Recast’s Endpoint Management Recap – October 2023

Welcome to Recast’s Endpoint Management Recap, October 2023 – by Daniel Engberg

Hello!

I trust this message finds you well. As we approach the end of October, I hope you’re soaking up the Halloween spirit.

This month, there has been a lot of talk around Copilot. A particular point of interest for many has been integrating Intune data with Security Copilot.

I’ve been using AI tools more and more in my life. Tools like ChatGPT have become indispensable in my daily activities, enhancing efficiency and creativity. As for Copilot, I’m waiting for the opportunity to test it out, hopefully soon!

Next month, I’m expecting that we will see quite a lot of news from Microsoft Ignite, so stay tuned until then!

– Daniel Engberg

Contents – Endpoint Management Recap

• Events / Conference News
• Microsoft Product Announcements
• Community Tools / News
• Recast Updates

Upcoming Events

• MMS – Midwest Management Summit – MMS 2023 Miami Beach Edition – October 30 – November 1, 2023
• Nordic Infrastructure Conference | NIC Cloud Connect – November 7 – 9, 2023
• Microsoft Ignite – November 14 – 17, 2023

Check out Recast Software’s SysAdmin Event and Tradeshow page, which compiles noteworthy events for the IT and SysAdmin community taking place around the globe.

This month, Microsoft announced an enhancement to the Security Copilot. Now, it can seamlessly integrate data from Intune. Dive deeper into this feature with these articles:

• Use Security Copilot to Extract Device and Policy Information
• Join the Early Access Program for Security Copilot with Microsoft Intune

Configuration Manager 2309: Key Updates

• SQL ODBC Driver Support: Optimized database connectivity with the introduction of this driver.
• Scheduled Scripts Execution: Empower admins to automate and schedule script runs.
• Azure Logic App Notifications: Direct integration in the CM console enhances event tracking.
• Site Maintenance Task: Newly added feature to declutter and maintain data efficiently.
• Windows 11 Update Orchestrator Service
• OSD for PXE Boot: Improved communication using an initial lookup Management Point (MP).
• Bitlocker through ProvisionTS: Escrow recovery keys directly to the Config Manager Database.
• Windows 11 Edition Upgrade: Admins can effortlessly upgrade to Windows 11 edition using CM Policy settings.
• Windows 11 Upgrade Dashboard: Strategically plan your Windows 11 upgrades using this dashboard.
• Cloud Management Gateway Enhancements: New methods to create via both Console and PowerShell, fortified with enhanced security.

Products

Microsoft Entra ID (Azure AD) [What’s New Page]

• Restricted management administrative units in Microsoft Entra ID (Preview) – Microsoft Entra | Microsoft Learn

Microsoft ConfigMgr [What’s New Page] [Tech Community] [Virtual Hub][MS Q\A][Reddit][Feedback]

• Defender Definition Updates with ConfigMgr – Part 2 – How to set it up – Microsoft Community Hub

Microsoft 365

Microsoft Intune [What’s New Page]

• Microsoft Intune ending support for Android device administrator on devices with GMS in August 2024 – Microsoft Community Hub
• Set up web based device enrollment – Microsoft Intune | Microsoft Learn
• Use the settings catalog to configure declarative software updates | Microsoft Learn

Microsoft Windows [What’s New Page]

• Windows Client
• Windows Server
• Windows 365
  • Microsoft Intune Endpoint Privilege Management for Windows 365 | Microsoft Intune Blog
  • Windows 365 Boot is now generally available! – Windows IT Pro Blog

Security Alerts and Info [Microsoft Security Portal – Security Update Guide]

