In this post I will show you the steps to troubleshoot Hybrid Azure AD Join issues. Before troubleshooting Hybrid Azure AD issues, we need to understand the basic configuration we require. Once we verify the settings are ok, we can further go and troubleshoot the issues.
If you are sure about Hybrid Azure AD-join configuration are ok, then you can directly skip to “Steps to perform for Hybrid Azure AD-join issues”
(more…)
In this post I will show you how to track Conditional Access Policy change using email alert as a solution. Conditional Access is one of the most important aspect of Azure where we can use to block / allow certain applications and other settings based upon conditions. However, we also want to make sure that no unauthorized changes are applied to Conditional access policies. Using Log Analytics alert feature we can get the email whenever any changes are applied in the environment.
This will help analysing who made the changes to Conditional Access policy.
(more…)
In this post I will be showing the details on how to keep a track on who modified WUfB Intune policies using email alert. These covers modifying any Windows Update Ring, Quality update policy to expedite the updates and Feature update policies. This is just not related to modifying the policy but for creating the update policies as well.
(more…)
This is a complete guide to setup and configure Windows Autopatch which is a new feature released by Microsoft under MEM (Microsoft Endpoint Manager) in public preview. I will go through the benefits and configuration required for Windows Autopatch.
(more…)
In this post I will show you how to collect Device Diagnostics logs using Intune Portal. MEM Admin center has the ability to collect the Diagnostics logs remotely from the device.
Collecting the diagnostics logs remotely through portal gives the ability to get the logs remotely without disturbing the user. Good thing is that, diagnostics logs are stored for 28 days and we can collect upto 10 collections of these logs.
(more…)
In this post I will show you how to apply computer name based upon country location for Windows Autopilot devices. This can easily be achieved by using Group Tag which is also known as Order ID. Once we or vendor uploads the hardware hash to Intune portal, we can utilise specific naming convention to be used which will help us creating Deployment profiles to use desired hostname for the device we are looking for. Based upon group tag, we can further create Dynamic groups (country based) which will be used for targeting deployment profiles.
(more…)
