Thanks once again to BBC Radio 3 for having us in for a sing and a chat last Thursday! It's always a pleasure, hope to see you again soon! Go give it a listen if you missed (or even if you didn't!)
https://www.bbc.co.uk/programmes/m00291kv

Hey Mastodon, question for my #sysadmin and #DevOps types. Has anyone used #Pester and #PSScriptAnalyzer to set up unit testing for test driven development, particularly on (relatively) simple #PowerShell scripts like you might use for application detection, installation, and uninstallation from a system like #SCCM #Intune or #ManageEngine ?

Apologies for the buzzword bingo, but I’m trying to reach folks who may be following the hashtags, but not necessarily have a connection otherwise.

Hey if you happen to have access to BBC Radio 3, you might want to point your ears towards In Tune starting IMMINENTLY where we'll be in the studio doing some songs!

If you have a #Windows 11 PC with a local account and you need to start using #EntraID and #InTune via a provided #Microsoft account, can you just connect the local account to the EntraID/InTune Microsoft account in the settings, or do you have to log in separately to the new Microsoft account (and set up your whole working environment again)?

(A page on the Microsoft site suggests it's possible to connect the two, but am not sure if I'm understanding it properly.)

Microsoft announced via the Message Center message ID MC810406 that support is ending for User Enrollment with Company Portal for iOS devices in September 2024.

The reason for this change is that in iOS 18 Apple is no longer supporting profile-based user enrollment, which effectively means the end of support just for user enrollment through the Company Portal app. And given that most of the commonly used iOS/iPadOS devices get the update to iOS 18, it probably doesn't make sense to continue support for user enrollment through the Company Portal app.

Watch my YouTube video bellow for details
https://youtu.be/7uBCGNrU2oA

#unplugtrump Tipp: als Alternative zu Microsoft #Intune und co. werfe ich #Baramundi in den Raum: https://www.baramundi.com/de-de/ Habe ich selbst in Vergangenheit benutzt und war echt begeistert. Lässt sich wunderbar on premise betreiben. @buyeuropean @european_alternatives

𝐇𝐎𝐖 𝐓𝐎 𝐃𝐄𝐏𝐋𝐎𝐘 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓 𝐎𝐍 𝐈𝐎𝐒 𝐕𝐈𝐀 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐈𝐍𝐓𝐔𝐍𝐄

Unlike Android, Microsoft Defender for Endpoint can be installed and configured on Apple iOS in a completely zero-touch mode for the end user via Microsoft Intune. The end user does not need to confirm any settings, permissions or anything else on their iOS/iPadOS device afterwards.

Watch my YouTube video bellow for more details
https://youtu.be/QHJCDr49RhY

#nowplaying #bbcsounds #radio3 #intune We are promised 'Ode to joy' later in the programme. #EU

So wollt mal wieder ein #jobangebot loswerden oder zwei, drei.
Wir suchen für unser Infrastrukturteam, ein paar #Teamplayer im Bereich #Clientmanagement #SCCM / #Intune

#Storageadmin
#Netapp

#Datacenter Administration und #ServerAdministration

Jobinfos und weitere freie Stellen gibts hier:
https://karriere.klinikum.uni-heidelberg.de/index.php?ac=search_result&search_criterion_organization%5B%5D=1226

#AMA da ich hier privat poste, kann ich zu allen Stellenfragen unverblühmt antworten.

#FediHire #Fedijobs #job
@jobangebot

I will be at @psconf.eu this summer in Malmö taking about #PowerShell, #Intune, #Winget, and I'll be building #SOC tools on stage too.

Are you coming to #PSConfEU?

Application updates can be managed through Intune or through external tools. External tools typically provide significantly more configuration and customization options.

But external tools need to be purchased, set up, integrated, and maintained. In addition, it is not infrequent that external tools, nowadays typically in the form of a service, have security incidents. Such an incident can then directly endanger your environment through a so-called supply chain attack. There are many examples of supply chain attacks in the history.

