Microsoft is prioritizing Entra joined devices without neglecting hybrid environments. Entra Hybrid Join still has value, especially for leveraging group policy and certain applications. Embracing a strategy that starts with hybrid and transitions to Cloud Native gradually can lead to successful adoption. Hybrid is a bridge to the future and should not be underestimated.
Microsoft Intune released mprovements to Discovered Apps Report and Intune Management Extension (IME) logs for Win32 Apps. The IME handles WinGet Apps, Win32 Apps, PowerShell Scripts, Remediations, App Control for Business Managed Installer, Device Compliance, and Analytics. The new AppWorkload.log provides detailed Win32 app deployment/validation process information. Overall, Intune’s logging on application installs is praised for its detailed insights.
Windows Autopilot Device Preparation is a new solution from Microsoft that simplifies the onboarding process for Windows devices. It streamlines device setup, enhancing user experience while reducing IT time investment. The process involves setting up device groups, configuring policies, and importing corporate identifiers. This user-driven flow supports Entra joined devices and offers improved reporting capabilities.
CrowdStrike faces a major outage due to a driver channel file causing widespread BSOD. Intune scripts detect and remove problematic files. Intune can also enable users to self-service BitLocker keys. Conditional Access can control key access and Audit Logs can monitor key usage. Compliance ensures key access from compliant devices only.
Since COVID, focus has been on BCP and DR. Windows 365 now offers new capabilities like Cross Region Disaster Recovery, Enterprise State Roaming, and Cloud PC resiliency. These features ensure 99.9% uptime, RPO of ~0, and easy activation and deactivation of fallback devices. The new DR feature costs $4.50/user.
This article explores the importance of Microsoft Word security policies and the issues that can arise with Office security baselines. It covers challenging settings such as add-in signing and trust bar notifications, and provides a solution using Microsoft Intune to address trusted publisher issues. Proper implementation of security baselines is emphasized to avoid potential problems.