Other

• Windows passwordless experience expands | Windows IT Pro Blog

Podcasts / Blog Series / Video Blogs‍

• 2023E06 – iOS Provisioning (I.T) – YouTube – Intune Training Series (@OnPremCloudGuy, @AdamGrossTX, @powers_hell, @jgkps and @shackelfjaco)
• What’s new in Microsoft Intune (2309) – YouTube – Mattias Melkersen & Nickolaj Andersen (@MMelkersen & @NickolajA)
• Windows 365 Features Deep Dive Reloaded – YouTube – Sune Thomsen (@SuneThomsenDK)
• Upgrading your ConfigMgr site to 2309 – YouTube – Niall C. Brady (@ncbrady)
• How to Setup 3rd Party Device Compliance Partners in Intune for Conditional Access – EMS Route – Shehan Perera (@Shehanperera85)
• 2023E07 – Managed PlayStore Setup (I.T) – YouTube – Intune Training Series (@OnPremCloudGuy, @AdamGrossTX, @powers_hell, @jgkps and @shackelfjaco)
• Intune Removal Process from Windows Devices Company Portal Settings App Intune Admin Center | BYO – YouTube – HTMD Community (@htmdcommunity)
• EPM / Declared Configuration Protocol Enrollment / MMP-C / Dual Enrollment – YouTube – Rudy Ooms (@Mister_MDM)
• Bulk Update Primary User for Intune Devices | Automatically set Intune Primary User in Bulk – YouTube – Chander Mani Pandey (@Mani_CMPandey)
• Intune and Security Copilot First Look – YouTube – HTMD Community (@htmdcommunity)
• 2023E08 – Android Provisioning (I.T) – YouTube – Intune Training Series (@OnPremCloudGuy, @AdamGrossTX, @powers_hell, @jgkps and @shackelfjaco)
• Setup Windows LAPS in just 5 Minutes – YouTube – Andy Jones (@Andy_69Jones)
• MSEndpointMgr meets Microsoft – S01 E01 – YouTube – Mattias Melkersen, Nickolaj Andersen & Lavanya Lakshman (@MMelkersen, @NickolajA & @lavanyal)
• Unleashing PSADT Mastering Application Deployment Excellence with Kevin Greer – YouTube – PowerShell Users Group (@rtpsug)
• Intune change tracking V2.0 – YouTube – Niklas Tinner (@NiklasTinner)
• Intune Settings Catalog Decoded | Security Policy Conflicts Precedence | User Device Scopes – YouTube – HTMD Community (@htmdcommunity)
• Bulk Update Windows Autopilot Group Tag in Intune | Group Tag in Intune Autopilot Group – YouTube – Chander Mani Pandey (@Mani_CMPandey)
• Experimenting With Azure Virtual Machines Part 2 – Windows 365 – SamuelMcNeill.com – Sam McNeill (@samuelmcneill)
• Windows 365 Switch on Power Automate Hosted Machine – YouTube – Viktor Kalmar (@ViktorKalmar1)
• New Loop Features in Microsoft Teams: Boosting Team Collaboration! – YouTube – This Week in IT

