Windows 11 Multi-app kiosk is finally here, when writing this it is not released in the cumulative update for Windows 11 22H2 yet. And because of that it is not possible to configure it through Intune or Provisioning packages just yet when I am writing this. More information: Set up a multi-app kiosk on Windows…
Playing around with Driver Updates in Intune
Recently Microsoft announced the general availability of a very anticipated feature in Intune:Manage Windows driver and firmware updates with Microsoft Intune – Microsoft Community Hub Check out the Microsoft blog post above for information about what it is and how it works. More details about the feature, its prerequisites and how it works can be…
MMUGSE – Summer Meetup 8th of June 2023
On the 8th of June it is time again! Microsoft Management User Group Sweden – Summer Meetup @ Microsoft Reactor Stockholm. We have the great honor of having some great presenters & MVP’s to join us. Really looking forward to a great day. We are very grateful for our Sponsor: Recast Software – https://recastsoftware.com The…
PS Script to Update Boot images with CU-CVE-2023-24932
This will be a short post on how to update WinPE boot images with a Cumulative Update as we need to do that now with the release of May 2023 Cumulative Update to address CVE-2023-24932. Spent all day with colleagues to try to test what happens to OS deployment (and AutoPilot) when deploying the mitigation…
Windows Servicing, Personal Teams and Success.cmd
Time to share how I am using Success.cmd to add the registry key to prevent Personal Teams. I think that the possibility to run commands when doing feature updates is used way too little. We have the option to use SetupConfig.ini as well with Intune, Configuration Manager and Standalone of that is what we want…
Windows MDM Security Baseline – Settings Catalog
Important Update! I published a new export to solve import issues but that export missed the following so if you download that export update it with the following changes to match the Security Baseline: I wrote a post a couple of weeks ago with the Microsoft Edge Security Baseline policy re-created in Settings catalog. I…
Configuring MS Edge Security Baseline v107 using Settings Catalog
The Security baseline in Intune is based on the Security Baseline for Edge v85.. We are currently on Edge baseline 107 (no new recommended settings for 108 & 109). That is only one reason for creating you own Edge Security baseline using Settings Catalog instead. More reasons are that it is easier to troubleshoot and…
Configuring Desktop App Installer using CSP and script?!
Desktop App installer a.k.a. Windows Package Manager and Winget is a powerful addition to the Windows platform. It is also something that we all need to learn and configure according to our organization’s requirements, compliance requirements and security. The “New” Store support in Intune makes this a bit trickier as well as we must allow…