Browsed by
Month: March 2020

The New Endpoint Security

The New Endpoint Security

Just noticed a new change to the Intune Portal: Endpoint Security (preview) Some of the device configurations you made for your device like Windows Defender/ Defender ASR Rules etc, can now be configured in Endpoint Security . I also noticed a new graph uri wich is used to configure this settings with powershell: https://graph.microsoft.com/beta/deviceManagement/intents/174410b9-d666-4335-878e-05bb81ad9709/categories/dc88f141-e3dd-4baf-956c-5a7e51c6867d/settings You have multiple categories: Cloud Security,Userexperience etc. I will take a deep dive this week to try and create some import and export functionality for this…

Read More Read More

How to deploy HKCU registry changes while blocking powershell.

How to deploy HKCU registry changes while blocking powershell.

Microsoft just released an update to Intune. The old GPO’s structure is back. But it is still missing settings… Sometimes you really want to push a simple hkey_current_user setting. Normally that is not a problem when you are NOT blocking PowerShell 🙂 . But my opinion.. not blocking PowerShell for the non-admins is a no go. Because malware/cryptoware/privilege escalation uses most of the time Powershell. And a normal user.. does not need access to PowerShell (except for loading scripts 🙂…

Read More Read More

Remove all Local Admins!!

Remove all Local Admins!!

A while ago i posted a linked message to ask for the differences between a normal Azure Ad join and the famous Autopilot function. Of course I know the differences… but I wanted to start a conversation. Because most of the benefits of autopilot, I think you can the same with a regular Azure Ad join. To start with one of the benefits: Removing the local admin. This is certainly a thing you have to make sure of this is…

Read More Read More

Website Online

Website Online

I am very happy to tell everyone my website is finally online. Powershell + Intune + Automation = Call4Cloud. I will be posting blogs about anything about this subjects…

My first blogpost :)

My first blogpost :)

I have been thinking a lot about creating a website and to start blogging. The time is now. This a video (in dutch…) how I configured one of my test office365 tenants. The setup of this tenant took about a half-hour. Below the video are some details of what I have done in about a half-hour (after waiting a long time for the Microsoft 365 Business License to be activated on the tenant) Some stuff I had to do manually….

Read More Read More