Blog Posts

Intune

• How to Configure Bitlocker with Intune – Part 1 – Marty Miller (@recastsoftware)
• Analysing Win32 Content Prep Tool – Coding Stephan (svrooij.io) – Stephan van Rooij (@svrooij)
• Intune / AVD – Settings for Azure Virtual Desktop are now available in Intune (hametbenoit.info) – Hamet Benoit (@benoit_hamet)
• Enable Screen Saver For MacOS Using Intune HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
• Create Filter Rule For Windows 11 23H2 Devices In Intune HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
• Intune Vs SCCM And WSUS Vs WUfB Patching Method Differences HTMD Blog (anoopcnair.com) – Anoop C Nair (@anoopmannur)
• Intune change tracking (Azure Workbook) (oceanleaf.ch) – Niklas Tinner (@NiklasTinner)
• Autopilot Marker | Fix Pending | Lenovo ThinkCentre | BIOS (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Tip #19: Abuse Intune’s discovered apps to inventory data from Windows devices | ITtips.ch – Marius Wyss (@MrWyss)
• Using remediation scripts to automate a setting for Copilot | just another windows noob ? (niallbrady.com) – Niall C. Brady (@ncbrady)
• Configuring Intune RBAC just-in-time admin access with Entra ID PIM for Groups & Conditional Access (rahuljindalmyit.blogspot.com) – Rahul Jindal (@rahulj1906)
• Intune operations par excellence (oceanleaf.ch) – Niklas Tinner (@NiklasTinner)
• Auto assign Managed Google Play (Android) apps – EndpointCave – René Laas (@mr_helaas)
• Update Microsoft 365 Apps with rings – Just about the Modern Workplace (joostgelijsteen.com) – Joost Gelijsteen (@Jgelijsteen)
• Restricting printing to specific devices or device types | Katy’s Tech Blog (katystech.blog) – Katy Nicholson (@coaster_katy)
• Decrypting intunewin files – Coding Stephan (svrooij.io) – Stephan van Rooij (@svrooij)
• PowerShell is fun :)Retrieve Intune Device Primary User and all users ever logged on to that device – Haarm Veenstra (@HarmVeenstra)
• Easily hiding the ability to use passwords for signing into Windows – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Manage printer mappings on cloud-managed Windows devices | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• PowerShell is fun :)Intune Autopilot report using Microsoft Graph – Harm Veenstra
• Windows 11: Config Refresh (rockenroll.tech) – Nicklas Ahlberg (@AhlbergNicklas)
• How to set Registry Keys with Intune | scloud – Florian Salzmann (@FlorianSLZ)
• Is Windows Autopilot An Alternate For OSD? HTMD Blog (anoopcnair.com) – Vidya M A (@Vidyasasidhara)
• Gerry Hampson Device Management: Wipe corporate data from non enrolled device (gerryhampsoncm.blogspot.com) – Gerry Hampson (@GerryHampson)
• MigrateRefreshTask | Declared Configuration refresh task (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Scheduling automatic policy refreshes for Windows devices without requiring a check-in – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Creating IntuneWin files with C# – Coding Stephan (svrooij.io) – Stephan van Rooij (@svrooij)
• Our list of Intune Community Tools – 2023 Edition (systemcenterdudes.com) – Benoit Lecours (@benoitlecours)
• How to Collect Intune Logs from MacOS Devices (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• To Wipe or not to Wipe? – Mr T-Bone´s Blog (tbone.se) – Torbjörn Granheden (@MrTbone_se)
• Invoke sync to all Intune devices with Microsoft Graph Powershell SDK – TimmyIT.com – Timmy Andersson (@TimmyITdotcom)
• Windows Autopilot Version 2 | APv2 mode | DevicePreparation (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Create a Windows Local Admin Account using Intune (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• How To Disable Google Chrome Notifications Using Intune Easy Method HTMD Blog (anoopcnair.com) – Sujin Nelladath
• Extending Access Management for Apple Services: Beyond Federated Authentication (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• Microsoft Intune Tunnel Gateway Server Scaling Changes Number Of Supported Clients HTMD Blog (anoopcnair.com) – Gopika S Nair
• Turn On Advanced Logging On Company Portal For MacOS HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
• The Shift From MDM to DDM: A Deep Dive into Declarative Device Management (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• 2 Ways to Export Software Inventory Report from Intune (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Copilot: We Clarify What’s What Among Microsoft’s AI Assistants (agdiwo.com) – Agdiwo (@agdiwo)
• Simon does Unlock the Copilot Advantage: Supercharge Your Entra ID User Data (skotheimsvik.no) – Simon Skotheimsvik (@SSkotheimsvik)
• Enable Copilot in a managed Microsoft Edge browser | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• Overview Of Security Copilot With Microsoft Intune HTMD Blog (anoopcnair.com) – Gopika S Nair

ConfigMgr

• ConfigMgr SQL query to Identify TPM Status – InsideConfigMgr (wordpress.com) – Praveen Gururaj (@praveen_gururaj)
• Top 10 ConfigMgr 2309 New Features (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• SCCM: Updating Existing Software Update Groups via PowerShell – MN-TechForum : We Learn We Share – Nawaz kazi (@kmohdnawaz)
• Optimizing Incremental Updates on SCCM Collections via PowerShell – MN-TechForum : We Learn We Share – Nawaz kazi (@kmohdnawaz)
• Targeted usage of the Cloud Management Gateway for Entra ID devices – SCCMentor – Paul Winstanley (@SCCMentor)

