Andrew Johnson

Tired of manually tracking Entra ID user registrations?
Automate it with Microsoft Graph + Power BI, schedule reports, filter by status & spot risks fast. Full guide here: www.systemcenterdudes.com/automating-e...

#MSIntune #EntraID #Windows #PowerBI #MSGraph

Simon does The Silent Windows Autopatch Killer Silent Windows Autopatch killer strikes again. Join me for a drive through modern Intune tools and Copilot to fix the legacy settings that kep coming back.

🚨 New Blog Post! 🚨
Legacy registry settings silently blocked Windows Autopatch onboarding.
I break down:
- Root cause analysis
- Intune remediation scripting
- Ghost hunting with Security Copilot
- Lessons for IT pros

skotheimsvik.no/the-silent-w...

#Intune #WindowsAutopatch #SecurityCopilot

Public/Intune at main · AllwaysHyPe/Public Repo of PowerShell for general device management in Intune, some Azure, Entra ID, and other random tasks - AllwaysHyPe/Public

Digging through #MSGraph docs to find an #Intune endpoint can be a pain…

I’m working on something bigger, but sharing these 3 #PowerShell functions to make life easier:
1️⃣ Uses Microsoft.Graph.Authentication
2️⃣ See success % + device counts for policy

github.com/AllwaysHyPe/...

We are now past the 60 day mark for MMS Music City Edition. Registrations are filling up and time is ticking fast!🎵🎷🎸🎶

Register Today: mmsmoa.com/mms2025music
October 12-15, 2025

#MMSMusicCity #MSIntune #ConfigMgr #Windows #ITpros #MMSMOA

Wait…DevOps can apply to Sys Admin work? Let’s see what @allwayshype.com and @mattzaske.com have to say….

Migrate applications away from secret-based authentication - Microsoft Entra ID Migrate applications away from secret-based authentication to improve security and user experience.

If you are still using client secrets for applications, there is a shiny new doc you should read through and test out ❤️‍🔥

The TL;DR - use Managed Identities or Federated Credentials whenever possible. If you can't, use certificates, limit secret use.

learn.microsoft.com/...

I had to be in appropriate costume for the happy hour session part one of Home Assistant yesterday. We must have been directly under one of the room lights when @andrewj.net took the picture because I look like a cardboard cutout! 🤪 #mmsmoa

Doing something a little unorthodox this morning. The great @jarwidmark.bsky.social joins us remotely with the equally legendary @andrewj.net! #MMSMOA

Gonna talk about more Graph coolness with @andrewj.net and @jankeskanke.com ... two of the best looking 1 p.m. speakers today! #mmsmoa

Graph introduction at #MMSMOA by @jankeskanke.com and @andrewj.net

I might have had a spit take with my margarita from the jokes and memes of @andrewj.net and @z-nerd.com just now! 🤪 Talking lab setups at happy hour with @mmsmoa.bsky.social

Upcoming network requirement changes - yes, including Intune – mAnimA.de Intune network requirements are changing, if you're controlling outgoing traffic flow, you might want to read this!

#Intune #Azure #DevOps
In case you hadn't noticed: There are still ongoing changes to all azureedge.net endpoints. If you filter outgoing traffic, please make sure you adjust your network accordingly.
manima.de/2025/04/upco...

The "Windows Server Hyper-V architecture, features, GPUs, and more!" Windows Server Summit Presentation from @wsvguy.bsky.social has some nice slides

VMWP, WMMS, WMI
VSC, VSP, VMBus
VID, WinHV
PF, VF, SR-IOV

Now you can sound like a Hyper-V nerd too! 😎

techcommunity.microsoft.com/event/window...

Folks, I created these mindmaps to highlight the AMAZING ID Governance deployment guide that was just published by Microsoft.

You are going to want to bookmark this.

🧵👇

A man standing in front of a group of attendees doing a demo of various activities in the Microsoft Intune admin center.

Man @andrewj.net is killing it with demos and info at @tcsmug.bsky.social today! Boatloads of practical bits and pointers in managing access! 🍻

Updated Driver Automation Tool v8 MSI posted. #HP support added. #Lenovo to follow in the next few days then #Microsoft before adding in Intune functionality. github.com/maurice-daly... #ConfigMgr #Drivers

Optimizing Microsoft Teams Privacy Settings for End Users With Microsoft Intune Privacy is becoming increasingly important for companies and end users. Your end users might see more popups on their devices. However, as an IT administrator, you have the choice to configure those settings for your end users. Index Issue Solution Getting Microsoft Teams app info Creating the policy End user experience after the privacy policy applies Conclusion Issue: Some users experience Microsoft Teams keeps asking for permissions to access microphone and camera with a message like this. What can we as IT administrators do to help our end user with the best possible end user experience??