For the reasons mentioned above, I recommend using the native capabilities within Microsoft Intune. For Microsoft 365 Apps, there is native support in Intune for update configuration, so there is not much reason to even address this with another tool.

Watch my YouTube video bellow
https://youtu.be/WtX-eoGWCfQ

Current work on #Linux with #Intune and #MDM

Microsoft Edge updates can be configured via Microsoft Intune. Microsoft Edge updates are configured through Device Configuration Profiles.

Watch my YouTube bellow for more details
https://youtu.be/vTFk7iMKYfk

HOW TO DEPLOY MICROSOFT DEFENDER FOR ENDPOINT ON MACOS VIA MICROSOFT INTUNE

Microsoft Defender for Endpoint supports all commonly used platforms. Including Apple’s macOS.

Many macOS device owners believe they don’t need a security product. They tend to say that there are no viruses or malware on macOS. Unfortunately, this is a very naive and risky opinion. The opposite is true actually, and even macOS is targeted by threat actors. Therefore, you need a security product on macOS as well.

And it’s not just viruses or malware. But what about phishing? You receive a fraudulent link via email, some messenger or iMessage, you click on it and it leads to a phishing site. You need to protect yourself against such threats too.

Watch my YouTube video bellow
https://youtu.be/R631h3di898

EVENT: #Microsoft Technical Takeoff (March 3-6, 2025) the *free* #Windows & #Intune virtual conference, is back w/ deep dives & panels for Windows, #Windows365, Intune, #AzureVirtualDesktop & #Security.
https://techcommunity.microsoft.com/event/techcommunitylive/microsoft-technical-takeoff/4304008

HOW TO BLOCK TOP-LEVEL DOMAINS VIA MICROSOFT INTUNE

There are multiple ways to block specific domains. The easiest way to do this is within Microsoft Defender for Endpoint using Indicators. However, Indicators does not allow you to block top level domains (TLDs). But what if you want to block the entire top level domain, for example everything on the .ru domain?

In that case, you can use firewall rules in Microsoft Intune.

Watch my YouTube video bellow
https://youtu.be/fRDlsPh1C0g

One of the configuration options for Windows Firewall is called Local Policy Merge. In general, Local Policy Merge exists in other settings as well, for example, it appears in several places within Microsoft Defender.

It is generally recommended to disable Local Policy Merge. This is because Local Policy Merge means that in addition to the centrally defined rules, the local configuration will also be taken into account. And this is usually undesirable.

Watch my YouTube video bellow for more details
https://youtu.be/eZQlld82TRQ

By default, on macOS, you always have a local account. There was no option to natively sign-in to Microsoft Entra ID like on Windows. There was not even any option to natively sign-in to Apple ID. The account is always local with a local password, just linked to your Apple ID.

This behavior has changed with the release of Platform SSO, where the Microsoft Entra ID account logs directly into macOS, the equivalent of Microsoft Entra Join. But there is a full SSO to Microsoft Entra ID thanks to the Microsoft Enterprise SSO plug-in.

Watch my YouTube video bellow
https://youtu.be/mxafsVXp-8I

Apple iOS and iPadOS devices have several Intune enrollment options. Do you know what the differences are between them and which method to use in which scenario?
- Automated Device Enrollment
- Apple Configurator
- Manual Enrollment

Watch my YouTube video bellow
https://youtu.be/hf9MwfMvtIw

By default, Windows includes ads for other Microsoft products and services, such as using your Microsoft account, backing up your data to OneDrive, etc., but Windows also includes various tips and recommendations that are displayed to users.

Some of the recommendations may be appropriate for the average end user. However, they are probably inappropriate for a corporate environment, as corporate IT usually has these things handled centrally and the end user usually has no way to interfere anyway.

Watch my YouTube video bellow
https://youtu.be/rc5G2IVv9dA