Microsoft has created a handy Outlook extension to Edge. You will be able to send and receive emails, use calendar and todo-list, all from the extension! The extension is currently in preview but seems to work well. In this blog we will have a look at how to distribute the extension using “Microsoft Endpoint Manger” […]
Install Outlook extension in Edge using MEM Read More »
In part one we created a log analytics workspace and used a workbook to identify legacy authentication. In this part we will have a look at how to block legacy auth by using a Conditional Access policy. Step 1 (communicate). The workbook from part 1 comes useful when we want to identify users still using
Disable Legacy Authentication Part 2 Read More »
Background In this blog series we will look at what Legacy Authentication is and how to improve our security posture by disabling it. There are quiet a few guides like this already out there but I hope this step-by-step guide will be a good complement and shine some light on how to get going. In
Disable Legacy Authentication Part 1 Read More »
In part two we deployed a device encryption policy to make our Windows 10-devices encrypt the OS-drive with Bitlocker and upload the Bitlocker info to Entra ID. In the last part of this blog series we will look at the admin and end-user experience when you are in need of the Bitlocker recovery password. Admin
Move Bitlocker Management to Intune Part 3 Read More »
In part 1 we had a look at: In this part we will: Let’s get to it! We will start off by deploying a simple PowerShell script to have our currently encrypted devices upload Bitlocker info to Azure AD. The Bitlocker info will be available on each device object in AAD and Intune. Optional: Create
Move Bitlocker Management to Intune Part 2 Read More »
You will find part 2 of this series here You will find part 3 of this series here Demo Environment In this blog post divided into three parts we will look at how to move from traditional Bitlocker management to Microsoft Intune. Our demo environment looks like this: How Export MBAM data to an Excel
Move Bitlocker Management to Intune Part 1 Read More »
Background:Today I run into an issue after doing some changes to a Conditional Access policy. More precisely I changed the MFA-settings. Issue:“Azure AD Connect” was unable to sync and “Synchronization Service” showed no warnings or errors. PowerShell gave below error message and the “Showing modal dialog box” indicated that this issue was related to MFA.
Azure AD Connect Sync Issue: Showing a modal dialog box… Read More »
Download from GitHub:https://github.com/NicklasAhlberg/AutopilotTool .Version 1.0.3.0 (2023-07-05)– The tool has been updated to reflect the changes done to MS Graph.– Changes to the UI – No need to pre-define the tenant/domain name, just sign on and you are good to go– A registered app is needed .Version 1.0.2.6 (2022-12-14)– It is now possible to add multiple
Autopilot Tool – Upload HW hash with a user interface Read More »
Issue:I recently run into an error with Windows AutoPilot and got the 0x801c0003 error code. I reset TPM, UEFI FW and Secure Boot but that did not solve the issue so I dug into it. Specifications: Cause:It turned out that the device was missing a TPM FW update and below is how I troubleshot and
Windows Autopilot White Glove 0x801c0003 error Read More »
This website uses cookies. By continuing to use this site, you accept our use of cookies.
