Monthly What's New
Recast’s Endpoint Management Recap – June 2022
Daniel Engberg
Welcome to Recast’s Endpoint Management Recap, June 2022 – by Daniel Engberg.
It feels good to be back with another edition! The summer is in full swing here in Sweden, but I have a few more weeks of work before vacation. I hope you all enjoy the warm weather, and those who start your vacation this week can reenergize and relax.
This month we have had a few highlights, including a new Configuration Manager Technical Preview, a Windows Insider version, and a few vulnerabilities to address.
Enjoy the sun, catch up on this newsletter with something cool to drink, and we’ll be back with another endpoint management recap in July!
Contents – Endpoint Management Recap
- Events / Conference News
- Microsoft Product Announcements
- Hardware Vendor Updates (Tools / Security / Features)
- Community Tools / News
- Recast Updates
- Tech Community Live: Microsoft Endpoint Manager – July 2022 – Microsoft Tech Community – Thursday, July 21, 2022
This week we have some new AAD news, including the Temporary Access Path and nested groups using AAD dynamic groups.
We also have updates with a new version of the Configuration Manager Technical Preview 2206, adding the possibility of having a cloud-based source as a fallback.
From the Windows side, a new Insider Preview Build (25145) has been released, which now includes the LAPS feature. Less for us IT Pros to think about (hopefully)! I love it when different products with clear synergies get integrated.
Products
Azure Active Directory [What’s New Page]
- Secure authentication method provisioning with Temporary Access Pass – Microsoft Tech Community
- Create “nested” groups with Azure AD Dynamic Groups – Microsoft Tech Community
ConfigMgr Tech Preview [What’s New Page]
A new version of Configuration Manager Technical Preview 2206 has been released with the possibility of configuring a cloud-based source in the default boundary group:
Microsoft Endpoint Manager (Intune) [What’s New Page]
- New settings available to configure local user group membership in endpoint security – Microsoft Tech Community
- Preview app and driver compatibility insights in Endpoint Manager – Microsoft Tech Community
- Universal Print settings available in Microsoft Endpoint Manager – Microsoft Tech Community
Windows [What’s New Page]
- Windows Client
Security Alerts and Info [Microsoft Security Portal – Security Update Guide]
- Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability – Microsoft Security Response Center
- KB5004442—Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414) (microsoft.com)
Every month, we cover updates to the tools, scripts, and software provided by the major hardware vendors related to enterprise client management. For a full list of tools, blog posts and information about the vendors, check out the ConfigMgr Manufacturers’ page.
** Much of this information is provided directly from the vendor, so when you see “we” think of it as, “Vendor Name,” and not Recast Software.
NO UPDATES FOR JUNE
Due to the sheer amount of community content, I have decided only to include one post per contributor, to keep the size of the endpoint management recap down. Great work everyone with providing so much to us for free!
