Recast’s Endpoint Management Recap – November 2022

Welcome to Recast’s Endpoint Management Recap, November 2022 – by Daniel Engberg

Hello!

We’re leaving the dark and grey month of November and entering the Holiday month of December. Whether you are celebrating Christmas or some other holiday, I hope you get some well-earned time off and enjoy the beautiful lights the season brings.

This month, it’s been relatively quiet on the Microsoft release front, but the community has been busy as ever!

Let’s see what December holds before we celebrate the New Year!

I hope you like this edition of the Endpoint Recap and see you next month ?.

– Daniel Engberg

Contents – Endpoint Management Recap

• Events / Conference News
• Microsoft Product Announcements
• Hardware Vendor Updates (Tools / Security / Features)
• Community Tools / News
• Recast Updates

Upcoming Events

• MMS – Midwest Management Summit – MMS at MOA, Minnesota – May 1 – May 4, 2023
• MMS – Midwest Management Summit – MMS 2023 Miami Beach Edition (mmsmoa.com) – October 30 – November 1, 2023

ConfigMgr [What’s New Page] [Tech Community] [Virtual Hub][MS Q\A][Reddit][Feedback]

Microsoft Intune [What’s New Page]

• Announcing enhanced control for configuring Firewall rules with Windows Defender – Microsoft Community Hub
• Endpoint analytics data collection – Microsoft Endpoint Manager | Microsoft Learn
• New device control capabilities to manage removable storage media access in Microsoft Intune – Microsoft Community Hub
• Organizational messages for Windows 11 now in public preview – Microsoft Community Hub
• Use the Enrollment Status Page with Cloud PCs | Microsoft Learn

Windows [What’s New Page]

• Windows Client 
  • Windows 11 makes it easier to connect to your iCloud Photos right in the Photos app | Windows Experience Blog

• Windows 365
  • Cloud PC utilization report for Windows 365 | Microsoft Learn
  • Moving a Windows 365 Cloud PC From One DC Region to Another – MS Hosted Network – Microsoft Community Hub

Security Alerts and Info [Microsoft Security Portal – Security Update Guide]

Every month, we cover updates to the tools, scripts, and software provided by the major hardware vendors related to enterprise client management. Check out the ConfigMgr Manufacturers page for a complete list of tools, blog posts, and information about the vendors.

No updates this month.

Due to the sheer amount of community content, I have decided only to include one post per contributor, to keep the size of the endpoint management recap down. Great work everyone with providing so much to us for free!

Podcasts / Blog Series / Video Blogs‍

• Windows 11 22H2 new feature! Smart App Control – YouTube – Dean Ellerby (@dean_ellerby)
• Getting started with Windows 365 – Part 4. Connecting to your Cloud PC – Windows 365 – www.windows-noob.com – Niall C. Brady (@ncbrady)
• S04E09 – Whiteboarding an Actual Problem – (I.T) – YouTube – Intune Training Series (@OnPremCloudGuy, @AdamGrossTX, @powers_hell, and @shackelfjaco)
• CIS Benchmark Implementation Guide using Intune – Group Policy Migration Process – YouTube – Anoop C Nair (@anoopmannur)
• S04E10 – Bringing our Vision to life! Live Coding – (I.T) – YouTube – Intune Training Series (@OnPremCloudGuy, @AdamGrossTX, @powers_hell, and @shackelfjaco)
• [Endpoint Security] – Windows Defender Application Control (WDAC) part1 with MVP Kim Oppalfens – YouTube – Mattias Melkersen (@MMelkersen)
• [Endpoint Security] – Windows Defender Application Control (WDAC) part2 with MVP Kim Oppalfens – YouTube – Mattias Melkersen (@MMelkersen)
• How to start working with Attack Surface Reduction rules like a boss – YouTube – Mattias Melkersen (@MMelkersen)
• PowerShell App Deployment Toolkit – [Chapter 3 TOP 3 most used functions] – YouTube – Mattias Melkersen (@MMelkersen)

