Windows Defender Advanced Threat Protection (ATP) is a new service from Microsoft that will enable you to monitor and detect, investigate and respond to attacks on their environment. AP is not replacing your antivirus program, but adding a post-breach layer to the Windows 10 Security Stack.
Windows Defender ATP is using client-side sensor technology that is built into Windows 10 (Anniversary Edition) and a cloud service that is using advanced machine learning and telemetry date to help you investigate the breach and offers you response recommendations. Continue reading
I had planned to write a blogpost on this since this feature first was announced a while ago.
Everyone that has worked with Microsoft Intune up until recently know that Device Grouping in Microsoft Intune basically has been useless as you had to manually move devices into groups after enrollment. Continue reading
Since Microsoft released support for Windows 10 management through Intune we have been able to manage the settings for Defender through custom OMA-URI settings in the Intune portal. The experience around this har been OK, but not optimal.
In the latest update release for Intune it is now possible to manage all settings for Windows Defender directly from the General Windows 10 Policy template. In this blogpost I will show how this new feature work. Continue reading
In my previous blogpost Intune: Upgrade Windows 10 Edition to Enterprise I was telling how you can configure Microsoft Intune to upgrade your PC’s from Pro to Enterprise Edition. This blogpost is going to show the user experience on how the upgrade itself works from a user perspective with screenshots and explanations. Continue reading
For a while now we have been waiting for the integration between Windows Store for business and Microsoft Intune. This integration will allow you to deploy purchased or free apps from the Windows Store through the Intune admin console. This blogpost is a simple guide on how to set up this integration and deploy your first app. My example is going to use the Intune Company Portal app as an example. Continue reading
For a while now, Microsoft has been talking about the opportunity to upgrade from Pro to Enterprise Edition of Windows 10 from Intune. The same is for upgrading to Education Edition if you are a School. Finaly this feature has now come to Intune. This means you can upgrade your devices by simple joining them to Azure AD Continue reading
There is a issue on Azure AD Domain joined machines if you want to add AzureAD users to a local group. Lets say you want to enable a user to log on remote to a AzureAD joined machine or you want to add users to the local administrators group. The GUI doesn’t support this at all because you are not able to check for users in the cloud. Continue reading
This is my first follow up blogpost on Azure AD Identity protection. In this post I will show how you easily can setup a policy to required your users to register their Multi-Factor Authentication details. Continue reading
Today the preview of Azure AD Identity Protection is available. I just wanted to share my very first experiences on how you add this to your Azure Portal and how the experience using this is at first sight. Continue reading
I have been working with setup of MFA required for enrollement in Intune abit lately and have discovered a couple of things that is not really explained well in the Intune console/documentation.
Enrollment of devices in Intune will in most cases also trigger a device registration in Azure AD. This registration in Azure AD can easily be connected to a MFA requirement by just configure your Azure AD to require MFA for device registration. But this does not apply to all scenarios, so in this blogpost I am going to go into each plattform and explain what happens during enrollment and how the MFA is triggered. I will also cover different options for enrollment of Windows 10 Mobile. Continue reading