Microsoft has just enabled guest access in Microsoft Teams. This is a great add for the service and allows us to collaborate easier and more with our external parties. But, maybe we also want to verify that our external users actually are who they say they are. Let’s try to protect our external user access to teams with Azure MFA. Continue reading
Are you looking for a solution on how to use custom branding for you Intune Company portal for a standalone setup? Don’t like the default color choices in the Intune portal? Maybe you have looked into the hybrid option which gives you an possibility to choose your custom color? Look no further..
Back in April 2015 I wrote about how to manage UEFI Firmware settings on the Surface Pro 3 from Powershell. This option has not been available on Surface Pro 4 or Surface Book. I have been looking and waiting for a way to manage this on the Surface Pro 4, and the solution that has come is quite different from what I thought. Continue reading
I have been working with setup of MFA required for enrollement in Intune abit lately and have discovered a couple of things that is not really explained well in the Intune console/documentation.
Enrollment of devices in Intune will in most cases also trigger a device registration in Azure AD. This registration in Azure AD can easily be connected to a MFA requirement by just configure your Azure AD to require MFA for device registration. But this does not apply to all scenarios, so in this blogpost I am going to go into each plattform and explain what happens during enrollment and how the MFA is triggered. I will also cover different options for enrollment of Windows 10 Mobile. Continue reading
Azure AD Join was introduced in Windows 10 and allows a Windows 10 device to register with Azure Active Directory (Azure AD) and allows Azure AD users to sign-in to the device using their work credentials or more commonly know as their O365 credentials.
Users on these devices will enjoy Single Sign-On (SSO) to Office 365 or other SaaS applications.
The really cool part is that if this user is working within the corporate network the user can enjoy SSO to on-premises Integrated Windows Authentication based resources as well, provided the organization has enabled this functionality. Continue reading
It has been a while since my last blogpost as I have been on parental leave with my 1 year old son. I have also got a new employment since then and are now working for Lumagate AS in Norway as a Senior Consultant. Over to the important stuff 🙂
Domain joining a PC has been the way for companies in a long time to make sure they have a common identity inside their network and control of the PCs in their network. This does not change with Windows 10. However new possibilities come to play when Azure AD becomes a part of the picture. Continue reading
So I have been testing around a bit with password changes on Windows 10 when my machine is joined to Azure AD. I have testet a few scenarios and would like you share my impressions. All scenarios are based on a Cloud Only enviroment and does not have any connections to an OnPremise AD. Continue reading
After the v3.11.760.0 UEFI update is installed on a Surface device, an additional UEFI menu becomes available named Advanced Device Security. Clicking this option brings up a menu with new options. Some of this options is to enable/disable features like the Front and/or Rear Camera, Wireless, Bluetooth, Network Boot as well as some other cool features.
But what if your are to deploy hundreds or even more devices? Going manually through all this devices is not a good way to go. So in this post I am gonna give an introduction to how you can do this in PowerShell instead. Continue reading