Microsoft Intune

Microsoft Intune is a cloud based service which provides Mobile Device Mangement (MDM), Mobile Application Management (MAM) and Windows 10 PC Management along with features such as Remote Lock, Reset passcode, App Selective Wipe, Wipe Data from Enrolled Devices, Device Compliance Policies, Reporting, App Protection Policies (APP). Also supports MAM-WE (Mobile Application Management)-Without Enrollment (WE) which is to manage the Applications without Enrolling your device to Intune.

Intune is included in Microsoft Enterprise Mobility + Security (EMS) and Integrates with Microsoft 365, Azure AD and Azure Information Protection (AIP). Please click the link to find out more information about it.

Microsoft Intune is included in the following licenses:

►Microsoft 365 E5 ► Microsoft 365 E3 ►Enterprise Mobility + Security E5 ► Enterprise Mobility + Security E3 ►Microsoft 365 Business ►Microsoft 365 F3 ►Microsoft 365 Government G5 ►Microsoft 365 Government G3

Block USB drives with Exceptions using Microsoft Intune

August 11, 2022July 13, 2022 by @techpress

You can easily block USB drive on all Intune managed corporate devices by creating a Policy on Microsoft Endpoint Manager Admin Center. There are different ways to create a policy to block USB drive or removable storage device. Blocking of USB drive access is must for every organization as it can save the organization from data leak. In Today’s world, users are using BYOD devices or a device provided by your company. In either case, if users are accessing any confidential information from the device which can be saved and then copied to your external storage then it could be a security breach event. To prevent this security breach, use …

How to configure automatic Outlook Contacts Sync to Native Contacts App for iOS and Android devices using Microsoft Intune / Microsoft Endpoint Manager (MEM)

August 11, 2022July 27, 2021 by @techpress

When you have a requirement where users are using their personal mobile devices to access the corporate emails and other Microsoft office apps. You want to make sure the data in these apps is secure and also prevent data leak. Application Protection Policies (APP) Policies can be applied to the users which protects your apps and data. App Protection Policies provides the option to Allow the contacts to be synced with the native apps. The setting is called “Sync policy managed app data with native apps“. By default this setting is set to “Allow”. Along with this setting, you will require an App configuration policy to save the contacts. Save …

How to Uninstall different versions of WinZip software installed on Windows 10 system using Microsoft Intune

August 4, 2022May 12, 2021 by @techpress

Requirement: I got the requirement from one of our client to uninstall WinZip software from all users PCs. There were different versions of WinZip installed on the systems. I have targeted WinZip 24.0.14033 and WinZip 24.0.13650 and i will show you how to uninstall these two versions by creating MS Intune Windows App (Win32) App Package. I will also show you how you can uninstall WinZip versions other than the one’s given above. Let’s start —> Check the WinZip software version on target machine on which you want to remove the software and try to find the WinZip MSI file matching this version number. If you are unable to find …

Deploy and manage custom favorites to Microsoft Edge on Windows 10 devices using Microsoft Intune

August 4, 2022May 6, 2021 by @techpress

First step is to create favorites in below format. You can customize it as per your requirement to include Intranet Pages or Internal Web Portal URL. Below favorites text format will be used when you will create a Policy to configure Favorites for Microsoft Edge. Please make sure URL and name is in quotes. You can simply copy below text and modify as per your need. Related: Set Microsoft Edge Home Page, Startup Page And New Tab Page Using Microsoft Intune Related: Set Microsoft Edge As Default Browser Using Microsoft Intune Change the toplevel_name value to change the Root Level Folder Name which contains all the favorites. Once you have …

Configure team site libraries to sync automatically using Microsoft Intune / Endpoint Manager

August 4, 2022May 4, 2021 by @techpress

You can manually sync a Sharepoint teams site library to your windows 10 system by accessing the Sharepoint teams site library and clicking the Sync button. However, If there is a default internal library which you want all users to use and sync it to their systems. Its easier to configure a policy to automatically sync it on users systems rather than each user access the library via web browser and clicking on sync button. OneDrive Files On-Demand Must be enabled. Applies only for users on computers running Windows 10 (1709) Fall Creators Update or later. Do not enable this setting for the same library to more than 1,000 devices. …

How to uninstall expressvpn application from Windows 10 systems using Microsoft Intune

August 4, 2022April 3, 2021 by @techpress

Some of the apps are pre-installed with Windows 10 and not required by the end user. Therefore, these applications need to be removed. expressvpn 7.12.1.4 is one of the application. The below steps can be followed to uninstall any version of expressvpn installed on windows 10 systems. expressvpn app is not available from Microsoft store for business, therefore it cannot be synced from Microsoft Store for Business portal to Endpoint manager and target for un-installation. We need to create a Win32 app package to uninstall this app. Below process of uninstallation can be followed for applications other than expressvpn as well, just check the silent install / uninstall switches for …

Deploy MSI Application on Windows 10 workstations using Microsoft Intune

August 4, 2022March 23, 2021 by @techpress

There are numerous ways to deploy an app on Windows 10 workstation. I will be deploying an application using MSI Installer provided by the vendor. Download the application MSI Installer file from the Vendor web site and follow below process to deploy it on the target computers. I will be using Line of Business apps Deployment method of Microsoft Intune for this deployment. Line-of-business (LOB) apps and Microsoft Store for Business apps are the app types supported on Windows 10 devices. The file extensions for Windows apps include .msi, .appx, and .appxbundle. Also Read: How to Deploy / Install ManageEngine Desktop Central Agent on Widows 11 using Microsoft Intune 1. …

Renew Apple MDM Push Certificate for Microsoft Intune Apple Enrollment

August 4, 2022March 23, 2021 by @techpress

When you configure Apple enrollment on Microsoft Endpoint admin center (https://endpoint.microsoft.com), you must have configured Apple MDM Push certificate which is a prerequisites for configuration of Apple enrollment for Microsoft Intune. The Apple MDM Push certificate expiry is normally 365 days and when its near its expiry date you get notified 30 days and then 10 days before. Also Read: Configure Apple MDM Push certificate to manage Apple devices using Microsoft Intune If you do not renew the certificate and it gets expired then a new certificate will need to be generated and installed which will require all the apple devices to get re-enrolled. Therefore, its easier to just renew …