Jitesh Kumar

Key Takeaways How to Assign Entra ID Roles to Entra ID Groups for Effective Role-Based Access Control! This can save a significant amount of time and effort, especially in organisations with a large number of users or frequent changes. Assigning Entra ID Roles to Entra ID Groups is a powerful way to streamline access management […]

In this article, we will examine how to enable self service password reset (SSPR) on the Windows login screen using Intune policy. By doing so, it allows users to reset their passwords directly from the Windows sign-in screen, improving the overall user experience on Windows computers. Self-service password reset (SSPR) gives users in Azure AD […]

Let’s check how you can fix Something went wrong Error 801c0003, and referring troubleshooting steps to help resolve an issue where a user is not authorized to enroll their Windows device. The error Something went wrong Error 801c0003, here I came across when trying to initiate Windows Autopilot user driven process. After connecting to a network, […]

Here’s how you can assign Azure AD Roles using Privileged Identity Management PIM. The Azure AD PIM service also allows Privileged role administrators to make permanent admin role assignments. A privileged role administrator can customize Privileged Identity Management (PIM) in their Azure Active Directory (Azure AD) organization, including changing the experience for a user who […]

In this post, you will see how you can prevent users from Start Screen Customization using Intune Policy. This policy setting allows you to prevent users from changing their Start screen layout. You can customize what you see on the Start menu and taskbar, You can pin Store apps, programs, folders, drives, files, and websites to […]

Let’s learn how to create a custom role to read BitLocker Keys for managed devices. BitLocker Recovery Key Reader roles have required to help ensure that only an authorized person can unlock your Windows PC and restore access to your encrypted data. BitLocker likely ensured a recovery key was safely backed up before activating protection. […]

In this post, you will learn how you can fix Invalid_Client Error experienced while registering Windows Devices to Intune. The error may appear when you attempt to provision a device using Windows Autopilot or connect the device to Azure AD joined or registered using the manual process. The error invalid_client, here I came across when […]

Microsoft has released the Windows 10 KB5022282 cumulative updates to fix known issues, security vulnerabilities, and performance issues. The latest Windows 10 KB5022282 update addresses security issues for your Windows operating system, a known issue that affects blue screen and apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) to connect to […]

Microsoft has released the Windows 11 KB5022287 and KB5022303 cumulative updates to fix known issues, security vulnerabilities, and performance issues. The latest Windows 11 KB5022287 and KB5022303 update address security issues for your Windows operating system, a known issue that affects blue screen and apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) […]

Let’s learn how you can create and export Office Policy Configurations. You can use the cloud policy service for Office to apply the configurtaion settings similar to group policy. Cloud Policy service for Microsoft 365 lets you enforce policy settings for Microsoft 365 Apps for enterprise. When a user signs into Microsoft 365 Apps for enterprise […]

Let’s check Cloud PC RBAC Roles for Windows 365 Enterprise and Business. RBAC helps Cloud PC Admins to control who can perform various tasks related to Windows 365 Cloud PCs for both Enterprise and Business editions. Role-based access control (RBAC) helps Cloud PC Admins to control who can perform various Intune tasks within your enterprise. There are Eight (8) Intune RBAC and […]

Let’s learn how to configure Multiple Admin Approvals MAA in Intune for Apps and Scripts. Multiple administrative approval capability enables you to use Intune access policies to require that a second admin account be used to approve a change before the change is applied. The Intune Multi Admin approval process is a more secure way […]

Let’s learn how to configure screen capture protection for AVD Windows 365 Cloud PC. Screen capture protection prevents sensitive information from being captured on the client endpoints. When you enable this feature, remote content will be automatically blocked or hidden in screenshots and screen shares. Also, the Remote Desktop client will hide content from malicious […]

Key Takeaways In this post, you will learn how to Configure iOS Store Apps to Simplify App Management using Microsoft Intune. After adding the store apps, you can make the iOS app installed or available for iOS/iPadOS devices. Before you can configure, assign, protect, or monitor apps, you must add them to Microsoft Intune. You […]

In this post, you will learn how you can restrict Azure AD Tenant Creation for Users. Administrators can now restrict tenant creation to only administrators or users with Azure AD Tenant Creator role. By default, non-admins users are allowed to create new tenants, and the setting has been set to the default No. Non-admin users […]

