Microsoft 365
Sujin Nelladath
Sujin Nelladath is a Microsoft Graph MVP with over 12 plus years of experience in Intune, SCCM and M365 Automation solutions, writes and shares his experiences with Microsoft device management technologies, Azure, DevOps and PowerShell automation.
Microsoft 365
Intune
Enable Enterprise Application Management EAM Auto-Updates in Intune to Keep Apps Secure
Key Takeaways Hola! I hope you’re enjoying your Intune journey. Let’s explore how enabling Enterprise Application Management (EAM) auto-updates in Intune helps keep applications secure. By keeping apps updated, you reduce exposure to vulnerabilities and strengthen your overall security posture. What’s Enterprise Application Management (EAM) The Enterprise Application Management (EAM) provides IT administrators with a […]
Intune
YellowKey: BitLocker Bypass CVE‑2026‑45585 – Detect & Remediate Automatically with Microsoft Intune
Key Takeaways: YellowKey: BitLocker Bypass CVE‑2026‑45585 – Detect & Remediate Automatically with Microsoft Intune! A new zero‑day dubbed YellowKey is undermining BitLocker — the very feature meant to safeguard sensitive data on Windows. First disclosed by researcher Chaotic Eclipse, this isn’t a theoretical flaw; it’s a practical bypass that grants attackers with physical access direct […]
AI
How to Configure Google Gemini Integration Settings using Microsoft Intune
Key Takeaways How to Configure Google Gemini Integration Settings using Microsoft Intune! Google Chrome’s Generative AI settings in Intune allow administrators to centrally manage how Chrome’s AI-powered features function across enterprise devices. These settings are especially important in today’s AI-driven era. Once devices are properly enrolled in Microsoft Intune, administrators can seamlessly enforce these policies, […]
Intune
How to Configure App Inventory for Windows Devices in Microsoft Intune
Key Takeaways How to Configure App Inventory for Windows Devices in Microsoft Intune! I’ve been waiting for this feature since the day I started using Intune. Application inventory was never just a nice‑to‑have – it’s been an essential capability that admins have needed for years. And now, it’s finally here. With this release, we can […]
Entra
How to Audit Security Dynamic Group Membership Changes using Microsoft Graph API
Key Takeaways How to Audit Security Dynamic Group Membership Changes using Microsoft Graph API! Dynamic groups simplify access management by allowing resource owners and Microsoft Entra ID directory admins to assign a consistent set of permissions to all members automatically. Beyond that, group ownership can be delegated to trusted individuals, such as department heads or […]
Entra
Microsoft Graph API Automation to Reclaim the Microsoft 365 License of Disabled Users
Key Takeaways Microsoft Graph API Automation to Reclaim the Microsoft 365 License of Disabled Users! This article explains how to automate the process of reclaiming Microsoft 365 licenses from disabled users. License management is a critical aspect of maintaining cost efficiency and compliance in any organisation. Understanding Microsoft 365 Licensing A Microsoft 365 license is […]
Entra
Learn More about Primary Refresh Tokens (PRT) in Microsoft Entra ID | Complete Troubleshooting Guide
Key Takeaways This article will explain what a Primary Refresh Token is in Microsoft Entra and how PRT will help in deep troubleshooting of Intune-entrolled, or Entra-managed devices. I hope you are already familiar with device management in Microsoft Entra ID. What is Primary Refresh Token (PRT)? A Primary Refresh Token (PRT) is a secure artefact […]
Entra
Automate Microsoft Entra User Offboarding with Microsoft Graph API and PowerShell
Key Takeaways Automating the removal of Microsoft Entra users is a critical yet often complex responsibility for IT teams. Offboarding goes far beyond simply disabling an account – it requires a careful, methodical approach to revoke access across multiple services. This includes removing licenses, relinquishing assigned roles, and reassigning application ownership to ensure that no […]
Intune
How to Enable or Disable Tamper Protection for your Organisation using Microsoft Intune Antivirus Policy
Key Takeaways : Let’s learn how to enable or disable Tamper Protection in Microsoft Intune using Endpoint Security Antivirus Policy. This article will help you understand how to allow Tamper Protection in Microsoft Defender for Endpoint using Endpoint Security Antivirus Policy. Microsoft Defender Antivirus provides strong protection for Windows devices against malware and other security […]
Intune
HTMD Community Free Python Intune Tool | HTMD – Microsoft Intune Reports Export Tool v1.0.
