Support Tip: Cross-Posting “Additional guidance to mitigate speculative execution side-channel vulnerabilities”

Sharing these posts (cross-posting) with the Intune community as these are informative links. The original posts below are being updated as needed, so check back on each post or sign up for RSS feeds, as relevant. From our peers in Configuration Manager and the Intune team: https://blogs.technet.microsoft.com/configurationmgr/2018/01/08/additional-guidance-to-mitigate-speculative-execution-side-channel-vulnerabilities/ From MSRC: https://portal.msrc.microsoft.com/security-guidance/advisory/ADV180002 From the Cloud team:  https://support.microsoft.com/help/4073235/cloud-protections-speculative-execution-side-channel-vulnerabilities


Plan for Change: Use Intune on Azure now for your MDM management

Updated 1/4/18 & 1/8/18 with hybrid clarifications. Updated 1/26/18 with PC management clarification Please note: Windows 7, Windows 8, and Windows 10 management with the full PC agent will remain in the Silverlight console. Windows 10 management through the MDM channel will stay in Intune in the Azure portal. This is detailed below. Over a year…


Support Tip: Conditional Access policies for Intune will now be available in Azure Active Directory

We recently posted a Message Center post reminding you about the Conditional Access policies move from v1 to v2 and re-iterated the impact to Intune admins. In this support blog, we share a few frequently asked questions related to CA policies and Intune. We will keep this post updated as we hear more questions from…


Support Tip: New Intune Diagnostic Console for Log Submission in the Intune Managed Browser

By David Meyerson |  Software Engineer With the latest release of Intune Managed Browser (Version 1.2.8+), diagnosing issues with all Intune App Protection Policy enrolled apps (also known as MAM-enrolled apps) is easier than ever for you – the Intune Admin – and end users on iOS. The Intune Diagnostic Console streamlines log collection and submission….


Support Tip: Setting up communication between MAM-managed and MDM-managed apps

Updated 11/2/17 with the Office Message Center post details. Updated 11/17 with new section on corporate data. Updated 11/29 with APP section. We hear occasionally from customers that they want apps managed by App Protection – better known as Mobile Application Management (MAM) – to allow communication with apps managed by Mobile Device Management (MDM)…


Support Tip: Intune Support for iOS 11

By Derrick Isoka | Sr. PM & Andy Cerat | Sr. PM Updated 9/13 with a comment on modern auth. Updated 9/20 with a known issue with the Apple mail app in iOS 11 and O365. Updated 10/3 with confirmation that 11.0.1 fixes the known client issue. Updated 10/16 with a new known issue. As announced…


Support Tip: Known issue in macOS Conditional Access Preview

Intune and Azure AD recently released the public preview for macOS Conditional Access (CA) which extends the way we can help secure resources in the cloud and now on Macs. Administrators can now restrict access to Intune-managed macOS devices using device-based conditional access according to their organization’s security guidelines. However, we have a known issue…


Support Tip: Steps to Decrypt and Reencrypt a BitLockered Device & Intune

In this post, we’re sharing where to find a list of BitLockered devices in the Intune console and pulling together two different ways to decrypt and reencrypt a BitLockered device. First off, to find which devices are BitLockered in console, just go to Device configuration-Profiles, select your Endpoint protection profile, then in the blade that extends out,…


Known Issue: Device OS Counts in the Intune on Azure Console

By Murali Krishna Hosabettu Kamalesha | Sr. PM We’ve heard a few questions regarding the Enrollment versus Device OS Distribution. First off – it’s not you. Today, these graphics are displaying information that’s inconstant with each other. We’ve got a bug we’re resolving in the “Devices OS Distribution” chart that is found under the Overview section…


Demystifying Service Health for Microsoft Intune

In this post, we share details on service-impacting incident response and service health for Intune. While we always want the service to be 100% available, there are infrequent times when we experience a service incident. The goal of this blog post is to demystify the experience. Below, we walk you through: Who’s working on an…