Blog Posts

Intune

• Dynamically Update Primary Users on Intune Managed Devices | (modernendpoint.com) – Sean Bulger (@managed_blog)
• ChromeOS Management with Intune – Preamble – Intune – In Real Life (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• New and Updated Microsoft Intune Device Control Policy Settings – Shehan Perera:[techBlog] – Shenan Perera (@Shehanperera85)
• Windows Autopatch Implementation Setup Guide HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
• Set up Microsoft Defender in the Personal Profile on Android | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• Block Linux enrollment into Microsoft Intune with Conditional Access – TimmyIT.com – Timmy Andersson (@TimmyITdotcom)
• Convert All targeted Devices to Autopilot | Intune Flow (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Install an additional language pack on Windows 11 during Autopilot enrollment | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• Wi-fi configuration profile using Intune and Graph API – MOVE2MODERN.CO.UK (weebly.com) – Andy Jones (@Andy_69Jones)
• Security Benchmark for macOS – Best Practice Guide – Intune – In Real Life (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• Toast notification to notify users when recycle bin contains more than 10GB or more (Intune or MECM) | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• Intune manage write access to mobile storage and removable data drives – All about Microsoft Endpoint Manager (eskonr.com) – Eswar Koneti (@eskonr)
• Automate iOS LOB Provisioning Profile Expiry Notifications – Intune – In Real Life (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• How to configure Microsoft Edge IE Mode with a Cloud Sites List using Intune – tech.tristantyson.com cloudmgmt.co.uk – Tristan Tyson (@modernenduser)
• Microsoft Intune Organizational messages (preview) | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• Intune challenges (community edition) (oceanleaf.ch) – Niklas Tinner (@NiklasTinner)
• Moving your application management from ConfigMgr to Microsoft Intune | Scappman Blog
• Manage MacOS Updates Using Intune Policy HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
• Excluding Azure file shares from Conditional Access policies requiring MFA – All about Microsoft Endpoint Manager (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Use Intune to Manage Device Firmware Configuration Interface Settings for Autopilot Devices – Shehan Perera:[techBlog] – Shehan Perera (@Shehanperera85)
• Get an overview of Windows Autopilot registered devices that are not enrolled in 180 days | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• More options for Autopilot Naming Convention (endpointcave.com) – René Laas (@mr_helaas)
• Configure Network Protection for Defender for Endpoint for Android and iOS Devices – Intune – In Real Life (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• How to change the Windows 11 language with Intune | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• How to implement Applocker with Microsoft Intune (ccmtune.fr) – Mogis Christopher (@MogisChris59)
• Install LAPS Using Intune Application Deployment Guide HTMD Blog (anoopcnair.com) – Abhinav Rana
• Intune – You can now send organization messages to Windows 11 devices (hametbenoit.info) – Benoit Hamet (@benoit_hamet)
• Using PowerShell and Graph to get BSOD results (code and date ) for Intune devices | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• Simplifying the management and configuration of your favorite browser – All about Microsoft Endpoint Manager (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Deploy Cisco AnyConnect VPN on macOS devices with 2FA – Intune – In Real Life (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• Security: Application Whitelisting with Microsoft Intune and AppLocker | Gobisweb – Fabrizio Gobeli (@El_Duderino1985)
• User Context Install | Uninstall | Intune | Detection Rule | (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Fix for incorrectly named devices enrolled using Autopilot (doitpsway.com) – Ondrej Sebela (@AndrewZtrhgf)
• Organizational Messages – A Better Way to Push Important Messages to Your Users via Microsoft Intune – EMS Route – Shehan Perera (@Shehanperera85)
• Simon does…: Let Intune stimulate mobile updates (skotheimsvik.blogspot.com) – Simon Skotheimsvik (@SSkotheimsvik)
• Organizational messages send with Intune – Just about the Modern Workplace (joostgelijsteen.com) – Joost Gelijsteen (@Jgelijsteen)
• Deploy GlobalProtect (Palo Alto) VPN to macOS using Intune – Intune – In Real Life (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• Getting started with compliance for Linux devices – All about Microsoft Endpoint Manager (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Using Azure Automation to get all Autopilot registered devices not enrolled after 180 days and send list with a Teams notification | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)

