Home Newsletter 2023 Endpoint Management Community Newsletter – July 31 – August 13, 2023

Endpoint Management Community Newsletter – July 31 – August 13, 2023

August 13, 2023

1648

Table of Contents

Introduction

Today, we have a fully stacked newsletter since we’ll cover the past two weeks. Last Sunday, there was no newsletter as we were busy welcoming our baby girl to the world, who had arrived on Saturday. Everything went well, and I’m happy!

The highlight for the past fortnight is the Windows 365 switch, where you can easily switch between your regular Windows machine and your Windows 365 machine directly from Windows 11.

Here is the official release information:

Windows 365 Switch now available in public preview – Microsoft Community Hub

Here is some content from the community.

Getting started with Windows 365 – Part 9. Windows 365 switch – Windows 365 – www.windows-noob.com – Niall C. Brady & Paul Winstanley (@ncbrady & @SCCMentor)
Windows 365 switch demo – YouTube – Niall C. Brady & Paul Winstanley (@ncbrady & @SCCMentor)

And some Twitter updates:

Tom Hickling on Twitter: “Here is another #Windows365 public preview for you. This allows you to easily “switch” back and forth to your Windows365 session from the Task view. You can also use a 4-finger swipe on a trackpad or touch screen or Ctrl + Win + Left or right arrows keys. https://t.co/bkzHmnPPbO https://t.co/g3I27bTiCN” / X

Thanks for sticking around, and see you next week!

/Daniel

Updates from Microsoft

Cloud security updates from the community

Workgroup Joined Device Enrollment To MDE Defender For Endpoint HTMD Blog (anoopcnair.com) – Vidya M A (@Vidyasasidhara)
S05E02 – Microsoft Defender for Endpoint on Android (I.T) – YouTube – Intune Training Series (@OnPremCloudGuy, @AdamGrossTX, @powers_hell, @jgkps and @shackelfjaco)

ConfigMgr updates from the community

ConfigMgr 2303 Hotfix KB24721208 to Fix Slow data processing (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)

Intune updates from the community

Configure AppLocker in Intune – YouTube – John Bryntze (@JohnBryntze)
Using on-demand Remediation to collect all logs you want on Intune devices | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
Device management RBAC design (Intune & Azure AD) (oceanleaf.ch) – Niklas Tinner (@NiklasTinner)
Using Organizational messages to interact with with your users – (scotscottmca.com) – Scott McAllister (@ScotScottMcA)
Create Web Clip App in Intune for iOS/iPadOS Devices (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
Intune – You can now allow Win32 uninstall (hametbenoit.info) – Benoit Hamet (@benoit_hamet)
Unleashing Control and Efficiency with Intune Custom RBAC Roles – Mindcore Techblog – Mattias Melkersen (@MMelkersen)
Just Dropped In (To See What Condition My Conditional Access Rule Was In): Part 9 – Require approved client apps and app protection – SCCMentor – Paul Winstanley & Mike Marable (@SCCMentor & @mike_marable)
How to disable access to removable storage devices with Microsoft Intune (ccmtune.fr) – Mogis Christopher (@MogisChris59)
Intune: Uninstall Apps in Company Portal for Windows Devices (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
Endpoint Privilege Management | Policy Refresh | EPM | WinDC (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
New settings available for the iOS/iPadOS web clip app type – SCCMentor – Paul Winstanley (@SCCMentor)
Deploy Microsoft Edge to MacOS using Intune (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
Simple Way To Add IOS To Apple Business Manager And Manage In Intune – Part 2 HTMD Blog (anoopcnair.com) – Malepati Naren (@Narenmalepati)
Microsoft Intune, Uninstall Win32 app with the company portal (ccmtune.fr) – Mogis Christopher (@MogisChris59)
Setting Up Your Intune Environment | scloud – Florian Salzmann (@FlorianSLZ)

Powershell updates from the community

PowerShell: Creating an “empty” PSCustomObject (devdojo.com) – Christian Ritter (@blackboxcoder)