Windows 11

• 4 Methods Enable Or Disable Virtualization Based Security VBS On Windows 11 HTMD Blog (anoopcnair.com) – Alok Kumar Mishra

Windows 365

• Windows 365 and Place a CPC under review feature – Piesik.me – Jakub Piesik (@dzejzipl)
• Enable Watermarking for Windows 365 Cloud PCs (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Enable Screen Capture Protection in Windows 365 (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• New version of Windows 365 Boot feature – Piesik.me – Jakub Piesek (@dzejzipl)
• How to use Windows LAPS to secure local administrator accounts – Mr T-Bone´s Blog (tbone.se) – Torbjörn Granheden (@MrTbone_se)
• Unlocking Windows LAPS: How to Safeguard Local Passwords with Administrative Units – Poem to MDM – Tom Machado (@poemtomdm)
• Using temporary enterprise feature control for early testing new features in Windows – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)

Cloud Security

 Other SysAdmin Info

• Enabling remote access for specific users on Azure AD joined devices – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Get notified on a Teams channel on top 20 devices with BSOD including BSOD log files | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• Remote Help on MacOs – Mr T-Bone´s Blog (tbone.se) – Torbjörn Granheden (@MrTbone_se)
• Hide try the new Outlook toggle the correct way | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)

Recast Software has acquired Liquit, a leader in application management. With the acquisition, Recast Software offers customers a complete application delivery platform, while strengthening the company’s position in endpoint and application management. Read the announcement here.

Join us Thursday, November 9th at 10 AM CT to get hands-on insights into Recast Software’s Application Manager and an exclusive first look at Liquit’s groundbreaking tech. Streamline your app management and up your patching game, all in one go. Sign up for the webinar here.

We recently hosted a Customer Panel titled “Unveiling IT Blind Spots.” Our panel of IT experts shared their real-world experiences in managing IT environments and discussed their strategies for reducing blind spots. Watch the recording here or read a recap here.

We also recently hosted Richard Campbell of RunAs Radio (MVP) and Danny Wheeler, the Director of IT at Recast Software to discuss the evolution of IT security over the past 5 years. Read the highlights from their conversation shared in our recent blog or watch the recording here.

Recast Software released both a white paper and eBook focused on common visibility challenges for admins and best practices to tackle them. Give a look:

• How to Manage the Invisible – White Paper
• Hardware Management in a Remote World – eBook

Check out our newest blog posts as well:

• Technical Posts
  • How to Configure Bitlocker with Intune – Part 1
  • How to Configure Windows LAPS in Active Directory
  • Step-by-Step Guide: Enabling Windows LAPS in Entra ID (Azure Active Directory)
  • How to Use Microsoft Network Load Balancing – Part 1
  • How to Configure the Recast Agent Gateway with Microsoft Windows Server Network Load Balancing – Part 2
• Customer Stories
  • Elevating IT Security and Efficiency in Financial Services
  • Empowering IT Success: J-U-B Engineers Upgrades with Right Click Tools
• Unbound Application Lifecycle Management
• Leading the Charge in Application Management
• How One Software Vulnerability Multiplied
• Rapid Software Patching Required
• Unveiling IT Blind Spots Webinar Recap
• SOC 2 Security Report and ISO 27001 Certification

Also:

• Follow Recast on Twitter @RecastSoftware to hear the latest.
• Read our eBooks The Top 10 Most Used Right Click Tools and The Top 5 Endpoint Insights to Empower IT Teams, as well as The State of System Administration White Paper.

‍Thank you for checking out Recast’s Endpoint Management Recap – October 2023. Stay tuned for more helpful content coming your way next month.

Patch your apps on the go.

Select and manage applications from a web-based portal with Application Manager.

Get Custom Pricing