How to exclude below path from Intune policy which has unique and different users name on each users devices to run only particular app with file name for example: abc.client.exe or abc.exe?
How to exclude below path from Intune policy which has unique and different users name on each users devices to run only particular app with file name for example: abc.client.exe or abc.exe? For example: I wanted to exclude a particular file with…
Show Bitlocker Self-Service URL on Pin/Recovery Screen?
It looks like enterprise users can access their bitlocker recovery screen at https://myaccount.microsoft.com/ Is it possible to convey this to users on either the bitlocker recovery screen or the bitlocker startup screen if they forget their pin? This…
ASR Exclusions don't seem to work
TAGS are horrible with Microsoft Q and A so don't even say I put it in the wrong area... just don't... :) I'm working on ASR rule specific exclusions. They don't seem to work. I'm following procedure by reading reports in Security center and adding…
![](https://techprofile.blob.core.windows.net/images/i5RCddKURUmr9hZ31GrmVw.png?8D8EE3)
Is there any settings or configurations in M365 Defender for Endpoints/Intune which does network/Wi-Fi monitoring which is being used by end users while they are working remotely or from locations with open network and not corporate or VPN and Identify wh
Is there any settings or configurations in M365 Defender for Endpoints/Intune which does network/Wi-Fi monitoring which is being used by end users while they are working remotely or from locations with open network and not corporate or VPN and Identify…
Windows Hello for Business PIN login for desktop with roaming profile / hotdesking ?
Hi Team, I wonder if anyone here can clarify whether the Windows Hello for Business PIN login (passwordless) can work for the desktop with a roaming profile/hotdesking? Because the Desktop does not have a biometrics-enabled device, unlike the…
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
Does modification of the 'Report Message' button function negatively impact our organisations security?
We are looking to change the settings on the Outlook 'Report Message' button to enable staff to report suspicious emails. Modification of the ‘Report Message’ button in Outlook for staff to report Phishing to an internal group email address requires…
Microsoft Defender for Endpoint KQL - Action Types
Hello Everyone, I was wondering if someone can explain me a dieffrence betwen Action types in Microsoft Defender for Endpoint when hunting events via Advanced Hunting. We wanted to have a deeper visibility on how many users have downloaded attachment…
Are there any changes in Autopilot and Azure AD for AAD joined devices as I have observed that when we join the device to Azure AD that device gets added to Autopilot automatically even after removed from Autopilot, Intune and Azure AD?
Are there any changes in Autopilot and Azure AD for AAD joined devices as I have observed that when we join the device to Azure AD that device gets added to Autopilot automatically even after removed from Autopilot, Intune and Azure AD? Here is our…
Intune: Firewall Rules Policies
Hello I want to apply an Intune Firewall policy so that only certain applications connect to the internet and the rest are blocked. To secure the connection of these computers to Intune, what application/ports do I need to add to the firewall rules so…
How to configure Azure and Entra ID logs into Log Analytics for Kusto Query?
Hi All, I need some help and suggestions to configure Azure and Entra ID logs into Log Analytics for Kusto Query. What are the procedures and what is the cost involved? Thanks.
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
How to deploy this Exploit protection policy and how it works across M365 tenant and devices?
How to deploy this Exploit protection policy and how it works across M365 tenant and devices? As I can see it requires the script but really not sure which script is needed and how to build from the below link?…
User pin locked
Hp laptop windows user login pin failed as security options have been changed no reset password option
How to Block only USB mass storage device from Intune
Hello There, I want to block only USB pen drive and other storage devices only from Intune. but the same time i want to access my other USB devices like keyboard, mouse, headphones etc. Please help! Thank You. Kind Regards, Pradeep
![](https://techprofile.blob.core.windows.net/images/vGy8xAFAAwAAAAAAAAAAAA.png?8D8984)
Sentinel - KQL for High tags
Hi All, Need your suggestion and support please We have Defender for endpoint, VIP devices are tagged as HIGH value assets under "Device Value" settings. Now i want to run advanced hunting queries which pulls "High" tagged devices…
![](https://techprofile.blob.core.windows.net/images/v_kizv6d6kmtnx5UIpE3wA.png?8D80AC)
Microsoft Azure and 365 security logs retention?
How far back or how long does Microsoft keep the logs that the Kusto QL may query from this website https://security.microsoft.com/v2/advanced-hunting?
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
How to Force MDE device management ( instead of configuration manager) for Windows Server
Hi, We are trying to managed Windows server 2016 and 2019 using the MDE /Intune policies. The status for Device managemnt is showing the status managed by 'config mgr' ( should be changed to managed by MDE) Settings for 'Use MDE to enforce…
Windows catalogue app(Win32)
Hi I cannot see Windows catalogue app(Win32) while adding application
Which admin role should be added or provided to a user/admin account which would be used to provide admin privilege's while doing admin tasks on Autopilot and Entra ID joined devices on remote session by Helpdesk admin?
Which admin role should be added or provided to a user/admin account which would be used to provide admin privilege's while doing admin tasks on Autopilot and Entra ID joined devices on remote session by Helpdesk admin? For Example: User needs to…
ASR policy deployment status not getting updated
I have configured an ASR policy of type - "Windows 10, Windows 11, and Windows Server (ConfigMgr)" The policy is successfully deployed the endpoint: SCCM shows the deployment is successful: The Overview shows that the policy is deployed to 1…
![](https://techprofile.blob.core.windows.net/images/87ESmqZrLUGA2Ockp7wKAw.png?8D848E)
Possible to block just Screen Recording but not Screenshots?
Previously, when enabling the blocking of screen capturing for iOS devices, and then setting a group to exclude that. Users in the group to be included could not screen capture or screen record. While users in the exclude group, could screen capture, but…