Some time ago I wrote a very detailed and long blogpost on how you could control the Office 365 Pro-Plus version and update channel through the ADMX-Backed policy functionality within Microsoft Intune. Today this is not needed anymore and a easier solution is available. The Version and Update Channel of the Office 365 Pro-Plus Click-to-Run client can now be controlled through the ‘Administrative Templates’ policy type which is currently in preview. In this blogpost I will explain how you configure the new and easy way!
Windows 10: Provision and/OR enforce Languages
StandardIn this blogpost I want to show you how we can provision a Local Experience Pack and how we can enforce this on devices and configure this new added language as the default language for the user. This blogpost will focus on the Windows 10 Modern Management scenario, in a later blogpost I will focus on how we can do this within ConfigMgr.
Continue reading
Back to blogging again
StandardThe last couple of months it was very quiet on this blog. The reason behind this was the start of a new project at one of the customers of my employer. Beside this new project I also spend time on presenting on several great community events. In this blogpost I want to take the time to explain some changes to my blog and look back to the sessions I presented together with my colleague Peter van der Woude. Since the title is ‘back to blogging again’ you can expect more blogposts in the coming months.
Continue reading
Windows 10 1803 device names in Windows analytics
StandardWhen you’re using Windows Analytics you’ve probably noticed that from Windows 10 1803 device names are not visible anymore within Log Analytics. For Windows 10 1709 and earlier the device name was part of the telemetry data which is uploaded to Windows Analytics. From Windows 10 1803 devices names are not part of the telemetry data by default. The result is that the device name will be cleared as soon as the device is upgraded to Windows 10 1803. If you have queries based on device names this could lead to failing queries. In this blogpost I want to share a solution for this issue.
Continue reading
Intune: How to Enable Windows Hello for Business?
StandardThe last couple of months it was a bit quiet on my blog. This had to do with some new project assignments and I had some presentations to prepare for WMUG and ExpertsLive. Now those events are done I’ve some time to write blogposts. Last week I was involved in a question to enable Windows Hello for Business for a group of users instead of all users. Within Intune you can configure Windows Hello for Business for all users and to configure it for a group of users an additional policy is needed. In this blogpost I want to explain what is needed to configure this scenario.
Continue reading
2018-2019 MVP Award
Standard
On the 1st of July I received an awesome email. Microsoft presented me my third MVP award in the category: Enterprise Mobility. I’m really proud and honored that my contributions are rewarded with a MVP Award. I will continue sharing my knowledge by presenting on events and blogging on this blog. The focus will remain the same: Intune, System Center Configuration Manager and Windows 10.
Many thanks to Microsoft and you as a reader of my blog!
Windows 10 AlwaysOn Conditional Access Connection Fix – Part 2
StandardThe last couple of months I worked together with Microsoft on protecting the Windows 10 AlwaysOn VPN connection with AzureAD Conditional Access. As I’ve explained in this blogpost I found a strange issue where a user was able to connect without having being compliant to the Conditional Access request. I described that in this blogpost. After publishing that blogpost Microsoft came back to me that even that configuration is not the ‘total’ solution. The reason is that the VPN backend (RAS or NPS) should enforce the use of the AzureAD Conditional Access certificate. In this blogpost I will explain the steps needed to get this configured.
Continue reading
Join me at the Tech Summit AMSTERDAM Next Week!
StandardNext week I will be speaking on the Microsoft Tech Summit which takes place in the Amsterdam RAI. On Wednesday the 28th I will be speaking about ‘Protect your Windows 10 VPN solution with AzureAD Conditional Access’. Beside my own session I will also take part in the Microsoft 365 Keynote where we will share our KPN Microsoft 365 Migration experiences. At the end of the day I will also be present on the ‘Ask-the-Experts’ session. On Thursday I will also be at the Tech Summit but just as an attendee 
. I hope to see you at my session in the The Hub Theater.
Session Abstract:
In this demo-rich session I will discuss the Windows 10 AlwaysOn VPN solution. Beside the solution I will also show how we can publish the VPN through Microsoft Intune to our Windows 10 workstations and how we can protect the AlwaysOn VPN with AzureAD Conditional Access. Come to this session if you want to learn more about the AlwaysOn VPN and how to protect it with AzureAD Conditional Access.
Updated Bitlocker Experience with Windows 10 Insider and Intune
StandardThis blogpost describes the current Bitlocker experience on Windows 10 1709 and the experience with the Windows 10 1803 Insider Build release (Build number: 17101 and 17107). In this blogpost I’m using Microsoft Intune to configure the Bitlocker settings on the client. Within Microsoft Intune a setting is added to improve the Bitlocker experience. Since this setting only has a different behavior on Windows 10 1803 Insider builds don’t expect any improvements on Windows 10 1709. To be complete in this post I will also describe the experience with Windows 10 1709.
This blog post uses the AllowWarningForOtherDiskEncryption setting of the Bitlocker configuration service provider (CSP), to silently enable Bitlocker on Windows 10 1803 devices. Windows 10 1803 is currently available as Insider Preview build.
Continue reading
Collect and report on custom data with Intune
StandardThis weeks blogpost is about collecting ‘custom’ data which is not inventoried by Intune or Windows Analytics in a Windows 10 Modern Management scenario. In a modern management scenario data about the device like Device Model, Installed Applications, Windows Updates Compliance are collected by either Microsoft Intune or Windows Analytics. But at this moment there are some ‘gaps’ when looking to which data is collected and which not, examples are BIOS information and Office365 Pro-Plus deployment information. In this blogpost I’m describing a solution which you can use to collect additional data and create reports based on the collected data.
Continue reading