The "permission-issue" error with error code 8344 in Azure AD Connect can have two causes. One is not directly an error but more of a security precaution, the other actually has to do with permissions. The error looks like this:...
Make the Microsoft Intune Company Portal yours, or better your companies. Discover the latest customization options that empower organizations to create a personalized and seamless user experience. Explore the world of Company Portal app and website customization in this comprehensive...
Unfortunately, it is not always possible to quickly access a device with an installation problem.Wouldn't it be useful to be able to centrally request and view the logs of your own Win32 apps or PowerShell scripts?You can do exactly that...
Old profiles on a device can unnecessarily burden local storage. There is the "Shared Configuration" in Intune, which automatically cleans up old profiles based on the last login date or the free memory. Unfortunately, this does not always work reliably....
Proactive Remediations Scripts are an excellent way to counteract problems or to check desired states. The possibilities are almost limitless. So are the ideas.Along with AndrewTaylor, Jannik Reinhard and Joey Verlinden I have therefore started a joint project in the...
I keep seeing the requirement that the desktop (or other folders) synchronized with OneDrive must always be available offline. Making all OneDrive folders available offline often leads to more problems because local storage may not be enough. Each user could...
Within the organizational network, traffic is usually monitored by an internal firewall. However, if the device is outside the "four walls" and no VPN, proxy or third-party tool is used to monitor Internet traffic, the end user can move freely...
Conditional Access Policies that query "Device Info" such as the compliance status or a filter do not work natively in all browsers. Since devices that have a compliance status are mostly managed anyway, we can easily distribute these settings via...
For daily support work, most of the same information is needed from the user, such as username, device name, network information and group memberships. This information can be displayed to the user with a tool, for example. But with longer...
In my quest to enhance productivity and streamline user experiences within a corporate environment, I explored how to implement single sign-on (SSO) with Mozilla Firefox. This article dives into the seamless integration of SSO for Entra ID, formerly known as...
In my experience with Windows Autopilot deployments, I've found that disabling the Account Setup phase can significantly reduce deployment times. This phase, part of the Enrollment Status Page (ESP), often consumes time even when no user-targeted applications or profiles are...
Intune itself already offers many functions that are constantly being improved and expanded. Nevertheless, there are always little things that I would like to see differently or that have to be implemented outside of the integrated possibilities due to a...
