Recast’s Endpoint Management Recap – Vol. 52

Welcome to Recast’s Endpoint Management Recap, Vol. 52 – by Daniel Engberg

Hello!

I hope you are doing well! Here in Sweden, it’s been a very cold April, with many lows (snow) and some warmer weather (10+C). It looks like May is going to be much better, though!

This month, we have a new release of ConfigMgr, 2403, with some great updates. You can read more about them in the Microsoft Product Announcement section.

Have a great May!

– Daniel Engberg

Contents – Endpoint Management Recap

• Events / Conference News
• Microsoft Product Announcements
• Community Tools / News
• Recast Software Updates

Upcoming Events

• Midwest Management Summit MOA – Minneapolis, MN – May 6 – May 9, 2024

Additionally, check out Recast Software’s Event and Tradeshow page, which compiles noteworthy events for the IT and SysAdmin community taking place around the globe.

This month, Microsoft has announced the release of Configuration Manager version 2403, which brings several significant enhancements directly from their development team. These updates aim to enhance your management capabilities and security protocols:

• Microsoft Entra ID: Microsoft Azure Active Directory has been rebranded to Microsoft Entra ID in Configuration Manager, reflecting Microsoft’s ongoing efforts to streamline identity services.
• New Features in Console: Experience improved efficiency with features such as an automated diagnostic dashboard for software update issues, a centralized search box for more straightforward navigation, and better-organized script folders.
• Communication Security Enhancements: Microsoft has increased security measures by mandating HTTPS or Enhanced HTTP for all client communications, phasing out support for HTTP-only.
• OS Deployment for ARM 64 Devices: There is enhanced support for deploying Windows 11 on ARM 64 devices and significant improvements to task sequences.
• Deprecated and Blocked Features: Microsoft is ending support for Windows Server 2012/2012 R2 site roles and blocking upgrades if the classic CMG V1 runs. System Center Update Publisher (SCUP) support will end in January 2024.

For more detailed information on these updates, check out the official release notes from Microsoft:

• What’s new in version 2403 – Configuration Manager

Products

Microsoft Entra ID (Azure AD) [What’s New Page]

Microsoft ConfigMgr [What’s New Page] [Tech Community] [Virtual Hub][MS QA][Reddit][Feedback]

Microsoft 365 [What’s New Page]

Microsoft Intune [What’s New Page]

• Intune Suite is now available to government organizations | Microsoft Intune blog
• Support tip: Migrate your classic Conditional Access policies – Microsoft Community Hub
• Microsoft Copilot for Security Intune Plugin Overview
• Microsoft Intune Remote Help adds full control for Mac | Microsoft Intune Blog
• Enhancing admin capabilities with Microsoft Intune’s remote Microsoft 365 application diagnostics – Microsoft Community Hub

Microsoft Windows [What’s New Page]

• Windows Client
• Windows Server
• Windows 365
  • Announcing the general availability of Microsoft Graph Windows 365 APIs | Windows IT Pro blog
  • Lifecycle management: Windows 365, Windows Autopatch, and ESUs | Windows in the Cloud

Security Alerts and Info [Microsoft Security Portal – Security Update Guide]

Other

• Microsoft Defender for Cloud support for Azure Database for MySQL – Flexible Server – GA – Microsoft Community Hub

Podcasts / Blog Series / Video Blogs‍

• PC Buyback for Windows Autopilot devices – part 2 – Microsoft Intune – www.windows-noob.com – Niall C. Brady (@ncbrady)
• RECIPE FROM THE COOKBOOK: Custom Requirements Script (youtube.com) – Steve Weiner (@getrubix)
• Conditional Access to control End-User login from their personal devices -Part 2 – Texas Tech Squad (txtechsquad.com) – Matt Aljanabi (@muthmsir)
• Cloud Native Part 5: How does Autopilot registration work? (youtube.com) – Steve Weiner (@getrubix)
• Block ChatGPT using Microsoft Defender for Endpoint (youtube.com) – HTMD Community (@htmdcommunity)
• Part 2 – Automate employee onboarding with Power Automate (youtube.com) – Andy Jones (@Andy_69Jones)
• How to migrate Group Policy to Intune (youtube.com) – Steve Weiner (@getrubix)
• How to create enhanced Intune reports (youtube.com) – Steve Weiner (@getrubix)
• Integrate Microsoft PKI with Intune – Step-by-Step Tutorial | Part V (youtube.com) – Encryption Consulting LLC (@encryptioncons)
• Fixing expired Root CA CDP and Crypt_E_REVOCATION_OFFLINE problems (youtube.com) – Niall C. Brady (@ncbrady)
• How to configure BYOCA for Intune Cloud PKI (youtube.com) – Steve Weiner (@getrubix)

