Passwordless Authentication, Part 2: Temporary Access Pass, Security Key enrollment & Windows-Sign in

In my previous blogpost I demonstrated a basic enrollment of Passwordless authentication into Azure AD with a FIDO2 Security Key. Generally speaking, common use cases for FIDO2 certified hardware keys are as follows: Strong AuthenticationSecuring Privileged AccountsPasswordless AuthenticationShared DevicesPersonal Security…

Getting started with Intune App Protection and App Data Protection configuration framework

In this blog post I will go through the basics of App Protection Policies in Intune, the App Data Protection configuration framework and guide you in how to import related data-protection templates for Intune App Protection into your Intune tenant.…

Attack Surface Reduction

In this blog post I will go through some of the different configuration options available for Attack Surface Reduction using Endpoint Manager (Intune), Defender for Endpoint and analyzing the rules locally using Powershell. Short introductionAttack Surface Reduction Rules in Windows…

MDT – Client failed TFTP Download

Client fails to download TFTP, Event 4101 (MDT, WDS, DHCP and IP-Helper) Operating systems affected: Windows Server 2016 (Monthly CU 2019/03 KB: KB4489889) and Windows Server 2019 (Monthly CU 2019/04 KB4493509) Solution: uncheck the setting "Enable Variable Window Extension" on…

Install the Intune Powershell Module

The Intune Powershell Module is a great addition to the currentDevice Management-portal when it comes to Intune management. Note: An account with the role Global Administrator is required for the authentication and the consent of this module for your tenant.…