 Cloud Tech

• Access Local Documents and Files from a Windows 365 Cloud PC – windows.do – Mike Halsey (@MikeHalsey)
• Filters for Windows 365 Cloud PCs based on SKU/Plans | AskAresh – Aresh Sarkari (@askaresh)
• Alerts (preview) for Windows 365 Cloud PC | AskAresh – Aresh Sarkari (@askaresh)
• Get Alerts For Windows 365 Cloud PC Status HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
• Security: How to achieve a Microsoft Secure Score for Devices above 95% in Microsoft Defender for Endpoint with Microsoft Intune | Gobisweb – Fabrizio Gobeli (@El_Duderino1985)
• Get Started with Microsoft Graph Intune PowerShell Module for Endpoint Manager Tasks – Shehan Perera:[techBlog] – Shenan Perera (@Shehanperera85)
• Windows 365 and Citrix better together (stefandingemanse.com) – Stefan Dingemanse and Tom de Jong (@SDingemanse)
• Cleanup Cloud PC devices in Azure AD – Welcome to Pedholtlab – Morten Pedholt (@MortenPedholt)
• List of Windows 365 Cloud PC Keyboard Shortcuts (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Intune DevOps Tools – Move objects from Dev to Prod Tenant – Modern Device Management (jannikreinhard.com) – Jannik Reinhard (@jannik_reinhard)
• How to manage local user group membership with Microsoft Intune to make users local admin – Robin Hobo (@robinhobo)
• How to enroll your Linux device to Microsoft Intune (ccmtune.fr) – Mogis Christopher (@MogisChris59)
• Intune – You can now onboard Linux clients in Intune (hametbenoit.info) – Benoit Hamet (@benoit_hamet)
• Intune vs. Workspace ONE: 15 Pros and Cons (2022 Edition) – Brooks Peppin’s Blog – Brooks Peppin (@brookspeppin)
• macOS Management with Intune – The Prologue – (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• First steps into Linux management via Microsoft Intune – SCCMentor – Paul Winstanley (@SCCMentor)
• Deploying ARM apps with Microsoft Intune – Intune Tech – Jose Schenardie (@schenardie)
• Enrollment notification – Just about the Modern Workplace (joostgelijsteen.com) – Joost Gelijsteen (@Jgelijsteen)
• 4 Methods Disable Enable Edge Browser Autofill Inputs HTMD Blog (anoopcnair.com) – Alok Kumar Mishra
• Gerry Hampson Device Management: Disabling screen rotation on Windows tablets with Intune (gerryhampsoncm.blogspot.com) – Garry Hampson (@GerryHampson)
• Customizing Taskbar and Start in Windows 11 22h2 with PowerShell – CCMEXEC.COM – Enterprise Mobility – Jörgen Nilsson (@ccmexec)
• Move2Modern – MOVE2MODERN.CO.UK (weebly.com) – Andy Jones (@Andy_69Jones)
• Installing M365 Apps as Win32 App in Intune – MSEndpointMgr – Jan Ketil Skanke (@JankeSkanke)
• Intune – Updates for Intune network endpoints (hametbenoit.info) – Benoit Hamet (@benoit_hamet)
• Microsoft Intune Audit Logs Hunting With KQL – Shehan Perera:[techBlog] – Shenan Perera (@Shehanperera85)

ConfigMgr

• Export SCCM Device Collection with 3 Easy Methods (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Deploy WinMerge Using SCCM | Fix Software Could Not Be Found Issue HTMD Blog (anoopcnair.com) – Abhinav Rana
• 3 Reasons Why SCCM Community Hub is Deprecated in 2023 (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Configure High-Impact Task Sequence Settings in SCCM (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Find Antimalware Software Status using CMPivot Query in SCCM (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)

