Skip to content

Sujin Nelladath

HTMD Author

Sujin Nelladath is a Microsoft Graph MVP with over 12 plus years of experience in Intune, SCCM and M365 Automation solutions, writes and shares his experiences with Microsoft device management technologies, Azure, DevOps and PowerShell automation.

106 Guides
37 Reads
Experience
Follow
Intune

Enable Enterprise Application Management EAM Auto-Updates in Intune to Keep Apps Secure

Key Takeaways Hola! I hope you’re enjoying your Intune journey. Let’s explore how enabling Enterprise Application Management (EAM) auto-updates in Intune helps keep applications secure. By keeping apps updated, you reduce exposure to vulnerabilities and strengthen your overall security posture. What’s Enterprise Application Management (EAM) The Enterprise Application Management (EAM) provides IT administrators with a […]

July 8, 2026 · 8 min read
Intune

YellowKey: BitLocker Bypass CVE‑2026‑45585 – Detect & Remediate Automatically with Microsoft Intune

Key Takeaways: YellowKey: BitLocker Bypass CVE‑2026‑45585 – Detect & Remediate Automatically with Microsoft Intune! A new zero‑day dubbed YellowKey is undermining BitLocker — the very feature meant to safeguard sensitive data on Windows. First disclosed by researcher Chaotic Eclipse, this isn’t a theoretical flaw; it’s a practical bypass that grants attackers with physical access direct […]

June 15, 2026 · 11 min read
AI

How to Configure Google Gemini Integration Settings using Microsoft Intune

Key Takeaways How to Configure Google Gemini Integration Settings using Microsoft Intune! Google Chrome’s Generative AI settings in Intune allow administrators to centrally manage how Chrome’s AI-powered features function across enterprise devices. These settings are especially important in today’s AI-driven era. Once devices are properly enrolled in Microsoft Intune, administrators can seamlessly enforce these policies, […]

May 28, 2026 · 6 min read
Intune

How to Configure App Inventory for Windows Devices in Microsoft Intune

Key Takeaways How to Configure App Inventory for Windows Devices in Microsoft Intune! I’ve been waiting for this feature since the day I started using Intune. Application inventory was never just a nice‑to‑have – it’s been an essential capability that admins have needed for years. And now, it’s finally here. With this release, we can […]

May 8, 2026 · 7 min read
Entra

How to Audit Security Dynamic Group Membership Changes using Microsoft Graph API

Key Takeaways How to Audit Security Dynamic Group Membership Changes using Microsoft Graph API! Dynamic groups simplify access management by allowing resource owners and Microsoft Entra ID directory admins to assign a consistent set of permissions to all members automatically. Beyond that, group ownership can be delegated to trusted individuals, such as department heads or […]

March 17, 2026 · 6 min read
Entra

Microsoft Graph API Automation to Reclaim the Microsoft 365 License of Disabled Users

Key Takeaways Microsoft Graph API Automation to Reclaim the Microsoft 365 License of Disabled Users! This article explains how to automate the process of reclaiming Microsoft 365 licenses from disabled users. License management is a critical aspect of maintaining cost efficiency and compliance in any organisation. Understanding Microsoft 365 Licensing A Microsoft 365 license is […]

March 9, 2026 · 6 min read
Entra

Automate Microsoft Entra User Offboarding with Microsoft Graph API and PowerShell

Key Takeaways Automating the removal of Microsoft Entra users is a critical yet often complex responsibility for IT teams. Offboarding goes far beyond simply disabling an account – it requires a careful, methodical approach to revoke access across multiple services. This includes removing licenses, relinquishing assigned roles, and reassigning application ownership to ensure that no […]

January 22, 2026 · 12 min read
Intune

How to Enable or Disable Tamper Protection for your Organisation using Microsoft Intune Antivirus Policy

Key Takeaways : Let’s learn how to enable or disable Tamper Protection in Microsoft Intune using Endpoint Security Antivirus Policy. This article will help you understand how to allow Tamper Protection in Microsoft Defender for Endpoint using Endpoint Security Antivirus Policy. Microsoft Defender Antivirus provides strong protection for Windows devices against malware and other security […]

January 12, 2026 · 8 min read
Intune

How to List all Windows 365 Cloud PCs in your Tenant using Microsoft Graph API

How to List all Windows 365 Cloud PCs in your Tenant using Microsoft Graph API! Let’s list all the Microsoft 365 Cloud PCs in a Tenant using Microsoft Graph API. This article demonstrates how to automate the process of retrieving all Windows 365 Cloud PCs in a tenant using the Microsoft Graph API. Let’s learn together […]

November 28, 2025 · 7 min read
Intune

Automate the Process of Removing Primary User from Intune Device using Microsoft Graph API

Automate the Process of Removing Primary User from Intune Device using Microsoft Graph API! In this article, we’ll explore how to remove the primary user from an Intune-managed device using its machine name, leveraging Microsoft Graph API and PowerShell scripting. This approach is particularly useful when transitioning devices into shared mode for environments like classrooms, […]

November 11, 2025 · 12 min read
Intune

How to Enable or Disable Energy Saver Always-on Mode in Intune Settings Catalog

How to Enable or Disable Energy Saver Always-on Mode in Intune Settings Catalog. In today’s mobile-first landscape, battery performance is no longer a convenience, it’s a cornerstone of productivity. Whether you’re working remotely, traveling for client engagements, or delivering technical workshops, uninterrupted power is essential. Modern devices are expected to support demanding workloads like real-time […]

October 28, 2025 · 10 min read
Intune

Block Untrusted and Unsigned Processes that Run from USB using Attack Surface Reduction Rules in Intune

Block Untrusted and Unsigned Processes that Run from USB using Attack Surface Reduction Rules! Let’s discover how Attack Surface Reduction aka ASR rules can enhance your organization’s security posture by preventing untrusted or unsigned processes, especially those launched from USB devices from executing on endpoints. This targeted control helps mitigate risks associated with portable media […]

October 16, 2025 · 9 min read