Optimizing Microsoft Teams Privacy Settings for End Users With Microsoft Intune

Privacy is becoming increasingly important for companies and end users. Your end users might see more popups on their devices. However, as an IT administrator, you have the choice to configure those settings for your…

PowerShell 1 liner to find OUs that match a given pattern - AD PS module not required

(New-Object System.DirectoryServices.DirectorySearcher "(&(objectClass=organizationalUnit)(ou=*Citrix*))").FindAll()

toolbox/Intune/Platform Scripts/Reset-WindowsUpdateSettings.ps1 at main · MHimken/toolbox This is my toolbox. Watch where you step. Contribute to MHimken/toolbox development by creating an account on GitHub.

New script just dropped! Ever get stuck on update policies when moving from #ConfigMgr or GPO to #Autopatch? Reset-WindowsUpdateSettings is for you!
It creates a backup of relevant keys from your registry, then deletes and resyncs them where applicable. github.com/MHimken/tool...

From OMA-DM to Declared Configuration: The Next Step in Windows Policy Enforcement - Just about the Modern Workplace But Windows policy enforcement is evolving. With the introduction of Microsoft Management Platform - Cloud (MMP-C) and Declared Configuration, the way devices

Windows Policy Management is Evolving.

Intune’s relied on scheduled sync, devices checked in, applied policies, and reported back.

With Declared Configuration, Windows devices don’t just receive policies.

We tell how Declared Configuration works an is a game changer

#Intune #MSIntune

Understanding OAuth: Coding the authentication flow yourself vs using an SDK - MSEndpointMgr Dive into Microsoft Graph authentication with PowerShell. In this blog we explore OAuth flows, PKCE security, and token handling. Learn how to build a secure auth flow from scratch and why the SDK mig...

I just published a deep dive on OAuth flows, from coding it yourself vs. using the Graph SDK. Do you know why PKCE is crucial? 🔐

#Intune admins, sometimes understanding stuff means playing with code you don't have to right?

msendpointmgr.com/2025/02/23/u...

#EntraID #MicrosoftGraph

I may regret doing this because I've already been pinged by recruiters within 5 minutes of posting on LinkedIn that I am open to (some) new work but I needed to get the word out - if you need PowerShell code reviews, optimisation, automation or EUC troubleshooting, health checks, etc please ping me.

🆕 Drivers inventory dashboard updated with:
✅ Optional drivers updates available for a device
✅ Devices count by optional update & model
✅ Possibility to filter on device class

#MEMPowered #MSIntune @harjit.bsky.social

Driver Automation Tool 8 BETA has a home now - github.com/maurice-daly.... The initial MSI has been uploaded, and updates will continue to be posted over the coming days / weeks. Note the limitations, I am adding functionality in sprints rather than a big release. #ConfigMgr

I published the first of several scripts for what I'm calling Operational Groups (stolen from System Center Dudes Operational Collections) :)

Goal is to maintain groups based on auth methods registered, MFA/passwordless, risk states, device details, etc

github.com/nathanmcn...

Windows at Microsoft Technical Takeoff 2025 - Windows IT Pro Blog Quickly find technical deep dives and demos to add to your calendar. Get the guidance and skills you need to deploy, manage, and support the latest features!

Check out Windows at Microsoft Technical Takeoff 2025, coming up March 3-6. Please share and spread the word.

aka.ms/WindowsAtTec...

#Windows #ITpros #TechTakeoff #Microsoft #MSIntune #Windows365 #Copilot

🆕 Drivers inventory dashboard updated with:
✅ New Windows Update tab
✅ Translates WU name to friendly name
✅ Devices count by WU package version and model
✅ Drivers installed on a device by Windows Update

#MEMPowered #MSIntune @harjit.bsky.social

www.systanddeploy.com/2023/07/driv...

Following up on a question from #ViaMonstraOfficeHours yesterday - confirming that I do see en-GB on the Windows 11, version 24H2 (updated Nov 2024) x64 English ISO downloaded from the Admin Center.

You’re always making me spend money