Recast’s Endpoint Management Recap – Vol. 50

Welcome to Recast’s Endpoint Management Recap, Vol. 50 – by Daniel Engberg

Hello!

We now leave the year’s shortest month behind us, and I can’t wait for the weather to get warmer and for the light to return to my evenings and mornings.

This month, we have quite a few updates related to the Intune Suite and a new Configuration Manager Technical Preview, with some nice updates for upcoming production versions.

Make sure to check out the links below from Microsoft and our community!

Talk to you again in March.

– Daniel Engberg

Contents – Endpoint Management Recap

• Events / Conference News
• Microsoft Product Announcements
• Community Tools / News
• Recast Software Updates

Upcoming Events

• Endpoint Management SUMMIT 2024 EMEA EDITION – April 17 – April 19, 2024
• Midwest Management Summit MOA – Minneapolis, MN – May 6 – May 9, 2024

Additionally, check out Recast Software’s Event and Tradeshow page, which compiles noteworthy events for the IT and SysAdmin community taking place around the globe.

For February, the highlight is a new Configuration Manager Technical preview version with many new features!

• Technical preview 2401 – Configuration Manager | Microsoft Learn

The Configuration Manager Technical Preview version 2401 introduces several new features and updates to enhance efficiency, security, and user experience. These updates include:

• An Automated Diagnostic Dashboard for Software Update Issues, providing a centralized view for diagnosing and addressing software update problems directly within the console.
• A Centralized Search box in the console streamlines the search experience for admins by allowing them to find necessary information without navigating through multiple sections.
• The rebranding of Microsoft Azure Active Directory to Microsoft Entra ID is reflected in the Configuration Manager from version 2403 onwards.
• Enhancements in Deploying Software Packages with Dynamic Variables include a retry count in the UI for administrators, reducing unnecessary notifications of task sequence failures when package versions on the distribution point are updated.
• Enabling Auto-Image Patching for CMG Virtual Machine Scale Set, automating updates to ensure environments remain current and secure.
• A Windows 11 Readiness dashboard to support Windows 11 23H2, aiding in the preparation for the latest Windows version.
• A requirement for HTTPS or Enhanced HTTP for client communication, deprecating HTTP-only communication to bolster security.
• Blocking the upgrade to CM 2403 if CMG V1 is running as a cloud service (classic), urging users to adopt virtual machine scale sets for CMG deployments.
• Ending support for Windows Server 2012/2012 R2 operating system site system roles starting with version 2403, encouraging users to update their server operating systems for continued support.
• Bitlocker improvements include verifying key escrow to the database to prevent potential data loss scenarios.

Products

Microsoft Entra ID (Azure AD) [What’s New Page]

Microsoft ConfigMgr [What’s New Page] [Tech Community] [Virtual Hub][MS Q\A][Reddit][Feedback]

Microsoft 365 [What’s New Page]

Microsoft Intune [What’s New Page]

• Microsoft Intune Suite - beyond endpoint management in 2024
• Support tip: Improving the efficiency of dynamic group processing with Microsoft Entra ID and Intune – Microsoft Community Hub
• Get started with macOS endpoints – Microsoft Intune | Microsoft Learn
• Intune moving to support Android 10 and later for user-based management methods in October 2024 – Microsoft Community Hub
• Assign device profiles in Microsoft Intune | Microsoft Learn
• Benefits of Microsoft Intune – Training | Microsoft Learn

Microsoft Windows [What’s New Page]

• Windows Client
  • Sudo for Windows | Microsoft Learn
• Windows Server
• Windows 365

Security Alerts and Info [Microsoft Security Portal – Security Update Guide]