Blog Posts

Intune

• Intune Device Query: A Practical Guide – Jannik Reinhard (@jannik_reinhard)
• Build Compliance Baselines in Intune to Determine Status – Lovepreet Singh
• How to Manually Register Devices with Windows Autopilot – Fabian Rodriguez (@Fabian1560)
• How to Build PPPC Profiles within Intune for MacOS Devices – Lovepreet Singh
• How to Bulk Update Autopilot Group Tags — Rubix (getrubix.com) – Steve Weiner (@getrubix)
• Renewing the Apple Push Notification Service certificate (burgerhout.org) – Jeroen Burgerhout (@BurgerhoutJ)
• Intune Device Filters – theDXT – Daniel Keer (@theDXT)
• Reduce your attack surface by disabling NetBIOS using PowerShell and Microsoft Intune – imab.dk – Martin Bengtsson (@mwbengtsson)
• Intune Cloud PKI and Entra CBA for Frontline Workers – Mr T-Bone´s Blog (tbone.se) – Torbjörn Granheden (@MrTbone_se)
• How to Change Intune Security Baseline Policy to Version 23H2? – EMS Route – Shenan Perera (@Shehanperera85)
• Looking closer at enabling Endpoint analytics – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Secure, Contain, Protect… Your Mac: Deploy mSCP with Intune (intuneirl.com) – Somesh Pathak (@pathak_somesh)
• Intune compliance: tips from the field | by Niklas Tinner | Apr, 2024 | Medium – Niklas Tinner (@NiklasTinner)
• Programs Entity | Device Query | Wow6432Node | Intune (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• Install New Outlook For Windows With Microsoft Store App From Intune HTMD Blog (anoopcnair.com) – Sujin Nelladath
• Troubleshooting MAM for Windows – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• How To Create Cloud PC Maintenance Windows Using Microsoft Intune HTMD Blog (anoopcnair.com) – Sujin Nelladath
• Renew Apple MDM Push Certificate in Intune – Prajwal Desai (@PrajwalDesai)
• Simon does Intune Double Click Mystery: Feature or Bug Unveiled? (skotheimsvik.no) – Simon Skotheimsvik (@SSkotheimsvik)
• Intune – Time to migrate? – GCS Blog (gattancha.co.uk) – Gattancha Computer Services (@Gatt_)
• Configuring Dell BIOS using built-in support in Intune – CCMEXEC.COM – Enterprise Mobility – Jörgen Nilsson (@ccmexec)
• Quick tip: Only turn off notifications network usage when there is a direct requirement – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Cisco DUO | Not trusted Endpoint | Intune Suite | Entdmid (call4cloud.nl) – Rudy Ooms (@Mister_MDM)
• MEM.Zone | Introducing: Intune Linux Onboarding Tool – Paul Vilcu (@vidockq)
• MEM.Zone | Introducing: Intune macOS Onboarding Tool – Ioan Popovici (@IoanPopovici)
• How to block Microsoft-Office Word spelling Check   – Texas Tech Squad (txtechsquad.com) – Muthanna Aljanabi (@muthmsir)
• Create Intune App Configuration Policies For MAM For Windows HTMD Blog (anoopcnair.com) – Vidya M A (@Vidyasasidhara)
• Why enrolling personal Windows devices might be a really bad idea – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)

ConfigMgr

• OSD HP Image Assistant Revisited – an Overview – GARYTOWN ConfigMgr Blog – Gary Blok (@gwblok)
• SCCM Office 365 dashboard Unmanaged clients (systemcenterdudes.com) – Marc-Andre Chartrand (@SImac_IT)
• ConfigMgr Task Sequence – KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932 – GARYTOWN ConfigMgr Blog – Gary Blok (@gwblok)
• ConfigMgr – 2403 Upgrade Released – GCS Blog – Gattancha Computer Services
• Step-by-Step SCCM 2403 Upgrade Guide – Benoit Lecours
• Complete SCCM 2403 Upgrade Guide – Prajwal Desai
• Top 10 ConfigMgr 2403 New Features – Prajwal Desai
• SCCM 2403 New Key Features And Improvements – Vidya M A

Windows 11 & 365

Cloud Security

• The Rising Cybercrime Threat and the Imperative of Robust Password Policies – MSB365 – Drago Petrovic (@_DragoPetrovic)

 Other SysAdmin Info

• Microsoft 365 networking – Proxy Endpoints – MSB365 – Drago Petrovic (@_DragoPetrovic)
• Export BIOS status (uptodate or not) for Lenovo devices to a CSV on SharePoint | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• Declarative Device Management A New Way Of Managing Apple Devices HTMD Blog (anoopcnair.com) – Malepati Naren (@Narenmalepati)
• Simon does How to Test Microsoft Copilot for Security on a Budget (skotheimsvik.no) – Simon Skotheimsvik (@SSkotheimsvik)
• Deploy the NEW Teams Client (and cleanup the classic) | scloud – Florian Salzmann (@FlorianSLZ)

Tool Updates

• Dell Command | Deploy WinPE Driver Packs | Dell US

Recast Software recently hosted a third Community Coffee Break Series webinar on Inventory and Visibility with Right Click Tools. Watch the recording here:

The first two Coffee Break webinars in the series can be found here:

• Software Updates & Patching
• Productivity & Automation

Check out our newest blog posts as well:

• Prepare for Ivanti Workspace Control End of Life
• Streamlining IT Management: The Advantages of Consolidating with Recast Software
• Dynamically Install Applications Using the ConfigMgr Administration Service During a Task Sequence
• Recast Software Achieves ISO 27001 Certification
• Automate the Force Reinstall of ConfigMgr Clients
• Q & A with SysAdmin Superstars: Jannik Reinhard

Intune Posts

• Build Compliance Baselines in Intune to Determine Status
• How to Build PPPC Profiles within Intune for MacOS Devices
• How to Manually Register Devices with Windows Autopilot
• Intune Device Query: A Practical Guide

‍Thank you for checking out Recast’s Endpoint Management Recap – Vol. 52. Stay tuned for more helpful content coming your way next month.

Check out Recast Software on Twitter, LinkedIn, and YouTube to follow the latest happenings.