How Microsoft / Intune is shifting to Declarative Device Management (DDM) by using the declared configuration service
Dual Enrollment / MMP-C Light for Workplace Joined Devices?
Explore WorkplaceJoin_DualEnrollment, dual enrollment for Workplace Join devices, and the role of MMP-C Light in shifting Intune policies
IsTPMAttested: The Ultimate Attestation Security Gate
This is the fourth and, for now, last blog post in the Windows Enrollment Attestation series. In it, I will explain how the three previous blogs led me to the […]
InitiateRecovery: The Power of Hardening the Intune Enrollment
This is the third blog in the Windows Enrollment Attestation / MDM Hardening series. In it, I will examine what happens when we combine the amazing AllowRecovery CSP and the […]
All the Intune MDM Certificate Recovery We Cannot See
This blog will be the second one in the Windows Enrollment Attestation Series!! And let me promise you one thing!!! The words rabbit hole will get a new meaning!! I […]
MDM x TPM: The MDM Hardening
This blog will be the first one in the Windows Enrollment Attestation / MDM Hardening series. In it, I will take a closer look at a beautiful function/feature that was […]
When and how does a device sync with MMP-C (Next Gen Intune)”
In this blog, I will examine the same things as Niehaus but this time the next-generation Intune, MMP-C. I will also examine the sync scheme and show you all the strings attached.
Local Administrator, and Autopilot Settings, and Entra Settings! Oh, my!
In this blog, I will examine the new Entra local administrator settings, which prevent users from becoming local administrators on their devices during the Entra ID Join. I will focus […]
Houston, we have a TPM Attestation problem
This blog will be an additional blog to the TPM attestation series I wrote some time ago. In this one, I am going to take a closer look at why […]
Autopilot: Escape the Administrator
Did you ever run into an issue in which the user was still in the local administrator group after the device was enrolled with Windows Autopilot (at least that is […]