After 3 days at Experts Live in Berlin, my speaker duties are finished. This conference was pretty new to me and I would like to share my experiences. I have delivered 4 contributions to this great conference, 2 sessions where I have been talking about Microsoft Intune, Azure AD, Conditional Access and Windows 10 Modern IT and 2 discussion panel session talking about much of the same stuff 🙂
This is going to be a short blogpost on the updated experience on what it looks like for a user doing a out of the box Azure AD Join in the Anniversary Edition of Windows 10. There is a few and cool new things giving the user a much better experience.
One thing to notice is that Convenience Pin is disabled by default for Domain Joined or Azure AD Joined machines. Read on to learn how this affects the users.
Back in April 2015 I wrote about how to manage UEFI Firmware settings on the Surface Pro 3 from Powershell. This option has not been available on Surface Pro 4 or Surface Book. I have been looking and waiting for a way to manage this on the Surface Pro 4, and the solution that has come is quite different from what I thought. Continue reading
Businesses are investing a lot in securing access to company resources but still achive a good and simple user experience around accessing those resources. Haven’t we all strugled to actually get access to the corporate WIFI which has been secured with certificates? Or what about strugling with changing password on all devices to get e-mail flowing again after we have changed the password on our work computer.
This can all be made easier with provisioning users with a certificate on the mobile device. With the certificates provisioned to the user on the device, we can also provision wifi-profiles, vpn-profiles and even e-mail profiles for on-prem exchange without the user needing to provide a password to connect to it.
Windows Defender Advanced Threat Protection (ATP) is a new service from Microsoft that will enable you to monitor and detect, investigate and respond to attacks on their environment. AP is not replacing your antivirus program, but adding a post-breach layer to the Windows 10 Security Stack.
Windows Defender ATP is using client-side sensor technology that is built into Windows 10 (Anniversary Edition) and a cloud service that is using advanced machine learning and telemetry date to help you investigate the breach and offers you response recommendations. Continue reading
Since Microsoft released support for Windows 10 management through Intune we have been able to manage the settings for Defender through custom OMA-URI settings in the Intune portal. The experience around this har been OK, but not optimal.
In the latest update release for Intune it is now possible to manage all settings for Windows Defender directly from the General Windows 10 Policy template. In this blogpost I will show how this new feature work. Continue reading
In my previous blogpost Intune: Upgrade Windows 10 Edition to Enterprise I was telling how you can configure Microsoft Intune to upgrade your PC’s from Pro to Enterprise Edition. This blogpost is going to show the user experience on how the upgrade itself works from a user perspective with screenshots and explanations. Continue reading
For a while now, Microsoft has been talking about the opportunity to upgrade from Pro to Enterprise Edition of Windows 10 from Intune. The same is for upgrading to Education Edition if you are a School. Finaly this feature has now come to Intune. This means you can upgrade your devices by simple joining them to Azure AD Continue reading
There is a issue on Azure AD Domain joined machines if you want to add AzureAD users to a local group. Lets say you want to enable a user to log on remote to a AzureAD joined machine or you want to add users to the local administrators group. The GUI doesn’t support this at all because you are not able to check for users in the cloud. Continue reading