Peter Lee

Hi IT service provider and Intune admin. How do you run your initial health check for an #Intune tenant? Meet IntuneLens, the first official public release of a PowerShell module built to help assess and improve #Microsoft Intune configuration and health. Key features in 1st version: • Tenant and service health overview • Connector status checks • License and add-on visibility • Branding configuration analysis • Optional Protected mode to mask sensitive data https://lnkd.in/eHx3qcya

106

A new edition of the Endpoint Management newsletter is out! 🚀 This one covers: ✅ Windows Backup is now available for organizations ✅ Intune August 2025 (2508) release ✅ Autopilot and OOBE updates ✅ Windows 365 and security improvements ✅ Community contributions on PowerShell, Edge, Entra ID, and more 📖 Read the edition: https://lnkd.in/dv5bXwwR 📩 Subscribe: https://lnkd.in/dz36XjqY

49

6 Comments

🔧 Fixed a tricky FSLogix user profile size issue in AVD with no GPO or Intune! Recently tackled an interesting issue with a client’s Azure Virtual Desktop (AVD) setup. The client is using Microsoft Entra Domain Services (not a full domain controller) to connect their AVD environment to a domain. Due to budget constraints, they don’t use Group Policy (GPO) or Intune managing ~400 users without the added licensing cost. The issue: The engineer who originally built the AVD environment missed setting a profile size limit for FSLogix. As a result, all user profiles were defaulting to 30 GB, which caused unnecessary storage consumption. Here’s how I resolved it: 1. Tried to update the registry key SizeInMB, but quickly realized it only impacts new profiles, not existing ones. 2. Mounted the FSLogix file share using a SAS URL on an AVD host. 3. Downloaded the user .vhd files locally. 4. Used the Hyper-V PowerShell module to resize each VHD to the correct size. 5. Uploaded the resized VHDs back to the FSLogix file share. ⚠️ Pro tip: You can’t use nested virtualization inside most Azure VMs. To run Hyper-V PowerShell commands like Resize-VHD, you need to use a D-series VM that supports it. #AVD #Azure #FSLogix #CloudEngineering #MicrosoftAzure #PowerShell #AzureVirtualDesktop #EntraDomainServices #TechTips

109

18 Comments

🚀Simplifying Windows Deployment & Activation with Intune + Autopilot How to Activate Windows License via Windows Autopilot? #Prerequisites Before you start, make sure you have the following: • Valid Windows Enterprise or Microsoft 365 (E3/E5) licenses for your users • Intune and Azure AD (Entra ID) setup with automatic MDM enrollment • Devices registered in Windows Autopilot (hardware hash uploaded) • Network connectivity for Autopilot and Azure services • (For Hybrid Join) Intune Connector for Active Directory installed and configured #WindowsAutopilotActivationFlow 1. Device boots and loads Autopilot profile. 2. Device joins Azure AD or Hybrid AD as per profile. 3. Intune auto-enrollment triggers. 4. User signs in with licensed Azure AD account. 5. Windows automatically activates via subscription-based activation. 6. (For Hybrid Join) Activation is handled by ADBA or KMS. #ConfigurationSteps A. Licensing   • Assign Windows Enterprise or Microsoft 365 E3/E5 license to users.   • Ensure licenses are active before deployment. B. Intune Automatic Enrollment   • Go to Intune Admin Center → Devices → Windows Enrollment → Automatic Enrollment.   • Enable MDM auto-enrollment and select user scope (All or Selected). C. Register Devices in Autopilot   • Capture hardware hash using PowerShell (`Get-WindowsAutopilotInfo.ps1`).       “https://lnkd.in/d67aPazy   • Upload to Intune or Partner Center. D. Create Autopilot Deployment Profile   • Choose Azure AD Join or Hybrid Azure AD Join.   • Customize Out-of-Box Experience (OOBE).   • Assign to device group. E. (For Hybrid) Configure Intune Connector   • Install Intune Connector for AD.   • Verify permissions and OU structure. #VerifyActivation After deployment, verify activation using the following commands: • `slmgr /xpr` → Check if Windows is permanently activated • `slmgr /dlv` → View detailed license information • `dsregcmd /status` → Check Azure AD Join status #TroubleshootingTips • Ensure user has valid license assigned in Azure AD. • Confirm device is Azure AD joined and Intune enrolled. • Check Intune Connector status for Hybrid Join. • Verify connectivity to activation and Microsoft endpoints. • Review Event Viewer logs for activation-related errors. Windows Autopilot simplifies deployment and activation by linking user licensing with device provisioning. With proper setup in Intune and Azure AD, activation happens automatically during OOBE without the need for product keys.

