In the world of modern device management, ensuring that all devices are compliant and secure is needed. However, when OEMs use the Home edition of Windows to create their base…

Managing user privileges effectively is crucial in today’s security landscape. Microsoft Intune’s Endpoint Privilege Management (EPM) is designed to handle this by allowing users to request elevated privileges without needing…

With the just-released Windows attestation, we have some extra to tell about MDM Hardening. In this blog post, we will discuss the feature, what it is, what it does, and…

This blog post will provide a detailed guide for Intune engineers on performing basic MDM hardening and strategies for taking it to the next level. We'll also explore the key…

With the latest Windows update cycle, Microsoft has introduced a valuable enhancement called Config Refresh. With these new settings, we can easily maintain clean and secure devices. Config Refresh is designed…

Autopilot device preparation simplifies setting up and configuring devices for your organization. This new feature from Microsoft streamlines the deployment of devices and ensures that they are properly configured for…

Corporate identifiers are another piece of the puzzle. Following the introduction of Autopilot Device preparation, it's important to enhance security by restricting the addition of only allowing corporate-owned devices. Before…

Filtering in Microsoft Intune is a way to narrow down the assignment scope of a policy based on certain rules. When you create a policy, you can use filters to…

Support Approved is a new feature within Endpoint Privilege Management (EPM), this will be a big feature to allow users to elevate a software installation and a support engineer can…

This Blog will be about the basics of troubleshooting Windows updates for business (WUfB) and the specific case we had where GPO policies were not cleaned by the imaging process…