Applocker - Call4Cloud

Public Desktop icons and Adminless: The far side of Intune

January 15, 2021 rudyooms Comments 0 Comment

This short blog will be about, why users don’t need admin permissions to delete the public desktop icons. There are not a lot of reasons why your Azure Ad users need to be local admins on their devices. You can do a lot even without admin permissions. To summon a few: -Restarting services can be done without local admin permissions The non admin user: The battle of restarting services – Call4Cloud -Installing applications The PowerShell Win32 App Express – Call4Cloud -Installing…

Read More Read More

The Applocker Games: Catching the events

January 7, 2021 rudyooms Comments 0 Comment

The past year I blogged a lot about securing and monitoring your devices. Of course, Microsoft 365 E5 is the way to go when you want to maximize your security, but for the SMB the license can be too expensive. For these customers, Microsoft 365 business premium is the best choice. But when you choose Microsoft 365 Business premium you can’t make use of the advanced security features. Of course, by now you have implemented adminless and AppLocker on your…

Read More Read More

Applocker: The Meltdown

January 6, 2021 rudyooms Comments 0 Comment

This short blog will be about what to do when you have locked yourself out of your device when implementing Intune Applocker device configuration policies. Some time ago I blogged about how a not configured DLL rule can break your devices. The Appocker Dilemma – Call4Cloud At that time, just changing the Applocker device config inside Intune did the job. But what if the new Applocker policy just won’t sync to the device and the old policies still apply. At…

Read More Read More

Not yet another AppLocker Blog.

November 17, 2020 rudyooms Comments 0 Comment

Provisioning your non (for now) Azure ad enrolled Windows 10 Pro devices with AppLocker can be very hard because AppLocker won’t work on Windows 10 Pro devices without Intune… at least that’s what I thought. When configuring AppLocker on a Windows 10 pro device, you will notice this message inside the event log: component not available on this SKU. Take a look at the operating system requirements… Some time ago I created a blog about how you can automatically wipe and reset your domain joined devices to enroll them with autopilot. In this PowerShell script…

Read More Read More

The Appocker Dilemma

October 6, 2020 rudyooms Comments 0 Comment

This blog will be about how a “NotConfigured“ AppLocker policy can come back to haunt you. Implementing AppLocker is always a wise thing to do even when there is a possibility it “breaks” your Windows 10 installation. In one of my last blogs, I pointed out that implementing Microsoft 365 will help you with your ISO 27001 certification journey. When you have implemented AppLocker correctly you’re able to cross off some of the categories: A.9.4.4 Use of Privileged Utility Programs…

Read More Read More