Intune

Prefer NRPT for DNS namespace blocks to avoid shared-IP fallout from broad Firewall FQDN rules.

Keep useful Defender Antivirus notifications without all the noncritical noise.

Automate security group membership based on device hardware, software, vulnerabilities, and other inventory data

Bundle several Defender macOS permissions in one profile, then check the remaining deployment requirements.

Require a second admin to approve protected Intune changes before they are applied.

Retrieve available Entra LAPS password history with Get-LapsAADPassword.

Note This article was last updated on 01/30/2025 for readability and updated URLs. I am working on updating this for the UI changes that have been made to Intune :)

Note This article was last updated on 01/30/2025 for readability and updated URLs. I am working on updating this for the UI changes that have been made to Intune :)

Note This article was last updated on 01/30/2025 for readability and updated URLs

Note This article was last updated on 01/27/2025 for readability and updated URLs, but content review and image updates are in process :)

Note This article was last updated on 01/27/2025 for readability and updated URLs, but content review is in process. New guidance is to enable the credential theft rule out of the box, and there are new rules to put in audit mode and add to the queries.

Getting a web app to run in Edge in Kiosk mode on iOS has been a journey, so here's a guide on how I did it :)