Joymalya Basu Roy

[New Post Alert!] Facing issues with WIP policy? A complete Checklist to help your troubleshooting...

[New Post by @JBR] Learn WIP with Joy - File Protection Deep Dive - Part 3

In Part 1 of this article on Windows Information Protection, I explained the concepts of WIP and how each setting we configure in the policy affects the end-user activity on an endpoint with WIP enabled. If you haven’t read that yet, I recommend it as well. The entire world is fighting against the COVID-19 virus, […]

When we talk about the Modern Workplace, employee experience is the priority. But there’s another aspect to this: information protection, which is of the utmost importance to any organization. Every organization tries its best to keep its data protected. Sometimes, protection can be highly restrictive to the point that it hampers workplace experience, causing employee […]

In this article, I will discuss Android Management in general with Intune, how it has evolved, and the different management modes that are available on Android Enterprise. A dive into the evolution of Android Management – the demise of Device Admin API and the way forward with Android Enterprise. I have also tried to explain […]

I hope you all enjoyed celebrating the New Year with your loved ones. It will be good to meet again on this side of 2020. I won’t spend much time on the intro as this continues my previous article on Bitlocker Drive Encryption. If you have not read it yet, I suggest reading that first […]

This is the 3rd article of the Bitlocker series. Links to previous parts are mentioned below. Give them a read if you have not yet! Index A short intro to BitLocker Drive Encryption BitLocker Drive Encryption – different ways of administering to suit your existing environment BitLocker Drive Encryption – Modes of enforcement Requirements for […]

In my previous article, I explained the working mechanism of Bitlocker encryption, the internal OS components involved, and most importantly – why it is necessary and how it helps secure the OS platform from cold boot attacks. I would urge you to read it here if you have not seen it yet. Index Getting to […]

In the last few articles, I discussed Microsoft’s security mechanisms in Windows 11 to help secure the Windows OS as a platform for maintaining integrity and reliability for the corporate workforce. If you have not read them yet, below are the links. Index Bitlocker Unlocked with Joy – Behind the Scenes What is Bitlocker? Nothing […]

In my previous articles related to Secure Boot and Trusted Boot, I have explained how Microsoft has worked to secure the boot phase of Windows 10 to provide a secure and reliable OS platform for the enterprise scenario. In this article, I will discuss another feature that ensures the platform’s integrity: Windows Measured Boot. Measured […]

Let us discuss Intune Policy Assignment Classification Easy Secrets of using Graph API with PowerShell. This article will completely differ from my other articles, where I mostly explain behind-the-scenes logic. But in this article, I will explain the logic and steps involved in creating a script to accomplish an objective. Index Problem Statement Solution Required […]

The main purpose is to give an overview of the Windows NT kernel initialization (Windows Trusted Boot). What happens when we are booting a Windows device? There are not many detailed posts on this, so I thought of writing this up. This is a continuation of my previous article, “Understanding UEFI Secure Boot – How […]

This article is part 1 (Windows 10 UEFI Secure Boot) of a new Windows series. In it, I will explain the built-in security measures implemented in Windows 10 to secure the OS boot phases and ensure the integrity of the OS platform for corporate use cases. In my previous article, “Understanding Device Health Attestation Intune […]

Key Takeaways: Let’s discuss about, Understanding Device Health Attestation Intune Device Compliance Check. In this post, I will discuss Device Health Attestation (DHA) and its role in the Intune device compliance check. Intune device compliance is a check mechanism for whether managed devices meet the specified security requirements as per the organization’s security policy. Based […]

This is the last concluding article of the Autopilot series, which I started. In my previous articles of this series, I have explained the working details behind Windows Autopilot in depth. If you haven’t read them yet, I suggest you do so. Let’s see whatWindow Autopilot WhiteGlove is. Windows Autopilot introduces powerful new capabilities that […]

Let’s get into another deep-dive blog post about Windows Autopilot In-Depth Processes from Device Side – Part 3. I call it behind-the-scenes processes and data flows. In my previous post, I discussed the functional blocks and concepts of Windows Autopilot from the perspective of IT Admin setup In this post, I will discuss the workings […]

This blog post focuses on the Android Enterprise management modes available with Microsoft Intune, a.k.a Microsoft Endpoint Manager. I wrote a blog post long ago on the different ways of managing Android devices from Intune. However, new management modes have been introduced since then, so consider this post an update. This is the third post […]

This is the 3rd article of the Bitlocker series. Links to previous parts are mentioned below. Give them a read if you have not yet! Index A short intro to BitLocker Drive Encryption BitLocker Drive Encryption – different ways of administering to suit your existing environment BitLocker Drive Encryption – Modes of enforcement Requirements for […]

Let us discuss Intune Policy Assignment Classification Easy Secrets of using Graph API with PowerShell. This article will completely differ from my other articles, where I mostly explain behind-the-scenes logic. But in this article, I will explain the logic and steps involved in creating a script to accomplish an objective. Index Problem Statement Solution Required […]

In my previous articles related to Secure Boot and Trusted Boot, I have explained how Microsoft has worked to secure the boot phase of Windows 10 to provide a secure and reliable OS platform for the enterprise scenario. In this article, I will discuss another feature that ensures the platform’s integrity: Windows Measured Boot. Measured […]

Welcome to today’s post titled Intune Management Extension Deep Dive – Win32 App Deployment Troubleshooting Help Guide. This post will show you how Intune Management Extension (IME), a.k.a Intune Sidecar, handles win32 app deployment on a managed Windows 10 endpoint. This post intends to help you easily identify why a particular win32 app deployment from […]

I have encountered many scenarios in which people still lack clarity on what Windows Autopilot is and its purposes. This post is my effort to clarify the general misconceptions regarding Windows Autopilot (Windows Autopilot FAQ) and help people understand the underlying blocks and concepts. I have designed this post as a question-and-answer session to help […]

Let’s get into another deep-dive blog post about Windows Autopilot In-Depth Processes from Device Side – Part 3. I call it behind-the-scenes processes and data flows. In my previous post, I discussed the functional blocks and concepts of Windows Autopilot from the perspective of IT Admin setup In this post, I will discuss the workings […]

This is the last concluding article of the Autopilot series, which I started. In my previous articles of this series, I have explained the working details behind Windows Autopilot in depth. If you haven’t read them yet, I suggest you do so. Let’s see whatWindow Autopilot WhiteGlove is. Windows Autopilot introduces powerful new capabilities that […]

Welcome to Part 5 of the series Intune PKI Made Easy With Joy. Today’s post discusses the different Intune SCEP HTTP errors we may encounter while working with SCEP certificate deployments from Intune. It explains how to identify probable causes to help with quicker troubleshooting and ensure lower downtime. In the context of Intune, the […]

This article is part 1 (Windows 10 UEFI Secure Boot) of a new Windows series. In it, I will explain the built-in security measures implemented in Windows 10 to secure the OS boot phases and ensure the integrity of the OS platform for corporate use cases. In my previous article, “Understanding Device Health Attestation Intune […]

Let’s discuss Windows 10 Power Options and Intune. The community has a few queries about this topic. This step-by-step guide explains how to manage device power options using Intune, a.k.a. Endpoint Manager. Easily Manage Device Power Options Using Intune. As such, I am writing this short post to present my ideas. Power Options is a […]

Proper case documentation not only helps in appropriate case management for the case owner but also helps to understand the case and its status better when it moves up the support hierarchy levels (L1 > L2 > L3). This helps to reduce the overall TAT of a case due to less time spent on things […]