Alex Nuryiev’s Post

🎆How to Remove Assigned Groups from Attack Surface Reduction ASR Policy in Microsoft Intune - https://lnkd.in/gpBMcCQ3 🔊Remove Assigned Groups from Attack Surface Reduction ASR Policy 🔊What Happens When You Remove Assigned Groups 🔊Why Removing Assigned Groups Is Helpful 🔊How This Helps IT Administrators 🔊What Are the Benefits of Regular Policy Maintenance

Are you also tired of constantly monitoring if a support-approved elevation comes in? I built a solution that automates this process by integrating Microsoft Intune Endpoint Privilege Management with Teams using Azure Logic Apps. This process enables anyone to easily approve or deny elevations relevant to them or their team. Last Thursday, I delivered a session at MC2MC where I talked about the how and why. Looking forward to showcase this little side project more! What it does: - Detects elevation requests automatically - Sends approval cards in Teams for quick action - Ensures secure workflows with Managed Identity and full audit trail This makes support-approved elevation faster and safer. #MicrosoftIntune #AzureLogicApps #MicrosoftTeams #EndpointSecurity #Automation PS. You can find the code on my Github (https://lnkd.in/ehJ2WgwC)

If you have ever integrated Omnissa (Workspace ONE) Access or VMware Identity Manager with Microsoft 365, you probably remember the old Set-MsolDomainAuthentication days. The MSOnline module is deprecated and Microsoft Graph PowerShell is now the only supported way forward. In my latest article I explain how to federate Microsoft Entra ID with Omnissa Access using the new Graph SDK. It is fully automated, requires no manual certificate handling, and removes all legacy dependencies. This new method automatically retrieves your IdP signing certificate from metadata, uses Microsoft Graph cmdlets only and includes both validation and removal steps. If you are still relying on MSOL commands, now is the time to modernize your federation scripts. Read the full post at https://lnkd.in/ezvMRNZP #OmnissaAccess #WorkspaceONE #Microsoft365 #EntraID #PowerShell #HybridIdentity #Automation

Intune – You can now run a remediation script on demand and per device basis (preview) If you are Intune administrator, you should already know (and hopefully using) remediation scripts capability which allows you to run detection and remediation scripts on device to maintain specific configuration which are not available through profiles. Until now, remediation scripts had a big limitation as it they were running only on a scheduled basis and for all targeted devices; there was no way to manually select one (or more) remediation script and execute it on demand for a specific device. Well, good news as Microsoft has improved (for new in preview with the limitation around supportability) the remediation scripts capability to allow you running them on demand and on a specific device. https://lnkd.in/gjhinmj4 #intune #microsoftintune #intuneremediationsscript #remdiationscript

🚨 The deadline for strong certificate-mapping has already passed . If your hybrid environment still relies on weak mapping methods, you could be risking authentication failures and security gaps. In my latest article for Recast, “Strong Mapping Deadline Has Passed: How Endpoint Admins Can Catch Up”, I walk through what the change means for endpoint admins, how to inventory and update certificates, and how to rollout strong mapping in environments using Microsoft Intune / Microsoft Configuration Manager. ➡️ Read it here: https://lnkd.in/d_kRe3ht . If you’re managing device certificates, hybrid AD/Intune, or certificate-based authentication, this one is a must-read. I’d love to hear your experiences with certificate mapping and rollout challenges. Feel free to comment or message me directly.

I built a dashboard that consolidates Intune/MDM logs, surfaces errors, and provides one-click fixes with local playbooks and Microsoft Learn links. It also includes tenant insights via Microsoft Graph. Highlights Ingests DMEDP/AAD/UDR/Autopilot/WU + IME/OMA-DM/Company Portal logs Error & pattern detection, search + level + code filters, CSV/JSON export “Fix” column with remediation page + docs per error code Connectivity checks to key Intune/AAD/WU endpoints Optional tenant view: compliance, stale devices, Windows version mix StrictMode + locale-safe parsing, tested on PS 5.1/7.x Outcome: faster troubleshooting, consistent L1/L2 actions, better endpoint reliability. Ping me if you want the script or to co-build the enterprise flavor. #Intune #EndpointManagement #PowerShell #MDM #EntraID #MicrosoftGraph #Windows11 #Automation #ITOps #Observability J’ai construit un Intune Log & Health Dashboard qui centralise les journaux MDM/IME/Autopilot, détecte les erreurs, propose des correctifs cliquables, et offre des insights locataires (Graph). Résultat : visibilité en temps réel, diagnostics guidés, et résolution plus rapide des incidents endpoint. Points clés : recherche multi-critères (texte/niveaux/codes), export CSV/JSON, contrôles de connectivité, bibliothèque de correctifs (pages locales + liens Microsoft Learn), mode Strict/locale-safe. Si ça vous intéresse, je partage le script. #Intune #EndpointManagement #PowerShell #MDM #EntraID #MicrosoftGraph #Windows11 #Automation #ITOps #Observability

📌Best way to Remove Default Microsoft Store Packages using Intune - https://lnkd.in/gbZ-y2UA ☑Remove Default Microsoft Store Packages Supported Platforms Details ☑Create a Configuration Policy to Remove Default Microsoft Store Packages ☑Available Default Microsoft Store Packages in Intune Configuration ☑Monitor the Remove Default Microsoft Store Package Policy Deployment ☑Intune Event Log Analysis & End Result

💡 Small Intune tip that’s saved me a lot of cleanup time 👇 Keeping Intune environments tidy can get messy — especially when you’ve got old, unenrolled, or duplicate devices hanging around. Here’s a quick PowerShell script that helps identify stale Intune devices (inactive > 60 days): Connect-MSGraph Get-IntuneManagedDevice | Where-Object { ($_.LastSyncDateTime -lt (Get-Date).AddDays(-60)) } | Select-Object DeviceName, UserDisplayName, LastSyncDateTime ⚙️ It connects to Graph, grabs all managed devices, and filters for those that haven’t synced in 60+ days. 🧹 Perfect for Intune hygiene before policy pushes or tenant cleanups. I’ve used a version of this before major migrations to flag stale endpoints and keep compliance reports accurate. Curious — how are you all handling Intune cleanup or automation in your environments? Any go-to scripts or Graph API tricks? 💬 #Intune #Microsoft365 #Automation #SysAdmin #EndpointManagement #PowerShell #AzureAD

📌Remove Default Microsoft Store Packages Supported Platforms Details -https://lnkd.in/gbZ-y2UA ☑Best way to Remove Default Microsoft Store Packages using Intune ☑Create a Configuration Policy to Remove Default Microsoft Store Packages ☑Available Default Microsoft Store Packages in Intune Configuration ☑Monitor the Remove Default Microsoft Store Package Policy Deployment ☑Intune Event Log Analysis & End Result

What Is the Settings Catalog in Microsoft Intune and How Does It Work: https://lttr.ai/Ajgnf #MicrosoftIntune #M365Show #AddScopeTags #FixServiceIssues #EventViewerLogs #WorkMirkoPeters #MakeFewerMistakes #IntuneTechForums #CopyPolicyNames #FixProblemsQuickly #m365show