Right after enabling App Protection Policies (MAM) for iOS, one user suddenly couldn’t open any protected company data in Edge. Every time the user signed in with his work profile,…

An App Protection Policy for unmanaged devices is often described as a lighter form of device management. That description is inaccurate. It is not a reduced version of MDM. It…

Mobile Application Management protects corporate data inside mobile apps while leaving the device unmanaged. The protection boundary sits around the app, the signed in identity, and the work data, so…

In recent months, Microsoft has been rolling out an important change that impacts how we configure Windows devices through Intune. If you’ve been using device configuration profiles based on the…

For years, OMA-DM (Open Mobile Alliance Device Management) has been the backbone of policy management in Microsoft Intune. It follows a structured yet somewhat rigid model: devices sync on a…

When managing a modern Windows fleet, keeping track of device security, state, and encryption is key to maintaining a smooth end-user experience. Microsoft’s Endpoint Analytics provides valuable insights into this…

One of the challenges we had at a customer with Windows 365 Cloud PCs was ensuring that the system time zone aligns with the specific needs of the project team,…

Microsoft Intune’s ability to manage and enforce policies on devices relies heavily on the Open Mobile Alliance Device Management (OMA-DM) protocol. This XML-based, lightweight protocol is at the heart of…

Microsoft has introduced a significant new feature in Windows 11, version 24H2: Personal Data Encryption (PDE). This feature strengthens file-level security, providing an effective solution for safeguarding sensitive data. Let’s…

Let’s kick this off with a quick throwback to Endpoint Privilege Management (EPM). Remember when EPM made its debut, and we all got a glimpse of Microsoft’s shiny new platform—MMP-C…