47

2 Comments

🚀 Breaking Down IT Support Terminology Whether you’re new to IT or brushing up before an interview, understanding these foundational terms can give you a solid edge. From basic commands like ipconfig and ping to systems like Active Directory, SCCM, and remote access tools—these are the everyday essentials for any IT support specialist. Let’s keep learning and growing in tech! 💻 hashtag #ITSupport #TechTips #HelpDesk #ITTerminology #ActiveDirectory #SCCM #NetworkingBasics #CareerInTech #CompTIA #WindowsSupport #RemoteSupportTools

440

10 Comments

Power Apps Cmdlets Every App Maker Should Know 💻 Are you building with Power Apps? These PowerShell cmdlets will make your life easier: 🔍 Get-AdminPowerApp - View details about your apps 🔄 Export-PowerApp - Export apps between environments 👤 Set-AdminPowerAppOwner - Change app ownership quickly 🌐 New-AdminPowerAppEnvironment - Create environments via code 📊 Get-AdminPowerAppConnectionRoleAssignment - Check connection permissions Need Power Apps expertise? Check out our services: https://lnkd.in/gh3UFYfM #PowerApps #PowerPlatform #ProductivityTips #PowerShell #MicrosoftPowerApps #PowerAppsServices #LowCode #PowerAutomate #BusinessSolutions #DigitalTransformation #PowerAppsDevelopment #PowerAutomateServices #PowerAppsServices

58

⚠️ 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗦𝗵𝗮𝗿𝗲𝗣𝗼𝗶𝗻𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗨𝗽𝗱𝗮𝘁𝗲𝘀 𝗥𝗲𝗹𝗲𝗮𝘀𝗲𝗱: 𝗔𝗰𝘁𝗶𝗼𝗻 𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗱  Microsoft has now released essential security updates addressing the two newly disclosed vulnerabilities CVE-2025-53770 and CVE-2025-53771. These vulnerabilities affect SharePoint Server 2016 and 2019, and applying the latest patches is crucial to protect your environment. ⏫ 𝗔𝗳𝗳𝗲𝗰𝘁𝗲𝗱 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝘀 𝗮𝗻𝗱 𝘂𝗽𝗱𝗮𝘁𝗲𝘀: ➤ SharePoint Server Subscription Edition  • Download KB5002768 ➤ SharePoint Server 2016  • KB5002760 – Core Update  • KB5002759 – Language Pack ➤ SharePoint Server 2019  • KB5002754 – Core Update  • KB5002753 – Language Pack 🔼 𝗜𝗺𝗽𝗼𝗿𝘁𝗮𝗻𝘁 𝗻𝗼𝘁𝗲𝘀:  • SharePoint updates are cumulative, installing the latest update includes all previous fixes.  • Older versions (2010/2013) will not receive patches. These must be isolated or decommissioned to mitigate risk.  • After patching, it is strongly recommended to rotate your ASP(dot)NET machine keys and restart the IIS server to prevent potential post-exploitation. 🔄 Stay secure and keep your systems up to date! 

62

#SharePoint Agents are now available in the #MicrosoftTeams App Store. This extension enables users to work directly with SharePoint Agents in Teams, providing intelligent assistance for document discovery, content summarization, and collaboration. SharePoint Agents are personalized to each user. If a user has never accessed a SharePoint Agent, it will not appear for them. https://topedia.net/VyAgu5

11

🚀 Finally new blog post! Guide to Intune App Protection Policies – Part 1: Overview Managing corporate data on mobile devices is more challenging than ever, especially in BYOD and hybrid work environments. That’s where Microsoft Intune App Protection Policies (APP) come in. In this first part of my three part blog series, where I cover: ✅ What APP is and why it matters ✅ Key capabilities for securing data at the app level ✅ Real-world scenarios where APP prevents data leakage If you’re an IT professional or Intune admin looking to strengthen your mobile security strategy, this guide is for you. 👉 Read the full post here: https://lnkd.in/dCeqc_xy 💬 How are you using App Protection Policies in your organization? Share your experiences in the comments! Stay tuned for part 2! #MicrosoftIntune #EndpointManagement #AppProtection #BYOD #MobileSecurity #IntuneTips #sulavasti

17

1 Comment

Intune updates💡- In case you haven't heard of yet. Intune endpoints also use Azure Front Door for communicating with the Intune service. The IP ranges for Intune (part of Microsoft Security) are added to the following table. Intune specific endpoints are referenced in the JSON file by the name AzureFrontDoor.MicrosoftSecurity. Refer to the Azure Front Door and Service Tags documentation for the complete list of all services that utilize Azure Front Door and instructions for using the JSON file. Azure Front Door IP Ranges and Service Tags link below. https://lnkd.in/gjcvARgJ https://lnkd.in/gSjRBr4R #Intune #Service #Updates

50

1 Comment