Podcasts / Blog Series / Video Blogs‍

• Intune PowerShell SDK: Invoking Web Requests (youtube.com) – Steve Weiner (@getrubix)
• Intune Enterprise Application Management Catalog apps | Deploy Windows catalog app (Win32) (youtube.com) – Chander Mani Pandey (@Mani_CMPandey)
• Intune Enterprise App Catalog – Win32 Apps pre-created for you! (youtube.com) – John Bryntze (@JohnBryntze)
• 2024 – Learn package Apps in Microsoft Intune like an expert – become a hero at work! (youtube.com) – John Bryntze (@JohnBryntze)
• Microsoft Intune Cloud PKI – Manage Cloud Certificates where you manage endpoints – Managed PKI (youtube.com) – HTMD Community (@htmdcommunity)
• Intune Device Migration: Improved User Experience (youtube.com) – Steve Weiner (@getrubix)
• Configure Windows LAPS in Intune (youtube.com) – John Bryntze (@JohnBryntze)
• Intune Device Migration V6: Script Deep Dive – Part 2 – YouTube – Steve Weiner (@getrubix)
• The GetRubix PODCAST – Episode 11: Patch Problems (youtube.com) – Steve Weiner (@getrubix)
• PowerShell Pulse Monthly Tech Talks & Community Showcase – YouTube – Doug Finke (@dfinke)
• Intro to the Intune Suite: Device Query (youtube.com) – Steve Weiner (@getrubix)
• Intro to the Intune Suite: Enterprise App Management (youtube.com) – Steve Weiner (@getrubix)
• Configuration of Microsoft Intune and Apple Business Manager – Token, VPP and enrollment profiles (youtube.com) – Jakub Piesik (@dzejzipl)
• Under the Hood, Pt. 4: Enterprise App Management (skiptotheendpoint.co.uk) – James Robinson (@SkipToEndpoint)
• The GetRubix PODCAST – Episode 12: Dev Box (youtube.com) – Steve Weiner (@getrubix)

Blog Posts

Intune

• Mobile Application Management for Android Devices with Intune – Fabian Rodriguez (@Fabian1560)
• How to Set Up Mobile App Management with Intune – Recast Software – Fabian Rodriguez (@Fabian1560)
• Intune Device query – Just about the Modern Workplace (joostgelijsteen.com) – Joost Gelijsteen (@Jgelijsteen)
• Automatically configure the time zone (during Autopilot enrollment) | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• Deploying a Custom Power Plan with Intune Remediations (smsagent.blog) – Trevor Jones (@SMSagentTrevor)
• Intune Patch Compliance Reports In Details HTMD Blog (anoopcnair.com) – Vidya M A (@Vidyasasidhara)
• Device Query | An Error occurred. Try Running the query again (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Intune – Device Query & Intune Advanced Analytics (threesixtythrive365.com) – Chris Hudson (@threesixtychris)
• Intune Device Query | Real-Time insights | Pivot | KQL (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Device Query | 64-bits | WindowsRegistry Entity | Intune (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• How to Deploy Apps from the Enterprise App Catalog In Intune (ourcloudnetwork.com) – Daniel Bradley (@DanielatOCN)
• Getting started with the new Intune Suite capabilities in your M365 Developer Program tenant! – Manage The Cloud Jeroen Ebus (manage-the.cloud) – Jeroen Ebus (@JeroenEbus)
• Microsoft Releases Enterprise App Management for Intune – Patch My PC – Bryan Dam (@bdam555)
• Intune Suite: Enterprise App Management (rockenroll.tech) – Nicklas Ahlberg (@AhlbergNicklas)
• Getting started with Enterprise App Management – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• List All Available Apps in the Intune Enterprise App Catalog (ourcloudnetwork.com) – Daniel Bradley (@DanielatOCN)
• Remove the Microsoft Store from the Taskbar with Intune [UPDATED] | scloud – Florian Salzmann (@FlorianSLZ)
• Set PowerShell Execution Policy using Intune and GPO (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Intune device query and Graph API | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• Restrict Drivers Installation For Non-Administrators Users With Intune Policies HTMD Blog (anoopcnair.com) – Sujin Nelladath
• Automate Rerunning Failed Intune Win32 App Installs (powerstacks.com) – John Marcum (@MEM_MVP)
• Implementing Mobile Device Management (MDM) with Microsoft Intune | Pluralsight
• Intune Device Staging Option For Android Devices HTMD Blog (anoopcnair.com) – Vidya M A (@Vidyasasidhara)
• ConfigRefresh | Intune | Offline Refresh Intune Policies (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Truly user-driven Windows Autopilot – Maciej Horbacz (universecitiz3n.tech) – Maciej Horbacz (@UniverseCitiz3n)
• Deploy MacOS PKG apps Using Intune | Deploy Google chrome pkg on MAC devices (youtube.com) – Chander Mani Pandey (@Mani_CMPandey)
• Microsoft Intune: Management and Security – Thomas MarcussenThomas Marcussen (@MarcussenThomas)
• Simon does Secure Oversharing: Elevate Email Security with Intune and DLP (skotheimsvik.no) – Simon Skotheimsvik (@SSkotheimsvik)
• Best Practices For Creating Entra ID Dynamic Groups For Intune HTMD Blog (anoopcnair.com) – Gopika S Nair
• Intune: Assignment Filters Summary Report – GK’s Blog (gowdhaman.in) – Gowdhaman Karthikeyan (@gkchirps)
• How to create custom compliance policy in Intune | Configuration Manager ManishBangia (@manish_bangia)
• Export top 20 Intune devices with BSOD to a CSV on SharePoint with Logic App | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• Use Power Automate To Import Autopilot Devices Hash Via EMail For Intune Engineers HTMD Blog (anoopcnair.com) – Abhay Patil
• Enable Edge TyposquattingChecker with Intune & GPO (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Managing shared devices and app deployment in Intune – CCMEXEC.COM – Enterprise Mobility – Jörgen Nilsson (@ccmexec)
• Getting started with Device query – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Simon does “HP Connect for Intune, Part” (skotheimsvik.no) – Simon Skotheimsvik (@SSkotheimsvik)
• Conquer Complex Intune Win32 App Installations with PowerShell (powerstacks.com) – John Marcum (@MEM_MVP)
• How to create a CSP Policy to lock out end-user screen – Texas Tech Squad (txtechsquad.com) – Matt Aljanabi (@muthmsir)
• Check Access | Company Portal | Intune | Compliance (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• 20+ Intune Device Queries to Level Up Your Device Management (jorgeasaur.us) – Jorge Suarez (@Jorge2990)
• How does Windows Autopatch deal with the WinRE security patch ? | just another windows noob ? (niallbrady.com) – Niall C. Brady (@ncbrady)
• Enhancing usability of SyncML Viewer – Modern IT – Cloud – Workplace (oliverkieselbach.com) – Oliver Kieselbach (@okieselb)