Podcasts / Blog Series / Video Blogs
- Let’s Chat: ConfigMgr – Enable Dark Mode – YouTube – Jordan Benzing – (@JordanTheITguy)
- Intune Graph API Query Tips and Graph X-Ray to get PowerShell Scripts from MEM Admin Center – YouTube – Namaste Techies – (@anoopmannur and @Hoorge)
- Intune Policy Creation using Graph API using POST method | Graph Explorer | Beta Vs. v1.0 – YouTube – Anoop C Nair (@anoopmannur)
- Windows Autopatch – 1. Tenant Onboarding and Device Registration – Shehan Perera:[techBlog] – Shenan Perera (@Shehanperera85)
- Windows Autopatch – 2. Deployment Rings, Security Groups and Device Profiles – Shehan Perera:[techBlog] – Shenan Perera (@Shehanperera85)
- Windows Autopatch – 3. Support Requests – Shehan Perera:[techBlog] – Shenan Perera (@Shehanperera85)
- What is CVE-2022-30190 ? What are the threats and workarounds to overcome this vulnerability ? – YouTube – Yagnesh Malaviya (@YagneshMalaviya)
Blog Posts
Cloud Tech
- Do not display last logged on user – Just about the Modern Workplace (joostgelijsteen.com) – Joost Gelijsteen – (@Jgelijsteen)
- Deploy VMware Tools via Microsoft Endpoint Manager/Intune – tech.tristantyson.com – Tristan Tyson (@modernenduser)
- Resize group-based licensed Cloud PC with PowerShell – Welcome to Pedholtlab – Morten Pedholt (@MortenPedholt)
- Breaking down the Windows Autopilot hardware hash – Out of Office Hours (oofhours.com) – Michael Niehaus (@mniehaus)
- Removing automatically Proactive Remediation scripts after execution on devices | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys – (@syst_and_deploy)
- 4 Ways to Manually Sync Intune Policies on Windows Devices (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
- Intune – You can now re-enable co-management capabilities after Autopilot (hametbenoit.info) – Benoit Hamet (@benoit_hamet)
- Using Microsoft Tunnel for per-app VPN – All about Microsoft Endpoint Manager (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
- Increase MaxSize of Windows Event log file with Intune – MDM Tech Space (joymalya.com) – Joymalya Basu Roy (@jbasuroy369)
- Create Azure AD Dynamic Device Group using Mobile Device Management Type | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
- Detect Office Bitness to use in Intune app requirement – Cloud Clients – James Barber (@barberj66)
- Configure RBAC for Intune in a secure way – Endpoint Cave – René Laas (@mr_helaas)
- Microsoft Store for Business Deprecated! What to do now? (call4cloud.nl) Rudy Ooms – (@Mister_MDM)
- Simon does…: Windows 11 – Customize the Start menu layout (skotheimsvik.blogspot.com) – Simon Skotheimsvik (@SSkotheimsvik)
- How To Get Application Version Details From Intune HTMD Blog (anoopcnair.com) – Jitesh Kumar – (@jitesh8092)
- Cloudflare integrates with Microsoft Intune to give CISOs secure control across devices, applications, and corporate networks – Abhi Das & Kyle Krum (@AbhiDasOne & @KyleKrum)
- Use Group Policy analytics to migrate Microsoft 365 Apps Security Baseline to the cloud – imab.dk – Martin Bengtsson (@mwbengtsson)
- PS Script To Add Or Modify Group Tag Of Autopilot Devices In Intune HTMD Blog (anoopcnair.com) – Debabrata Pati – (@DebabrataPati89)
- How to target security policies to devices NOT enrolled into Intune – Mindcore Techblog – Mattias Melkersen – (@MMelkersen)
- Assigning Windows 10/11 Enterprise Subscription Activation Licences to Hybrid Azure AD Joined Devices (teamas.co.uk) – Ben Owens (@BenjaminOwens)
- Azure AD LAPs Group Policy Settings For Windows 11 HTMD Blog (anoopcnair.com) – Anoop C Nair – (@anoopmannur)
ConfigMgr
- Configuration Manager Cloud Attach with Niall Brady “Windows Noob” and Paul Winstanley “SCCMentor” – YouTube – Mattias Melkersen – (@MMelkersen)
- Create SCCM Query Find Device From BIOS GUID HTMD Blog (anoopcnair.com) – Jitesh Kumar – (@jitesh8092)
- Dell BIOS Configuration in Task Sequences Using Hidden Variables – Endpoint Manager Tips – Dylan Brown (@Dylbrwn1)
Other SysAdmin Info
- Better PowerShell Properties • The Lonely Administrator (jdhitsolutions.com) – Jeff Hicks (@JeffHicks)
Tool Updates
- New version of MASHIPA – Nicklas Eriksson (@Sigge_Gooner)
- The second installment of our 5-part webinar series on Endpoint Insights is now available on-demand! Register here to catch the next part on July 12th.
- We are hiring! If you or someone you know is looking to make a huge impact at a fast-growing company, take a look at our job postings and apply today.
- Follow us on Twitter @RecastSoftware to hear the latest.
Thank you for checking out Recast’s Endpoint Management Recap – June 2022. Stay tuned for more helpful content coming your way.
