Anoop C Nair

New Windows 11 Configure Hash Algorithms for Certificate Logon Authentication using Group Policy and other methods for Kerberos protocol. Microsoft introduced this group policy in the Windows Insider version. The new group policy and ADMX settings to configure Hash algorithms for certificate logon introduce agility to PKINIT in the Kerberos protocol. This new policy allows […]

Windows 11 new LSA Local Security Authority policies are released as part of the insider build. I have checked the Intune Settings Catalog and these new policies are unavailable there. A few months before, Microsoft introduced the LAPS policies for Azure AD joined devices as part of the Insider build. One of the new group […]

Fix SCCM Console Access Error 0x80070005 0x800706ba RPC Server is Unavailable. I started getting comments on How to Verify WMI Permissions Required for SCCM Console Access post back in June 2022. David N commented on the SCCM console WMI permission post on 27th June that “the workaround (of setting RequireIntegrityActivationAuthenticationLevel = 1) did resolve the […]

Let’s check the Windows Autopatch Deployment Schedule for Windows quality updates. Microsoft released Windows quality and security updates on the 13th Sept 2022 patch Tuesday. Windows Autopatch is a cloud service that automates Windows, Microsoft 365 Apps for enterprise, Microsoft Edge, and Microsoft Teams updates to improve security and productivity across your organization. Autopatch is the […]

Microsoft released Windows 10 KB5017308 & Windows 11 KB5017328 on September 2022 Patch Tuesday. 2 Zero-Day vulnerabilities CVE-2022-37969 & CVE-2022-23960 are fixed and 1 Actively Exploited with the September patch Tuesday. One of the updates from last month caused some sleepless nights for the Workplace support team. August 2022 patch KB5012170 caused Bitlocker recovery key screen […]

Microsoft notified that an Intune Issue with iOS 16 Upgrade new MDM payload does not match the old payload. This issue does not impact all the Intune managed iOS or iPadOS devices but rather a subset of devices meeting specific criteria. We think Microsoft did an excellent job of notifying all the customers who could […]

Let’s understand the maximum number of Apps supported by Intune. In this post, we will see whether there is any limit when creating apps and what is the upper limit for each type of application in Intune. There is an excellent Twitter thread by Scott McAllister on this topic and more details are below. There […]

This post helps to enable Microsoft Defender for Endpoint Updates patching using SCCM & WSUS. Microsoft recently added a new product category to WSUS, allowing on-prem servers to get MS Defender for Endpoint patches for EDR sensor. You can use SCCM to onboard endpoints to the MS Defender for Endpoint (MDE) service. There are several […]

10 Super Useful End User Portals from Microsoft 365, Intune, and Azure AD. These are the portals that the workplace team should communicate clearly with end users to make their lives easy and helps to avoid confusion. You have many admin portals to manage several technologies from Cloud and On-Prem. Some cloud-based admin portals are […]

Let’s fix the issue of being unable to run CMPivot when the site is in SCCM Interoperability mode. The SCCM primary server is upgraded to the latest version, 2207, and I started getting the issue after the 2207 upgrade. CMPivot is the tool that Microsoft added to the SCCM product to provide real-time reporting. SCCM […]

Let’s fix error 0x87d20002 SCCM Secondary Server Upgrade. I was trying to upgrade the secondary server with the newest version 2207 of SCCM, and the upgrade failed with many different errors explained in this post. The secondary server upgrade failed with the following error message “ConfigMgr Setup Failed to Upgrade site.” It couldn’t even complete […]

Learn how to use SCCM CMPivot to perform security audits. The CMPivot can help to perform a quick round of security audits on Windows devices. CMPivot can scan Security Audit events and produce some results. SCCM is not a security audit tool! This is the first point that you must remember! So don’t expect everything […]

Let’s check more details on the Group Policy to hide Windows 11 System Requirements not met watermark. There is a new group policy, “Hide messages when Windows system requirements are not met,” to manage the System requirement not met message for Windows 11 devices. This group policy setting controls Watermark shown when Windows runs on […]

