Support added for approved/reject elevations Endpoint Privilege Management

As I published an article last year EPM in Intune about EPM setup, Now in the March release of Microsoft Intune, Endpoint Privilege Management introduced a new feature called support-approved elevations. Please look through previous article to do initial setup of EPM. Here’s a concise summary and steps to setup approval requests: Background: What’s New: … Read more

Security Management with Microsoft Defender for Endpoint (without Autopilot)

Microsoft Defender for Endpoint simplifies security management for devices beyond Microsoft Endpoint Manager (MEM) enrolment. It acts as a guardian, enforcing and reporting policies assigned via MEM. Devices integrated into Azure Active Directory (Azure AD) become part of the MEM, Azure AD, and Microsoft 365 Defender ecosystems. Steps to configure MDE To enable Security Management for Microsoft Defender for Endpoint, … Read more

How to create custom compliance policy in Intune

As the digital landscape evolves, our approach to device management and security must also adapt. Next, we explore a cutting-edge capability within compliance policies in Intune: custom compliance settings. These settings empower IT administrators to assess various aspects of a device’s configuration and use the findings to determine its compliance status. By leveraging PowerShell scripts within custom compliance … Read more

Endpoint Privilege Management in Microsoft Intune

Introduction As Microsoft introduces Endpoint Privilege Management (EPM) is an important solution for organizations to enhance security. It focuses on managing privileges for endpoints (devices) within an organization. We already have some custom EPM solutions available till date, Byond trust, Thycotic EPM are couple of dominant names since long. But Microsoft realized this as good … Read more

Windows PIN change/Reset issues

Windows hello PIN reset is one of common issue on Windows 10/11 devices where user sometimes cannot reset their PINs even if they try domain/0365 login method. Windows Hello PIN is the authentication method Microsoft love to have therefore windows always ask to set PIN before setting up biometric of face recognition. Where PIN data … Read more

Manage Windows Hello for Business

Discover how to manage Windows Hello for Business (WHfB) using Intune. Although the process may appear complex, with the right approach, it becomes surprisingly straightforward. We’ll explore different options, making it easy for you to configure WHfB—from device enrollment to post-enrollment methods. Choosing the Right WHfB Management Method The world of WHfB management with Intune … Read more