Other updates from the community

Reboot Chronicles: An In-depth Look at Android Mainline Updates (intuneirl.com) – Somesh Pathak (@pathak_somesh)
Starting with Log Analytics: Part 8 – Sending data to Log Analytics from Azure Automation | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
The curious case of the missing OneDrive sync app health reports – MSEndpointMgr – Maurice Daly (@modaly_it)
Windows 365 web client can now use the local PC’s web camera – Windows 365 – www.windows-noob.com – Niall C. Brady (@ncbrady)

Seen on Twitter

#Reminder you can check the following to see if there are safeguard holds (#GStatus) in place or if your device is #Windows11 eligible (#UpgEx)

ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionAppCompatFlagsTargetVersionUpgradeExperienceIndicatorsNI22H2 pic.twitter.com/VQsXbdU23i
— ariaupdated (@ariaupdated) August 10, 2023

📢 v1.5.0 is now released and focuses on bug fixes for App Protection and backing up Settings Catalog and Endpoint Security simultaneously🪲 #MSIntune #IntuneInspired #IntuneAsCode #IntuneCD pic.twitter.com/ncwHKjncIX
— IntuneCD (@IntuneCD) August 9, 2023

Lessons learned #Intune Uninstall PowerShell Wrapper, don't use:

Get-Package -name "Adobe*" | Uninstall-Package

Use below instead:

(Start-Process msiexec.exe -Argumentlist "/X {GUID} /qn" -Wait -PassThru).ExitCode
— Trond E Haavarstein (@xenappblog) August 2, 2023

2023 – Day 217 @MicrosoftLearn achievement of the day:"Advance your security posture with Microsoft Intune from chip to cloud" hope this inspires you to start your own @MicrosoftLearn journey! https://t.co/la0xSvZapp #Intune #MSLearn #AlwaysLearning #WIMVP #365DaysofLearn
— Erik Moreau #MVP #WIMVP #MODERNDESKTOP 🇧🇪 (@ErikMoreau) August 5, 2023

Dell Trusted Device updated > https://t.co/kIOnMRBct0 #DellTools #Intune pic.twitter.com/h3uFuwdvDB
— Mesut Kaptanoğlu (@mkaptano) August 7, 2023

Want to know a #PowerShell cmdlet’s output without actually running it? Try this in ChatGPT:

“I will be typing PowerShell commands and I'd like for you to respond with what a PowerShell console would produce with no additional commentary; only the output.”

Type a command.
— Adam Bertram (@adbertram) August 9, 2023

Have you ever wanted to query Azure AD (Entra ID) join information in #PowerShell without calling dsregcmd.exe /status and parsing the textual output? I've got you covered with this code snippet that calls the underlying Windows APIs directly: https://t.co/2CJbNSahrY
— Marc-André Moreau (@awakecoding) August 8, 2023

Company Portal uninstall capability is rolling out!
This is set to "No" for all existing applications but defaults to "Yes" when creating a new app.

Time to go update all those apps with non-working uninstall commands 😉#MSIntune #ModernManagement #EmpowerTheUser pic.twitter.com/qQ0RsaebJ8
— James Robinson | MVP (@SkipToEndpoint) July 31, 2023

Did you know:
A Microsoft Store app deployed using the System install behaviour will persist a device Wipe!

I didn't! (though it does make sense)
It doesn't seem to be in docs, and this might not be the behaviour you want, depending on the Store app you're deploying…#MSIntune pic.twitter.com/d3sHzemepf
— James Robinson | MVP (@SkipToEndpoint) August 1, 2023

As of today, Intune Uploader supports LOB type apps. The PKG must be signed and notarized prior to using with the tool. Using the Firefox recipe for example, all need to do is set the "lob_app" key in the override to upload as LOB instead of PKG 🚀 #MacAdmins #MSIntune #MVPBuzz pic.twitter.com/6UyvQHXOB5
— Tobias Almen 🇸🇪 {MVP} (@almenscorner) August 2, 2023