HTMD Community Free Python Intune Tool | HTMD – Microsoft Intune Reports Export Tool v1.0.I am truly proud and excited to share that HTMD has released its very first open-source community tool during the HTMD Community Conference 2025, hosted on 6 th December 2025 at the Microsoft Campus – Prestige Ferns Galaxy, Bengaluru. This achievement […]
Intune
How to List all Windows 365 Cloud PCs in your Tenant using Microsoft Graph API
How to List all Windows 365 Cloud PCs in your Tenant using Microsoft Graph API! Let’s list all the Microsoft 365 Cloud PCs in a Tenant using Microsoft Graph API. This article demonstrates how to automate the process of retrieving all Windows 365 Cloud PCs in a tenant using the Microsoft Graph API. Let’s learn together […]
Intune
Automate the Process of Removing Primary User from Intune Device using Microsoft Graph API
Automate the Process of Removing Primary User from Intune Device using Microsoft Graph API! In this article, we’ll explore how to remove the primary user from an Intune-managed device using its machine name, leveraging Microsoft Graph API and PowerShell scripting. This approach is particularly useful when transitioning devices into shared mode for environments like classrooms, […]
Intune
How to Enable or Disable Energy Saver Always-on Mode in Intune Settings Catalog
How to Enable or Disable Energy Saver Always-on Mode in Intune Settings Catalog. In today’s mobile-first landscape, battery performance is no longer a convenience, it’s a cornerstone of productivity. Whether you’re working remotely, traveling for client engagements, or delivering technical workshops, uninterrupted power is essential. Modern devices are expected to support demanding workloads like real-time […]
Intune
How to Change the Region Name and Geography of Microsoft 365 Cloud PCs using Microsoft Graph API
In this article, let’s quickly explore how to change the Region Name and Geography of Microsoft 365 Cloud PCs using the Microsoft Graph API. You’ll learn how this can be done using API endpoints and a PowerShell script. I believe this article will be a real time-saver for you. Microsoft 365 Cloud PCs offer a […]
Intune
Block Untrusted and Unsigned Processes that Run from USB using Attack Surface Reduction Rules in Intune
Block Untrusted and Unsigned Processes that Run from USB using Attack Surface Reduction Rules! Let’s discover how Attack Surface Reduction aka ASR rules can enhance your organization’s security posture by preventing untrusted or unsigned processes, especially those launched from USB devices from executing on endpoints. This targeted control helps mitigate risks associated with portable media […]
Intune
Enable Enterprise Application Management EAM Auto-Updates in Intune to Keep Apps Secure
Key Takeaways Hola! I hope you’re enjoying your Intune journey. Let’s explore how enabling Enterprise Application Management (EAM) auto-updates in Intune helps keep applications secure. By keeping apps updated, you reduce exposure to vulnerabilities and strengthen your overall security posture. What’s Enterprise Application Management (EAM) The Enterprise Application Management (EAM) provides IT administrators with a […]
Azure AD
Add Microsoft Entra Users to Group Membership using Microsoft Graph API and PowerShell Script
Let’s discuss how to Microsoft Entra Users to Group Membership using Microsoft Graph API and PowerShell ScriptIf you’re an administrator working with Microsoft Intune or Microsoft Entra, creating users in Entra and adding them to specific groups is a routine part of your day. You may also frequently receive requests to add users to existing […]
Azure AD
PowerShell Script to Track Upcoming Microsoft Entra App Secret Expirations
PowerShell Script to Track Upcoming Microsoft Entra App Secret Expirations! In this article, I’ll walk you through a powerful automation designed to enhance proactive security and lifecycle management for Microsoft Entra applications. You’ll learn how to monitor Entra app registrations and automate the detection of upcoming secret key expirations, ensuring your identity infrastructure stays secure […]
