Browsed by
Category: Proactive Remediations

The Texas Chain Saw Bitlocker Remediations

The Texas Chain Saw Bitlocker Remediations

Comments 0 Comment

This blog will be about some pro-active remediations and Intune Role Assignments to make sure your service desk can help your users when they need to enter the Bitlocker recovery key and nothing more. I was inspired to check if I can come up with an idea to solve this problem (until Microsoft comes up with a solution) What admin role grans permission to view devices’ bitlocker recovery keys? – Microsoft Tech Community So why not using proactive remediations to…

Read More Read More

The LAPS: Reloaded / Revolutions

The LAPS: Reloaded / Revolutions

Comments 2 comments

First, A shout out to Peter Rising | LinkedIn for delivering the blog title. We had a nice movie discussion, which movie is better: Terminator 1 and 2…. We also talked about the Matrix… Guess where the blog name came from. This blog will be about an Idea I had to use proactive remediations to create a sort of LAPS (Local administrator password solution). I have mentioned it a lot, you will need to make sure your end-users do not…

Read More Read More

Things to block in Denver When You’re an IT Admin

Things to block in Denver When You’re an IT Admin

Comments 0 Comment

This blog (old but it is being kept up to date) will be about some more information and options on how to block administrative tools like regedit and the command Prompt. I am going to divide it into multiple parts and I will show you all of the options you have to prevent access to the CMD. Applocker Prevent access to administrative tools (settings catalog) Don’t run specified applications (settings catalog) Proactive Remediations Conclusion 1.Applocker In one of my older…

Read More Read More

The HKCU Registry bridge On the River PowerShell.

The HKCU Registry bridge On the River PowerShell.

Comments 3 comments

This blog will show you the 2 options you got when you need to deploy HKEY_Current_User Registry changes that need to reapply at each user login or each hour. When you are blocking PowerShell this could be difficult I will divide this blog into 4 parts Intro PowerShell Script ProActive Remediations Conclusion 1.Intro Microsoft is continuously improving Intune so you have got 2 options now to configure some old fashioned GPO settings. You could do this with the Administrative Templates…

Read More Read More