In this post, you can learn how to configure SSO for Windows 365 Azure AD Join Cloud PC. Windows 365 now supports creating Azure Active Directory Join Cloud PCs that use single sign-on for Cloud PC login. Single sign-on (SSO) allows the connection to skip the Cloud PC credential prompt and automatically sign the user […]

Let’s explore Increasing the SCCM Maximum Run Time for an Application and learn about this option available for Applications. You can change the maximum Run TIme for Applications, Packages, Software Updates, and Task Sequences. In the application maximum run time, you can specify the maximum number of minutes allotted for an application installation to complete before […]

Key Takeaways – Intune Filter OS Version Rule This post will walk you through how to create an Intune Filter OS Version Rule for Windows 11 Devices. Let’s quickly look into the steps on how to filter Windows 11 Intune-managed devices. You can also create Microsoft Entra ID dynamic device groups for Windows 11 Devices. […]

Let’s check how you can pause or turn off Android Work Profile on an Intune-managed device. Managing an Android device with Microsoft Intune often involves a Work Profile, which separates work-related apps and data from personal ones. Pausing effectively turns off the work profile by disabling work apps and work notifications. Pause the work profile […]

Microsoft has released the patches for April 2023. They released Windows 11 KB5025224 and KB5025239 cumulative updates to fix known issues, security vulnerabilities, and performance issues. Windows 10 patches are explained in Windows 10 KB April 2023 Patch Tuesday post. The latest Windows 11 KB5025224 and KB5025239 security updates address and include improvements. This update addresses […]

Let’s check how you can identify Cloud PC Connectivity Issues from Windows 365 Cloud PC Performance Report. The Cloud PCs that aren’t available help Windows 365 administrators identify Cloud PCs that might be currently unavailable. Windows 365 Cloud PC 2309 September update introduced a report that provides valuable metrics for administrators. This report helps assess the status […]

This post helps you to configure Android System Update Setting using Intune. You can create an Android device restrictions configuration profile for enrolled and managed Android Enterprise devices for managing software updates behaviour on your organization-owned devices. As the patches, major & minor updates, and new os versions are released frequently. You must keep devices […]

Let’s learn how to deploy Bitwarden Password Manager using Intune. Bitwarden is the password manager; it can easily generate,  store, and secure unique usernames and passwords. Bitwarden is a Password manager worth using, and it includes strong encryption, two-factor authentication (2FA), password security auditing, password breach monitoring, and cloud or local hosting options. You can easily access Bitwarden by entering a master password. Bitwarden is […]

Let’s learn how you can deploy VBScript for Intune Application Installation. In this post, you will see how to use VBScript from Intune to install an application from Intune portal. The ability to deploy a Win32 application from Intune is a much-used feature because it enables you to achieve many use cases. Using the Vbs deployment directly […]

Microsoft has released the Windows 10 KB5022282 cumulative updates to fix known issues, security vulnerabilities, and performance issues. The latest Windows 10 KB5022282 update addresses security issues for your Windows operating system, a known issue that affects blue screen and apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) to connect to […]

Let’s learn how to use the Microsoft Support and Recovery Assistant aka Microsoft SaRA in Windows to troubleshoot and diagnose Office, Office 365, Microsoft 365, Outlook, and Windows issues for your account in Windows 10, or Windows 11. The Microsoft Support and Recovery Assistant (SaRA) works by running tests to figure out what’s wrong and […]

Let’s discuss Deploy Windows 10 20H2 Using SCCM Task Sequence | ConfigMgr. In this post, I will cover all the steps for bare metal deployment (Windows 10 20H2) using the configuration manager. The bare metal scenario occurs when you have a blank machine you need to deploy or an existing machine you want to wipe […]

In this post, you will learn to FIX SCCM Task sequence failed with error code 0x87d00269. The task sequence error prompt during operating system deployment with Configuration Manager when it’s failed to execute install application step. The error code 0x87d00269 Translate SCCM Error Codes to Error Messages Required management point not found. It’s best to examine the SMSTS.log to troubleshoot OSD-related […]