Setting up Windows Hello for Business with Intune

The purpose of this post is to help IT pro’s and architects understand Windows Hello for Business as it relates to Windows 10 modern management (with Intune). The deployment guide for Windows hello for business is very comprehensive so I’m not reproducing that – but instead want to strip out much of the complexity and…

0

Add Conditional Access to your Windows 10 VPN with Intune and Azure AD

I recently published a post on setting up your own Windows 10 VPN lab with instructions to build a lab environment needed to start playing with the Windows 10 VPN – specifically using Intune to configure cool features like app-triggered VPN. This post is an add-on, so I suggest you start at my first post,…

0

Build your own Windows 10 VPN lab and configure it with Intune

You’ve probably heard a lot about all the VPN capabilities that Windows 10 managed with Intune can offer, but if you’re like me, to really understand it you will want to get your hands dirty – you’ll want to set it up and play with it, break it and then fix it again. And of…

2

How to Deploy a Proxy Pac file with Intune

Super-Quick post on a creative way to deploy a PAC file to iOS devices enrolled in Intune. IMPORTANT: PROXYPACURL configuration only works on supervised iOS devices (As per the Apple Configuration Profile reference), so if your devices are not supervised stop reading here). Step 1 – Create PAC File Create (or obtain an existing)  Pac…

0

Intune App Installation Reports Explained

[Update: 1st December 2017 to Include new app install status “Install Pending” and “not Applicable”] App deployment in the new Intune portal is pretty swish. There is a really nice admin experience for adding apps and deploying them out to users, and also some built in reports for tracking the status of deployment. This is…

0

Replacing Intune “Exclude Groups” in the Azure Portal

One of the biggest changes to Microsoft Intune this year is the way that Grouping and Targeting works. If your reading this post, you might be in a situation where your migration is blocked due to “Exclude Groups”, or you have migrated and now trying to work out how to regain the “Exclude” functionality. The…

0

Intune: Deploy Apps To Unenrolled Mobile Devices

In case you missed it, last month Microsoft released a great new feature: You can now deploy apps to mobile devices without needing the device enrolled! To make use of this feature, your Intune tenant must be migrated to the new Azure portal experience – If you don’t see the intune bits in your Azure…

4

How to Set up Azure AD Certificate-Based Authentication for Office Apps on Mobile Devices (iOS and Android) – PART 3

Part 3 – Set up ADFS Active Directory Federation Services is a key requirement in making this solution work. You’ll need to configure some claims (serial Number and Issuer) so that they are issued to users and eventually presented to Azure AD. You also need to make the “Sign in using an X.509 certificate” option…

4