Jitesh Kumar

In this post, you will learn how to Block Vulnerable Signed Drivers Using Intune ASR Rules. Attack surface reduction rules (ASR rules) help prevent actions that malware often abuses to compromise devices and networks. This rule prevents an application from writing a vulnerable signed driver to disk. In the wild, vulnerable signed drivers can be […]

Let’s learn how to turn on Windows Device Protection with Core Isolation Memory Integrity. Memory integrity is a feature of core isolation. Turning on the Memory integrity setting can help prevent malicious code from accessing high-security processes in the event of an attack. Windows Security provides built-in security options to help protect your device from malicious software […]

In this post, Let’s learn how to Update Intune Security Baselines Version in Intune Admin Portal. Intune updates the versions of built-in Security Baselines depending on the changing needs of a typical organization. Each new release results in a version update to a particular baseline. With the new release of the MDM Security Baseline version, […]

This post will show the new features released in Microsoft Intune Service Release 2207. Microsoft release updates as frequently as every week. Here specifically, you will get an overview of Intune monthly release updates. Every update contains new features, bug fixes, and, most importantly, new capabilities. It allows you to try out new features and provide the […]

Key Takeaways The Microsoft Intune admin center provides a centralized Service Health and Message Center experience, allowing administrators to monitor active incidents, service advisories, and tenant-specific issues. Before troubleshooting or contacting Microsoft Support, you can check Service Health to determine whether a known service issue is affecting your environment. The Message Center also keeps you […]

Key Takeaways Easily Exclude Devices from Windows Autopatch in Microsoft Intune! Windows Autopatch is a cloud service that automates the Windows update process, helping organizations keep devices up to date while reducing the workload for IT administrators. Before Microsoft can manage a device through Windows Autopatch, the device must be registered with the service. Windows […]

Key Takeaways This guide helps you to Create and Manage Windows Security Baselines in Microsoft Intune for Enhanced Endpoint Protection. Intune makes it easy to deploy Windows security baselines to help you secure and protect your users and devices. Security baselines are groups of pre-configured Windows settings that help you apply and enforce granular security […]

Key Takeaways Let’s learn how to Send Custom Notifications to Android and iOS Devices to Improve User Communication using Intune. These messages appear as standard push notifications from the Company Portal app and the Microsoft Intune app on a user’s device, just as notifications from other applications appear. Custom notification messages include a short title […]

Let’s learn how you can download and configure security baselines. The baselines are an essential benefit for the organizations, In addition to the security assurance of its products, Microsoft enables you to have fine control over your environments by providing various configuration capabilities using security baselines. A security baseline is a group of Microsoft-recommended configuration […]

Let’s find out how to get Installed BitLocker MBAM Agent Details Using SCCM Query. You can create a query that will fetch the list of machines in which “MDOP MBAM” is installed with a software version. The SCCM (ConfigMgr) Bitlocker management provides full BitLocker lifecycle management similar to MBAM (Microsoft BitLocker Administration and Monitoring). Configuration Manager BitLocker management uses the MDOP MBAM client in […]

In this post, you will learn about Windows Autopatch Quality Updates Report In Intune MEM Portal. Windows Autopatch manages all aspects of deployment groups for Windows 10 and Windows 11 quality and feature updates, drivers, firmware, and Microsoft 365 Apps for enterprise updates. Windows Autopatch reporting and messaging capabilities are designed to allow visibility into […]

Key Takeaways Intune Device Attestation Status Report to Verify Device Trust and Monitor Attestation Status! To use Windows enrollment attestation, devices should have the latest Windows updates installed for the best success rate. The feature is supported on Windows 11 (version 10.0.22000.2713 or later, 10.0.22621.2792 or later, or 10.0.22631.2792 or later). Devices must also have […]

Let’s see how to download and configure Google Chrome Group Policy ADMX Templates. You can use chrome administrative templates to configure policy and manage settings for Google Chrome browser settings. Google Chrome Administrative Templates files are divided into .admx files and language-specific .adml files. To configure Chrome with group policy objects, install administrative templates that add rules and settings for […]

In this post, you will learn how to enable Controlled Folder Access To Protect Data Using Intune MEM Portal. Controlled folder access in Windows Security reviews the apps that can make changes to files in protected folders and blocks unauthorized or unsafe apps from accessing or changing files in those folders. Controlled folder access is […]