Windows 11 Camera is Blocked because of Privacy Shutter. This helps the operating system to understand whether the laptop has a physical privacy shutter or kill switch for the camera. Recently, many manufacturers started implementing physical “kill switches” and Privacy Shutters for cameras. Windows 11 camera/pc OEMs must implement a mechanism to detect the state […]

There is an issue with Intune Connector for Active Directory Setup Fatal Error 0x80070643. There is a known issue with Intune AD connector that is used to facilitate Windows Autopilot Hybrid Azure AD scenarios. In many Windows Autopilot deployments, Windows 10 or Windows devices are joined to Azure AD. But many organizations still rely on Hybrid Azure […]

Let’s see how to block or Hide Bitlocker Recovery Key from users. Microsoft recently added support to hide recovery keys from end-users. This helps to improve the security poster of the devices and restricts an attacker from getting Bitlocker encryption keys from Windows laptops. Let’s learn how to Enable or Disable the Self-Service Bitlocker Recovery […]

Let’s check SCCM CMPivot Architecture and Sample Queries in this post. CMPivot allows you to quickly assess the state of devices in your environment and take action. Fast channel architecture changed the entire behavior of SCCM. Now it’s not at all a slow-moving server(SMS). You can make it run as fast as you can. The […]

Key Takeaways Here, we are discussing Microsoft Azure Removes Default Internet Access for New Virtual Networks. According to the latest news coming that After March 31, 2026, any newly created Virtual Network (VNet) will no longer have automatic access to the internet. This update was highlighted by Christiaan Brinkhoff on his social media platform. Microsoft […]

Let’s discuss how to Enable or Disable Device Delete Setting for Diagnostic Data in Windows using Intune Policy. Intune system settings let users manage device features by creating configuration profiles. These profiles control how devices act and ensure they follow company rules. The Disable Device Delete policy in System settings controls if the delete diagnostic […]

Let’s discuss the AZ-500 Exam Prep Guide Microsoft Azure Security Engineer Associate Professional Certificate. This exam is designed for professionals working with Azure security services and solutions. It validates a candidate’s expertise in managing Azure security controls, identity management, and securing data, applications, and networks in Azure environments. This certification is ideal for security engineers […]

Let’s explore the 3 Easy Methods to Delete Alternate Rows in Microsoft Excel. Excel arranges data in a grid with numbered rows and lettered columns. This lets users easily perform calculations and other tasks using formulas and functions. In this article, I will explain how to delete every other row in Excel. There are three […]

This blog post explains Enforce DDM Software Updates on macOS Device using Intune Settings Catalog. DDM makes it easier to handle updates. Devices can now automatically manage updates based on set policies. This reduces interruptions for users and improves their overall experience. Through macOS Settings, IT administrators can control the macOS versions in their organization, […]

Let’s discuss Entra Refresh Tokens Valid for 90 Days Key Actions Based on Your Licensing Entra ID Free E3 P1 and E5 P2. Microsoft extended the default validity of the Entra Refresh token to 90 days. Before the recent update, the validity of tokens was typically 14-90 days, depending on the configuration. Refresh tokens themselves do not require a specific […]

Microsoft rolled out a New Office ADMX Template Version: 5469.1000 for Microsoft 365 Apps for enterprise Project and Visio. This post shows how to import the ADMX template to Intune. The administrative Template files (ADMX/ADML) for Microsoft Office have been significantly updated. IT administrators use the Administrative Template files (ADMX/ADML) for Microsoft Office to manage and […]

Key Takeaways The updated Windows device sync experience in the Microsoft Intune admin center helps you provide live sync progress. It gives admins better visibility into every stage of the synchronisation process. Instead of waiting without feedback, admins can monitor each step in real time. It makes it easier to confirm that the sync is […]

Let’s discuss the Top 83 Windows 11 Desktop Admin Interview Questions. Desktop Admins are the real heroes of the IT world because they are real people who interact with end users. They help users resolve various issues in the cyber world. They are technology problem resolvers responsible for establishing, diagnosing, repairing, maintaining, and upgrading hardware […]

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

Hi, there today with a new topic Allow or Block Audio Capture Policy in MS Edge Browser using M365 Admin Center. As we all know that Edge browser is one of the significant browsers that uses in many organizations. With the help of MS365, they are providing a list of policies for oragnizations. So we […]