Practical Microsoft security, identity and governance insights
Practical Microsoft security, identity and governance insights
TL;DR– OneDrive Photos can appear as part of the existing OneDrive installation and surface local images even when no Microsoft account is signed in.– After sign-in, AI search, OCR and optional facial grouping become available, introducing additional processing of photo…
Every IT professional knows the struggle: an Intune notification pings with a vague error code or cryptic alert about a device compliance issue, failed update, or potential security threat. You're left scratching your head, wondering, "What does this even mean?" These unclear messages can bury critical issues, like non-compliant devices or malware risks, in a flood of noise. Imagine if those alerts came with clear, human-readable explanations and actionable steps.
Microsoft’s new OneDrive feature, launching in May 2025, lets users sync personal accounts on work devices—a convenience that could spell trouble for businesses. This opens the door to data leaks and compliance risks. Our post dives into these security concerns and offers IT administrators practical solutions using Group Policies and Intune. Learn how to lock down personal syncing and protect your organization’s sensitive data—read on to stay ahead of the threat!
Discover how Autopilot Device Preparation can streamline Windows device deployment in modern, cloud-driven IT environments. This guide explains a step-by-step process—from setting up security groups and configuring Intune policies to utilising Delivery Optimisation for improved network efficiency. While Autopilot simplifies deployment with zero-touch provisioning, it currently lacks key features such as removing OEM bloatware, custom Windows imaging, and clean OS reimaging for every new device. Explore how these limitations can be addressed, and consider complementary solutions like the PowerShell Deployment Solution (PSD), to fully meet your organisational needs.
Microsoft is rolling out the New Outlook for Windows, with automatic transitions starting in January 2025 for Microsoft 365 Business Standard and Premium users, and April 2026 for Enterprise users. Organisations can manage this migration using Microsoft Intune, leveraging detection and remediation scripts to control when and how users switch. Get ahead of the change by planning, testing, and communicating updates to your teams to ensure a smooth transition.
Discover how Microsoft 365 Desired State Configuration (DSC) empowers IT professionals to automate, monitor, and maintain tenant configurations with ease. This blog dives into the benefits of DSC, including drift prevention and multi-tenant synchronization, while providing a step-by-step guide for deployment. Learn from real-life examples covering Exchange Online, Intune, and Entra, and explore additional resources to streamline your configuration management. Whether you're using DSC, Azure Runbooks, or Terraform, find the tools to optimize your automation strategy. Read on to master tenant management!
DUDE (Dynamic User and Device Enumeration) is a powerful tool for IT administrators to automate the process of retrieving and managing user and device data from Azure AD. Leveraging Microsoft Graph API and PowerShell, DUDE streamlines security monitoring, compliance reporting, and device management. This guide covers its architecture, setup, common use cases, and real-world applications to enhance IT workflows. Learn how DUDE can save time and ensure up-to-date, compliant IT environments.
Multi-Admin Approval (MAA) is a security feature introduced in March 2023 in Microsoft Intune, enhancing security by requiring multiple admin approvals for high-risk actions. This powerful tool helps prevent unauthorised changes, reduces risks, and supports compliance. In this guide, we’ll explore how MAA works, its benefits, required licences, and provide a step-by-step tutorial on setting it up to safeguard your Intune environment.
Tired of constant firewall and network protection notifications cluttering your Windows 10 workstations? Learn how to easily disable these notifications using Microsoft Intune without turning off the firewall itself. This guide walks you through creating a custom device configuration policy with Configuration Service Provider (CSP) settings, allowing you to silence notifications while keeping your devices secure. Ideal for environments like POS systems where minimal disruptions are crucial, this step-by-step approach ensures a streamlined user experience.
Managing shared or newly built Windows devices can be challenging, especially when old user profiles accumulate and pose security risks. With Microsoft Intune, you can easily declutter your endpoints by automatically deleting stale profiles. This guide walks you through setting up a configuration profile to remove profiles that have been inactive for 60 days, ensuring your devices remain secure and efficient.
