Category: Intune
-
PowerShell DCR Log Analytics: Part 2.7 – Deploying Data Collection Scripts
The last several parts of this series have been rather large so, I am going to keep this one nice and short. This will cover only the deployment of the script via Proactive Remediations as well as some simple queries to watch as new devices check in. Discussion regarding how the script works and how…
-
PowerShell DCR Log Analytics: Part 2.5 – Sample Script, DCR & Table Creation, DCR Permission, First Ingestion
Yes, this part is going to cover a lot. But, by the end of this you will actually have sample data being ingested to Log Analytics! Unfortunately, this process is one of those things that makes a lot more sense to do and then explain. This information is all based on this article from Microsoft, and…
-
PowerShell DCR Log Analytics: Part 2.4 – Function App
Welcome to part four, this is where things start to get serious and lengthy. In this section we will be going over the deployment of the Function App. I am covering this early on because it is a universal component which will/can be used by any data collection script. By the end of this article, you will…
-
PowerShell DCR Log Analytics: Part 2.1 – Overview
Welcome! This is part one of the second generation of the Log Analytics learning series. Here we will cover… Why a Second Generation? To those familiar with the first generation of this series, you may be wondering why I would go back and re-do so much documentation. Well, in short, a lot has changed. Simply…
-
Automating the Conversion of Intune Group Tags for Windows 11 Upgrades Part 3: Client Side Script
Following my last post, this part will cover the deployment of the client-side script as well as detail how it works and how you can adjust it. I have written about the topic of deploying scripts via proactive remediations a few times now such as for the Log Analytics side. The deployment itself will be…
-
Automating the Conversion of Intune Group Tags for Windows 11 Upgrades Part 2: Function App
Following my last post, this part will cover the deployment of the Function App as well as gathering of the values from the Function App we will need for the next part. Update:Following my recent post on Security Updates for HTTP(s) Function Apps, I have started off by updating the Windows 11 Group Tag Conversion (GTC)…
-
Automating the Conversion of Intune Group Tags for Windows 11 Upgrades Part 1: Overview
I have a fun one to talk about today. This is the first part in a three-part series which covers the use of PowerShell and an Azure Function App to automatically change over Windows 11 devices to a new group tag post upgrading from Windows 10. This is something I have had cooking for a…
-
Security Update for HTTP(s) Function Apps
Howdy folks! I have good news! Great news actually, as I think this will let me start to remove the annoying red security warnings on all my HTTP function apps. Thanks to the work of the @NickolajA of the MSEndpointMGR team, there is a new authentication method for HTTP Functions which is more secure than…
-
Intune Win32 Apps: Running them at System Startup
Here is a scenario: You might need to update an app, say a very critical app like a VPN application, and make sure you do it at a time that won’t interrupt the user. Unfortunately, Intune is not really capable of scheduling app deployments. You won’t be able to say “install this app only between…
-
Murdering Windows 11 Performance by Disabling Windows Defender – What Not to Do.
This is the story of how a rather innocent seeming policy, a policy which many other blogs “suggest” (to one degree or another), can absolutely destroy Windows 11 performance. This issue can slow the machine down by an order of magnitude – under the right conditions. This issue took me the better part of a…
Azure to the Max 