on the most important mental model for Intune automation: the portal is a UI, Graph is the engine. Every click you make in Intune ends up as an HTTP request to Microsoft Graph. If you can read those requests, you can reproduce them, although the most of them. If you can reproduce them, you can automate them.
Continue ReadingWhen I started working more seriously with Intune, one thing became clear fairly quickly.
Intune is a solid product. It’s powerful, flexible, and allows you to manage a wide range of settings from a single place.
Continue Reading
Storage management is a critical aspect of device administration that often gets overlooked until it’s too late. Low disk space can cause application failures, prevent updates from installing, and impact user productivity. For IT administrators managing hundreds or thousands of devices through Microsoft Intune, manually checking disk space on each device is simply not feasible.
Continue Reading
Microsoft Intune’s security baselines are a cornerstone for enforcing consistent security settings across devices. However, as new baselines are released or existing ones are updated, administrators often face the challenge of identifying differences between their current baseline and the new one. This process becomes even more critical when customizations are involved, as highlighted in this Microsoft blog post.
Continue Reading
A while ago, I got asked to preconfigure an start menu for end users.
My first approach was deploying a start menu using the settings catalog in Intune. This works great but disadvantage using the settings catalog is that a user has no option to create an own start menu.
The start menu will be overwritten by the Intune policy. That was not the goal for our project.