ConfigMgr

• Using wsusscn2.cab to find missing WSUS updates and extending the ConfigMgr inventory with the result – System Management Recipes (sysmanrec.com)
• ARM64 – Creating your WinPE – GARYTOWN ConfigMgr Blog – Gary Blok (@gwblok)
• SCCM Technical Preview 2401 New Features (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)

Windows 11 & 365

• A quick look at Windows 365 Boot shared mode – Windows 365 – www.windows-noob.com – Niall C. Brady (@ncbrady)
• Troubleshooting Windows Updates (WUfB): GPO policy snags (joostgelijsteen.com) – Joost Gelijsteen (@Jgelijsteen)
• Microsoft wants to update your Windows 11 PC without forcing you to reboot | Windows Central – Zac Bowden (@zacbowden)
• Windows 365: Cloud PC user request process — first-party approach | by Niklas Tinner | Feb, 2024 | Medium – Niklas Tinner (@NiklasTinner)
• Windows 365: tools, tips & tricks (oceanleaf.ch) – Niklas Tinner (@NiklasTinner)
• Customizing Branding for Windows 365 Boot Sign-in Screen | AskAresh – Aresh Sarkari (@askaresh)

Cloud Security

• Windows LAPS | Defuncted | Automatic Account Management (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Using automatic account management mode of Windows LAPS – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Sign into a Cloud PC using a FIDO2 security key – techlab.blog – Dominiek Verham (@dominiekverham)
• Simon does FIDO2 Magic: Using the Offpad with Microsoft 365 (skotheimsvik.no) – Simon Skotheimsvik (@SSkotheimsvik)

 Other SysAdmin Info

• How to Use Directory Extension Attributes in Entra ID for Custom Claims, SCIM Provisioning and Dynamic Groups (suryendub.github.io)
• [Updated Feb 2024] Ultimate Comparison of Defender for Endpoint Features by OS – Ru Campbell MVP (@rucam365)

Recast Software recently hosted a webinar on the new 5.4 Release: Leading the Way in Patch and IT Management. Participants:

• Uncovered new features streamlining IT tasks for quicker and easier operations. 
• Gained insights into Recast Software’s product strategy and vision. 
• Saw an exclusive sneak peek of upcoming updates currently in development. 

View the recording below:

We also recently hosted Dr. Larry Ponemon of the Ponemon Institute for a webinar titled “Futureproofing Cybersecurity: Preparing Your IT Team for Evolving Threats.” Watch here:

Check out our newest blog posts:

• Mobile Application Management for Android Devices with Intune
• Uninstall Applications Using PowerShell
• Bridging the Gap in Vulnerability Management
• Microsoft Intune Explained: A Comprehensive Overview
• How to Set Up Mobile App Management with Intune
• Windows Patching via Intune – Recast Software

‍Thank you for checking out Recast’s Endpoint Management Recap – Vol. 50. Stay tuned for more helpful content coming your way next month.

Follow Recast Software on Twitter @RecastSoftware to follow the latest happenings.