Windows 11

• Security: First impressions of the new Windows 11 22H2 security feature Enhanced Phishing Protection | Gobisweb – Fabrizio Gobeli (@El_Duderino1985)

Windows 365

• Windows 365 Cloud PC – Policy Conflict – Security Baseline VS RDP Device Restrictions | AskAresh – Aresh Sarkari (@askaresh)
• Announcing VMware collaboration with Microsoft to bring new experiences to Windows 365 – VMware End-User Computing Blog – Sachin Sharma (@sachin_d_sharma)
• Windows 365 as Jump Host to Azure? – Itiscloudy – Microsoft 365 and Azure – Roy Apalnes (@rapalnes)
• How To Backup And Restore Windows 365 Cloud PC | Point-in-time Restore Option HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
• Windows 365 Cloud PC – Short and Long term Restore Point Options | AskAresh – Aresh Sarkari (@askaresh)
• PowerShell – Create and Assign Windows 365 Cloud PC – User Settings | AskAresh – Aresh Sarkari (@askaresh)
• Mobile Jon Presents Windows 365 Capabilities – Mobile Jon’s Blog (mobile-jon.com) – Jon Towles (@m0bilej0n)
• How To End Grace Period for Cloud PCs in Windows 365 (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Windows 365 Cloud PC – Microsoft Intune – Disable Chat Icon + PowerShell Uninstall MS Teams | AskAresh – Aresh Sarkari (@askaresh)
• PowerShell – Report – Get Cloud PC Windows 365 with low utilization | AskAresh – Aresh Sarkari (@askaresh)

 Other SysAdmin Info

• Deploying Windows 11 on Arm Devices – Jurassic Deployment Style – Deployment Research – Johan Arwidmark (@jarwidmark)
• Microsoft Cloud LAPS Password Management Solution HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
• The PowerShell Podcast | a podcast by PDQ.com (podbean.com)
• Simon does…: Create AAD Licensing groups by Graph API (skotheimsvik.blogspot.com) – Simon Skotheimsvik (@SSkotheimsvik)
• Import GPOs to Group Policy Analytics using Graph API (euc365.com) – David Brook (@DBBrook24)
• Microsoft Store trying to install User Context Winget Apps (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Mapping Azure file shares on Windows devices – All about Microsoft Endpoint Manager (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)

Tool Updates

• Convert-CMAppToIntuneWin Function – Jose Espitia (@JoseEspitia_com)
• Win32app Build and extract tool: a tool to build or extract Intunewin | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• GitHub – MSEndpointMgr/M365Apps: Scripted option to install M365 Apps, Project, Visio and Proofing tools using ODT – Jan Ketil Skanke (@JankeSkanke)
• GitHub – dfinke/Tiny-PowerShell-Projects: Learning PowerShell through test-driven development of games and puzzles – Doug Finke (@dfinke)
• GitHub – ironmansoftware/psedit: A terminal-based editor for PowerShell – Adam Driscoll (@adamdriscoll)

Recast Software recently released Application Manager, a new third-party patching tool. Application Manager allows your IT team to powerfully and simply manage third-party applications in your organization from one centralized location. Interested in learning more? Request a quote and tour here.

Recast Software also recently released a new infographic demonstrating the benefits of implementing Endpoint Insights into your MECM / SCCM environment. Give a look!

If you missed Recast Software’s webinar on zero trust featuring Sami Laiho, an MVP in Windows and Devices for IT, you can find the recording here and read a blog recap here. Sami gave a clear overview of what privileged access management (PAM) means for your team and provided tips on how you can move closer to a zero trust environment. Recast also provided attendees with a brief glimpse into their newest software, Privilege Manager, a PAM solution.

Also:

• Follow us on Twitter @RecastSoftware to hear the latest.
• Give a look at our newest eBook, The Top 10 Most Used Right Click Tools.

‍Thank you for checking out Recast’s Endpoint Management Recap – November 2022. Stay tuned for more helpful content coming your way.

Are you ready for Zero Trust? Privilege Manager is.

Grant the access your end-users need when they need it without compromising security.

Learn More