Android Enterprise - Shared Kiosk mode - remove saved data
I kind of have the feeling this is more a feature request, because I couldn't figure out how to set this up and it probably doesn't even exist. Setup: Android Tablets enrolled in Intune setup as Shared Kiosk devices. Users have access to Team, O365 and…
Device Control do not change registry after changes in ASR Policy in Intune/Defender
Hola, I have a question regarding "tattooing" records in registry by ASR Policy handling Device Control. So the case is, in my corporate environment I configure ASR Device Control policy to block any Removable Media Storage (of course in…
Conditional Access Policy Frustration
I do what I am asked. I was asked to build a policy that would prevent using Office 365 apps or access to Online apps unless the device was either Entra Registered or Entra Joined. I have this working 99%. The issue is that I cannot enroll new devices…
![](https://techprofile.blob.core.windows.net/images/0Y6LgkdhtkStHrX-I2IY2g.png?8D8599)
How to relaunch Microsoft and non Microsoft apps on devices via Intune policy or any other way in M365? For example: Zoom, Slack, Teams, Firefox Asana, etc.
How to relaunch Microsoft and non Microsoft apps on devices via Intune policy or any other way in M365? For example: Zoom, Slack, Teams, Firefox Asana, etc.
Cannot Push Bitlocker with Intune Silently to our Organization.
We are pushing bitlocker via Intune to a group of test users and cannot get it to encrypt silently. Attached are the prompts users are seeing (alot of users do not have local admin so they couldn't encrypt if they tried), also attached are bitlocker…
How to rename the computer in bulk via Intune using PowerShell script or any other way as all those devices are managed via Intune?
How to rename the computer in bulk via Intune using PowerShell script or any other way as all those devices are managed via Intune? I have a requirement to rename the device from default name to something like few unique characters and then device serial…
Can i run onboarding scripts from 2 different tenants on the same machine ?
I have a test machine and a tenant (Lets say tenant abc) Now, i downloaded onboarding script from the abc tenant . the installation was successful . But, the machine doesn't report the report to MDE portal . This is a network issue .(I'm not worried…
![](https://techprofile.blob.core.windows.net/images/YR-6B_VTR0ODyuIJugBgGg.png?8DA7DF)
What does this settings do in the M365 defender for Devices to scan/discovery and network scan devices and what are the use cases of these?
What does this settings do in the M365 defender for Devices to scan/discovery and network scan devices and what are the use cases of these? See below screenshot.
Using Intune to enforce local administrator of workstations like Group Policy Preferences.
How can I achieve the same thing with the Intune policy to enforce the local administrator of the workstation ? Remove any local administrator users, other than 'ITSupport' Group Policy Preferences:…
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
How to exclude below path from Intune policy which has unique and different users name on each users devices to run only particular app with file name for example: abc.client.exe or abc.exe?
How to exclude below path from Intune policy which has unique and different users name on each users devices to run only particular app with file name for example: abc.client.exe or abc.exe? For example: I wanted to exclude a particular file with…
Show Bitlocker Self-Service URL on Pin/Recovery Screen?
It looks like enterprise users can access their bitlocker recovery screen at https://myaccount.microsoft.com/ Is it possible to convey this to users on either the bitlocker recovery screen or the bitlocker startup screen if they forget their pin? This…
ASR Exclusions don't seem to work
TAGS are horrible with Microsoft Q and A so don't even say I put it in the wrong area... just don't... :) I'm working on ASR rule specific exclusions. They don't seem to work. I'm following procedure by reading reports in Security center and adding…
![](https://techprofile.blob.core.windows.net/images/i5RCddKURUmr9hZ31GrmVw.png?8D8EE3)
Is there any settings or configurations in M365 Defender for Endpoints/Intune which does network/Wi-Fi monitoring which is being used by end users while they are working remotely or from locations with open network and not corporate or VPN and Identify wh
Is there any settings or configurations in M365 Defender for Endpoints/Intune which does network/Wi-Fi monitoring which is being used by end users while they are working remotely or from locations with open network and not corporate or VPN and Identify…
Windows Hello for Business PIN login for desktop with roaming profile / hotdesking ?
Hi Team, I wonder if anyone here can clarify whether the Windows Hello for Business PIN login (passwordless) can work for the desktop with a roaming profile/hotdesking? Because the Desktop does not have a biometrics-enabled device, unlike the…
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
Does modification of the 'Report Message' button function negatively impact our organisations security?
We are looking to change the settings on the Outlook 'Report Message' button to enable staff to report suspicious emails. Modification of the ‘Report Message’ button in Outlook for staff to report Phishing to an internal group email address requires…
Microsoft Defender for Endpoint KQL - Action Types
Hello Everyone, I was wondering if someone can explain me a dieffrence betwen Action types in Microsoft Defender for Endpoint when hunting events via Advanced Hunting. We wanted to have a deeper visibility on how many users have downloaded attachment…
Are there any changes in Autopilot and Azure AD for AAD joined devices as I have observed that when we join the device to Azure AD that device gets added to Autopilot automatically even after removed from Autopilot, Intune and Azure AD?
Are there any changes in Autopilot and Azure AD for AAD joined devices as I have observed that when we join the device to Azure AD that device gets added to Autopilot automatically even after removed from Autopilot, Intune and Azure AD? Here is our…
Intune: Firewall Rules Policies
Hello I want to apply an Intune Firewall policy so that only certain applications connect to the internet and the rest are blocked. To secure the connection of these computers to Intune, what application/ports do I need to add to the firewall rules so…
How to configure Azure and Entra ID logs into Log Analytics for Kusto Query?
Hi All, I need some help and suggestions to configure Azure and Entra ID logs into Log Analytics for Kusto Query. What are the procedures and what is the cost involved? Thanks.
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
How to deploy this Exploit protection policy and how it works across M365 tenant and devices?
How to deploy this Exploit protection policy and how it works across M365 tenant and devices? As I can see it requires the script but really not sure which script is needed and how to build from the below link?…