STIG audit baseline in Intune: auditing what is actually on the device
Every security baseline in Intune has worked the same way. You pick a baseline, assign it, and Intune pushes settings to the device. The STIG audit baseline does the opposite.…
Windows device configuration policies are moving to Settings catalog template. What you need to know
In recent months, Microsoft has been rolling out an important change that impacts how we configure Windows devices through Intune. If you’ve been using device configuration profiles based on the…
Device Query for multiple devices
When managing a modern Windows fleet, keeping track of device security, state, and encryption is key to maintaining a smooth end-user experience. Microsoft’s Endpoint Analytics provides valuable insights into this…
Understanding OMA-DM and Intune’s Policy Enforcement: A Deep Dive into Setting and Verifying Policies
Microsoft Intune’s ability to manage and enforce policies on devices relies heavily on the Open Mobile Alliance Device Management (OMA-DM) protocol. This XML-based, lightweight protocol is at the heart of…
Personal Data Encryption in Windows 11: A Deep Dive into Benefits, and Deployment
Microsoft has introduced a significant new feature in Windows 11, version 24H2: Personal Data Encryption (PDE). This feature strengthens file-level security, providing an effective solution for safeguarding sensitive data. Let’s…
Understanding Device Inventory in Microsoft Intune: A New Era of Device Management
Managing device health and configuration is no small task, especially in modern enterprise environments. Microsoft Intune’s Device Inventory feature is about to streamline this process. Let me explain why this…
Hotpatch for Windows 11 Enterprise: Minimize Downtime, Maximize Productivity
As organizations increasingly rely on a stable and secure IT environment, balancing security updates with user productivity has become a key challenge. Enter Hotpatch, a feature for Windows 11 Enterprise,…
Resolving MSSense Issues in OEM Base Images for Windows 11 24H2
In the world of modern device management, ensuring that all devices are compliant and secure is needed. However, when OEMs use the Home edition of Windows to create their base…
Windows MDM Hardening: What is Microsoft doing with Windows attestation?
With the just-released Windows attestation, we have some extra to tell about MDM Hardening. In this blog post, we will discuss the feature, what it is, what it does, and…
Windows MDM Hardening: What can we do?
This blog post will provide a detailed guide for Intune engineers on performing basic MDM hardening and strategies for taking it to the next level. We’ll also explore the key…