ITPro
How to Install Microsoft.OSConfig PowerShell Module on Windows Server 2025
In this article we will discuss about OSConfig and how to install Microsoft.OSConfig PowerShell module on Windows Server 2025. Also, we will learn about the Microsoft.OSConfig PowerShell cmdlets and its usage in Windows Server 2025. Windows Server 2025 was announced in January 2024 to enhance security, performance, and hybrid cloud capabilities. According to Microsoft, it delivers […]
Intune
How to Change the Region Name and Geography of Microsoft 365 Cloud PCs using Microsoft Graph API
In this article, let’s quickly explore how to change the Region Name and Geography of Microsoft 365 Cloud PCs using the Microsoft Graph API. You’ll learn how this can be done using API endpoints and a PowerShell script. I believe this article will be a real time-saver for you. Microsoft 365 Cloud PCs offer a […]
Intune
How to Pause Intune Config Refresh Feature on Windows Device using Microsoft Graph API
In this article, we will learn how to Pause Intune Config Refresh Feature on Windows Device using Microsoft Graph API. Config Refresh was one of the most requested improvements for mobile device management (MDM). I will also discuss what the Config Refresh feature is in this article. The Config Refresh feature ensures that your settings […]
Intune
How to Enable or Disable Energy Saver Always-on Mode in Intune Settings Catalog
How to Enable or Disable Energy Saver Always-on Mode in Intune Settings Catalog. In today’s mobile-first landscape, battery performance is no longer a convenience, it’s a cornerstone of productivity. Whether you’re working remotely, traveling for client engagements, or delivering technical workshops, uninterrupted power is essential. Modern devices are expected to support demanding workloads like real-time […]
Intune
Set Local Bluetooth Device Name with Intune Policy
Let’s learn how to Set the local Bluetooth device name using configuration profiles in Intune. The present discourse aims to elucidate the process of setting the Bluetooth device name and deploying the configuration profiles to the Security group. Bluetooth technology was first introduced on May 7th, 1998, which means it has been around for 25 years. According […]
Microsoft 365
Using Connect-MgGraph Cmdlet to Automate Microsoft 365 via Microsoft Graph PowerShell
Key Takeaways Using Connect-MgGraph Cmdlet to Automate Microsoft 365 via Microsoft Graph PowerShell! Hey there! If you’re working with Microsoft 365 solutions, I’ve got something that might make your life a whole lot easier. We all know the pressure to automate everything is real – but don’t worry, this article is here to help. Dive […]
Intune
Add Microsoft Intune Devices to Group Membership using Microsoft Graph API and PowerShell Script
In this article, we will learn how to add Microsoft Intune Devices to Group Membership using Microsoft Graph API and PowerShell Script. You can use the same method to automate the addition of any resources to Microsoft Entra ID, Microsoft 365, or Security groups. Microsoft Intune offers various methods for managing access to devices, applications, […]
Intune
Automate the Process of Removing Primary User from Intune Device using Microsoft Graph API
Automate the Process of Removing Primary User from Intune Device using Microsoft Graph API! In this article, we’ll explore how to remove the primary user from an Intune-managed device using its machine name, leveraging Microsoft Graph API and PowerShell scripting. This approach is particularly useful when transitioning devices into shared mode for environments like classrooms, […]
Intune
How to Create Cloud PC Maintenance Windows using Microsoft Intune
This post will explain how to Create Cloud PC Maintenance Windows using Microsoft Intune. This document aims to provide insights into the process of creating maintenance windows to schedule specific times for running actions on Cloud PCs, which are currently in Public Preview. With the release of Windows 365 Service Release 2403, a new feature […]
No series yet.