Support Tip: New Intune Diagnostic Console for Log Submission in the Intune Managed Browser

By David Meyerson |  Software Engineer With the latest release of Intune Managed Browser (Version 1.2.8+), diagnosing issues with all Intune App Protection Policy enrolled apps (also known as MAM-enrolled apps) is easier than ever for you – the Intune Admin – and end users on iOS. The Intune Diagnostic Console streamlines log collection and submission….


Support Tip: Setting up communication between MAM-managed and MDM-managed apps

Updated 11/2/17 with the Office Message Center post details. Updated 11/17 with new section on corporate data. Updated 11/29 with APP section. We hear occasionally from customers that they want apps managed by App Protection – better known as Mobile Application Management (MAM) – to allow communication with apps managed by Mobile Device Management (MDM)…


PFX certificates issued using the Intune Certificate Connector: Fix your Intune Migration Configuration Issues

During the migration process, we identified a few dozen accounts that would have problems with certificate hashes after being migrated. We put those accounts on hold and came up with a fix for the issue, but before the fix can take effect, all PFX policies have to be regenerated. You can regenerate the policy yourself,…


Windows Early Launch Anti-Malware Detection Issue and Intune Compliance

Murali Krishna Hosabettu Kamalesha | Program Manager, Intune If you’re managing Windows using mobile device management, and if you’re targeting those devices with conditional access policies, there’s a known issue we wanted to make you aware of with the Windows early launch anti-malware (ELAM) driver. This issue applies to both Intune and to Configuration Manager…


Changes to Automatic Grouping for Corporate Pre-enrolled iOS Devices

Daniel Gerrity | Program Manager, Intune updated 5/26/2017 – changed the query rule picture to show you don’t need quotes anymore on the query criteria. For the last few months, we have been migrating group management out of Intune and into Azure Active Directory. This change will bring us some exciting new features, but it also…


Checking for updated app permissions for Android for Work apps

Author: Chris Baldwin, Senior Program Manager About Android for Work app permissions Android for Work requires that you “approve” applications in Google’s managed Play web console before syncing them to Intune and deploying them to your users. Because Android for Work allows you to silently and automatically push these apps to users’ devices, you must…


Meeting Apple’s New Requirements for Application Transport Security

Update: November 13, 2017 – Added in macOS Company Portal information. Note, if you’ve already tested and everything works with the iOS Company Portal app in TestFlight (currently version 2.9.1), the macOS Company Portal will also work once this change takes place. Update: November 1, 2017 – Still no updated timeline from Apple on when this change…


ConfigMgr 2012 SP1/R2 RTM: Support for Hybrid Mobile Device Management Ending Soon

Applies to: Microsoft Intune, System Center 2012 Configuration Manager SP1, System Center 2012 R2 Configuration Manager Support for System Center 2012 Configuration Manager SP1 and System Center 2012 R2 Configuration Manager RTM ended on July 12th, 2016. Subsequently, support for these releases connecting to the Microsoft Intune service via hybrid MDM (e.g. managing mobile devices…


Removing Access Control from Mobile Device Management for Office 365

Author: Joel Stevens | Microsoft Support Escalation Engineer When you activate the Mobile Device Management (MDM) for Office 365 service, you are prompted to create a Device Management Security Policy. The mobile devices for users that you target with this policy will be quarantined, and the user will be sent an email asking them to…


Using the Microsoft Graph API to access data in Microsoft Intune

Although for most administrators the Microsoft Intune administration console will be the primary method of looking at information in Microsoft Intune, developers and IT pros that have a level of technical knowledge to understand REST API calls may use Microsoft Graph to query data from the service backend of Intune. Microsoft Graph exposes multiple API’s…