With the release of todays Windows Updates (July 11, 2023) Microsoft have updated their guidance for managing the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932. I've prepared some Intune Remediation scripts that can be used to apply the "revocations" mentioned in that KB - which is simply a registry key update. … Continue reading Intune Remediations for CVE-2023-24932 (KB5025885 Windows Boot Manager Revocations)
Category: Intune
Translating Windows Update Driver Names to Friendly Driver Names
The Windows Driver Update management capability in Intune is a welcome new feature providing greater control of driver updates. One frustration I've long had with drivers in Windows Update though is the naming - sometimes the names are quite indescript and it can be difficult to know which driver (or driver software) it actually is. … Continue reading Translating Windows Update Driver Names to Friendly Driver Names
Display a User Notification in an Intune Win32 Application
I recently had the joy of migrating an Adobe application from ConfigMgr to Intune, and one of the requirements we needed to add was a user notification that prompted the user to close any M365 apps if they were running as they've been known to cause the installation to fail. Since this is not a … Continue reading Display a User Notification in an Intune Win32 Application
Managing HP Driver Updates with Microsoft Intune, Azure Log Analytics and Power BI – Part 2
In Part 1 of this series we looked at how we can report on missing driver updates for HP workstations using Intune Proactive remediations, Azure Log Analytics and Power BI. In Part 2 we'll look at how we can deploy driver updates to devices and use the information available in the Power BI report to … Continue reading Managing HP Driver Updates with Microsoft Intune, Azure Log Analytics and Power BI – Part 2
Managing HP Driver Updates with Microsoft Intune, Azure Log Analytics and Power BI – Part 1
In this two-part series I will cover a solution I recently created to manage HP driver updates on Windows workstations. In part 1, I'll show you a reporting solution giving you visibility of available HP driver updates across your managed estate and in part 2, I'll show a flexible solution for deploying driver updates, whether … Continue reading Managing HP Driver Updates with Microsoft Intune, Azure Log Analytics and Power BI – Part 1
Consolidated Feature Update Reporting for Microsoft Intune
If you're deploying feature updates using feature update profiles in Intune you're probably familiar with the Windows Feature Update Report available in the endpoint manager portal: As is often the case with these canned reports though, I find myself wanting to report things differently - in this case I wanted to see a consolidated view … Continue reading Consolidated Feature Update Reporting for Microsoft Intune
Granting delegated permissions to the Microsoft Intune PowerShell SDK for the Windows Update for Business Deployment Service
When working with Microsoft Graph in PowerShell I tend to use the REST API directly rather than cmdlets provided by Microsoft in their Graph modules - just personal preference I suppose. I found myself needing to query the Windows Update for Business deployment service using the Graph API, and this requires a specific permission - … Continue reading Granting delegated permissions to the Microsoft Intune PowerShell SDK for the Windows Update for Business Deployment Service
DIY Windows Provisioning – a Solution Example
Some time ago I created a custom solution to provision Windows workstations and in this blog I wanted to share how that solution works. This is not a community solution but simply an example of what can be possible with a little creativity and technical know-how! I work for an American company with a global … Continue reading DIY Windows Provisioning – a Solution Example
Get Group Membership for Intune Managed Devices with PowerShell
Just a quick one - Microsoft just added the Device group membership report to Endpoint Manager (service release 2206) which is pretty handy: We can also get group membership with PowerShell. The function below lets you pass either a device name or Azure AD Id and it will return the group and transitive group membership. … Continue reading Get Group Membership for Intune Managed Devices with PowerShell
Enhance Update Compliance Reporting with Azure Automation
In my last blog I provided an Intune Proactive remediations script that can be used to gather additional Windows Update information from your managed Windows devices and send the data to an Azure Log Analytics workspace to enhance your Windows Update reporting together with Microsoft's Update Compliance solution. In this blog, I will provide an … Continue reading Enhance Update Compliance Reporting with Azure Automation