Local Administrator on MacOS?

When onboarding macOS with Apple Business Manager and Intune, there are a few important security considerations to keep in mind. Specifically, it’s crucial to control the level of access each user has on a device, and this includes the potential issue of local users obtaining administrator rights. When […]

What should we choose – W365 or AVD?

As an IT consultant, I’ve had the privilege to work with various clients, each with their unique set of challenges and requirements. This diverse experience has allowed me to compare and contrast Microsoft’s Windows 365 and Azure Virtual Desktop (AVD) in real-world scenarios. I’ve witnessed these technologies in […]

Security Baseline as Settings Catalog

Have you ever tried using the Security Baseline feature in Intune’s Endpoint Security to enhance your device’s security? If you have, but also encountered the frustration of finding certain settings missing – so you still need to create a Configuration Profile. Here is a tip that is quit […]

Enroll Windows 365 Business in 3 steps

Windows 365 Business and Enterprise has been around for the last year and the companies begin to see all the advantages to easy deploy a Windows pc. In this post I want to show how easy it is to deploy Windows 365 Business for a user. Are you […]

Proactive Remediations – MS Defender

Microsoft Defender on each client is a high important tool as it both are an Antivirus tool – but also deliver info to Defender for Endpoint as a sensor. Microsoft developed Tamper Protection that should make sure evil software/process not should be able to disable Microsoft Defender. But […]

AVD tip! – Logon script with RemoteApp

When you setup RemoteApp in Azure Virtual Desktop – Microsoft has designed it to minimize the load of: The Run registry entry The RunOnce registry entry The startup applications Simply to make a better and faster experience on the logon phase.Read more about this.The 2 workarounds Microsoft suggested […]

Admin by Request: LAPS for Autopilot device

I have over time been more and more impressed with Fasttrack: Admin by Request.How they solve a nightmare for IT admins. It can be hard to deliver all software for the endpoints – and some software is so special and maybe need to be installed in a various […]

Create bootable USB w. Windows 11 incl. Autopilot JSON file

This guide will go through all steps to create a bootable USB with Windows 11 – that includes the Autopilot profile for your Microsoft Endpoint Manager tenant. This USB can be used to onboard all computer – just after reinstall. First you need Windows 11 ISO image – […]