Let’s see how to implement Group Policy Templates for Office 365 and All Office Versions. You can use office administrative templates to configure policy settings for Microsoft Office and manage settings for Microsoft office all versions. To configure ADMX templates for Microsoft Office, you need Microsoft Office on the client computers. Once you have Microsoft […]

Let’s learn how to restore deleted AAD User from Azure Active Directory Portal. The option to restore the deleted users is useful if we accidentally deleted the users, a permanently deleted user can’t be restored. After you delete a user, the account remains in a suspended state for 30 days. During that 30-day window, the […]

Let’s explore Increasing the SCCM Maximum Run Time for an Application and learn about this option available for Applications. You can change the maximum Run TIme for Applications, Packages, Software Updates, and Task Sequences. In the application maximum run time, you can specify the maximum number of minutes allotted for an application installation to complete before […]

Key Takeaways – Intune Filter OS Version Rule This post will walk you through how to create an Intune Filter OS Version Rule for Windows 11 Devices. Let’s quickly look into the steps on how to filter Windows 11 Intune-managed devices. You can also create Microsoft Entra ID dynamic device groups for Windows 11 Devices. […]

Let’s check how you can pause or turn off Android Work Profile on an Intune-managed device. Managing an Android device with Microsoft Intune often involves a Work Profile, which separates work-related apps and data from personal ones. Pausing effectively turns off the work profile by disabling work apps and work notifications. Pause the work profile […]

Microsoft has released the patches for April 2023. They released Windows 11 KB5025224 and KB5025239 cumulative updates to fix known issues, security vulnerabilities, and performance issues. Windows 10 patches are explained in Windows 10 KB April 2023 Patch Tuesday post. The latest Windows 11 KB5025224 and KB5025239 security updates address and include improvements. This update addresses […]

Let’s check how you can identify Cloud PC Connectivity Issues from Windows 365 Cloud PC Performance Report. The Cloud PCs that aren’t available help Windows 365 administrators identify Cloud PCs that might be currently unavailable. Windows 365 Cloud PC 2309 September update introduced a report that provides valuable metrics for administrators. This report helps assess the status […]

This post helps you to configure Android System Update Setting using Intune. You can create an Android device restrictions configuration profile for enrolled and managed Android Enterprise devices for managing software updates behaviour on your organization-owned devices. As the patches, major & minor updates, and new os versions are released frequently. You must keep devices […]

Let’s learn how to deploy Bitwarden Password Manager using Intune. Bitwarden is the password manager; it can easily generate,  store, and secure unique usernames and passwords. Bitwarden is a Password manager worth using, and it includes strong encryption, two-factor authentication (2FA), password security auditing, password breach monitoring, and cloud or local hosting options. You can easily access Bitwarden by entering a master password. Bitwarden is […]

Let’s learn how you can deploy VBScript for Intune Application Installation. In this post, you will see how to use VBScript from Intune to install an application from Intune portal. The ability to deploy a Win32 application from Intune is a much-used feature because it enables you to achieve many use cases. Using the Vbs deployment directly […]

Microsoft has released the Windows 10 KB5022282 cumulative updates to fix known issues, security vulnerabilities, and performance issues. The latest Windows 10 KB5022282 update addresses security issues for your Windows operating system, a known issue that affects blue screen and apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) to connect to […]

Let’s learn how to use the Microsoft Support and Recovery Assistant aka Microsoft SaRA in Windows to troubleshoot and diagnose Office, Office 365, Microsoft 365, Outlook, and Windows issues for your account in Windows 10, or Windows 11. The Microsoft Support and Recovery Assistant (SaRA) works by running tests to figure out what’s wrong and […]

Let’s discuss Deploy Windows 10 20H2 Using SCCM Task Sequence | ConfigMgr. In this post, I will cover all the steps for bare metal deployment (Windows 10 20H2) using the configuration manager. The bare metal scenario occurs when you have a blank machine you need to deploy or an existing machine you want to wipe […]

In this post, you will learn to FIX SCCM Task sequence failed with error code 0x87d00269. The task sequence error prompt during operating system deployment with Configuration Manager when it’s failed to execute install application step. The error code 0x87d00269 Translate SCCM Error Codes to Error Messages Required management point not found. It’s best to examine the SMSTS.log to troubleshoot OSD-related […]