Ben Whitmore | MVP

A beginners guide to Microsoft Graph API rate limiting in Intune - MSEndpointMgr Learn how to handle HTTP 429 rate limiting when working with Microsoft Graph API. Understand Retry-After, throttling limits, and exponential backoff for resilient PowerShell automation.

Tired of your PowerShell scripts crashing when pulling Intune reports? 😩
Learn how to handle Microsoft Graph rate limits like a pro.
🛑 Understand global vs Intune limits
🚦 Respect Retry-After
⏱️ Use exponential backoff
👉 msendpointmgr.com/2025/11/08/g...

#PowerShell #Intune #GraphAPI

Most patch Windows. Few patch browsers.
Extensions = mini-apps with major risk.

🕵️ Audit permissions
⚡ Classify risk
🛡️ Block/allow with Intune

Stop “free coupon finders” from finding your data.
Take back control today! #Intune

msendpointmgr.com/2025/10/04/t...

Landing page of site with text: Clean Slate for Your Microsoft Graph PowerShell Environment Completely uninstalls and removes all Microsoft Graph PowerShell modules from your system. Say goodbye to dependency conflicts and multiple authentication prompts.

🚀 Tired of Microsoft Graph PowerShell module headaches? 🤯

Say goodbye to dependency conflicts & endless auth prompts! 👋

I built Uninstall-Graph to completely remove all MS Graph PowerShell modules, giving you a clean slate. 🧼✨

Get it now: uninstall-graph.meri...

Configuring Supersedence and Dependencies in ConfigMgr, WSUS and Intune Webinar | Patch My PC Join us on March 26 to dive into supersedence and dependencies in ConfigMgr, WSUS, and Intune. Gain practical insights on configuring app updates, managing dependencies, and optimizing deployments for...

Struggling with app updates? We’ve got you covered! Join our upcoming webinar to master supersedence & dependencies in #ConfigMgr, #WSUS, and #Intune so your updates run smoothly every time! Let’s make patching easier 💪 Reserve your spot ⬇️ #PatchMyPC patchmypc.com/supersedence...

Understanding OAuth: Coding the authentication flow yourself vs using an SDK - MSEndpointMgr Dive into Microsoft Graph authentication with PowerShell. In this blog we explore OAuth flows, PKCE security, and token handling. Learn how to build a secure auth flow from scratch and why the SDK mig...

I just published a deep dive on OAuth flows, from coding it yourself vs. using the Graph SDK. Do you know why PKCE is crucial? 🔐

#Intune admins, sometimes understanding stuff means playing with code you don't have to right?

msendpointmgr.com/2025/02/23/u...

#EntraID #MicrosoftGraph

A Mini Dive into the Microsoft Entra PowerShell Module: An Intune Administrator's Perspective - MSEndpointMgr In this post, we'll analyse the Entra PowerShell module's authentication implementation and discuss whether it's necessary for your Intune automation needs if you're already using the Microsoft.Graph....

🔍 New Blog: "Diving into the Microsoft Entra PowerShell Module"

Learn why #Intune admins might choose to skip it entirely.

#Intune #Entra #MicrosoftGraph

msendpointmgr.com/2025/02/15/a...

Ever wondered how the Company Portal really works under the hood?
🌉 The secret lies in Jeff Bridges! (Yes, really!)
🧵 I dug deep, finding one answer is🧊 Igloo Water

🔎 Full deep dive: msendpointmgr.com/2025/02/09/c...
#Intune #ConfigMgr

Struggling with Graph API calls to the Intune Reporting Endpoint or jumping through filters of doom in the Intune Admin Center?

✅This script is for you!

github.com/byteben/MEM/...

#Intune #PowerShell #MicrosoftGraph #EndpointManagement #Automation #ITAdmins

Engineers @byteben.bsky.social @mauricedaly.com @call4cloud.nl will be hosting our session 🙌 Don't miss it!

Deep Diving Microsoft Graph SDK Authentication Methods - MSEndpointMgr Learn how to authenticate to Microsoft Graph using the Microsoft Graph SDK for secure automation workflows.

Deep Dive: Microsoft Graph SDK Authentication Methods

🔑 Client secrets vs certificates
🏛️ Azure Key Vault
🤖 Automation with PowerShell
🌐 Cross-tenant & multi-cloud tips
🧀 Avoiding security "Swiss cheese"

msendpointmgr.com/2025/01/12/d...

#MicrosoftGraph #Intune #Automation

a man is looking through a glass door with an open sign on it ALT: a man is looking through a glass door with an open sign on it

😍

This is cool! 🎉 Did you know Microsoft Graph exposes Base64-encoded device data via the alternativeSecurityIds property? You can decode it to compute and verify a device's public key for secure validation. 🔐 #MicrosoftGraph #EntraID

Unpacking the Microsoft Intune MDM and Entra ID Certificate - MSEndpointMgr In this post we take a small deep-dive into the Intune MDM certificate and talk about OID's and how they can be leveraged to elevate your trust in the device identity.

🚀 Post Updated!
Are you looking for a detailed and systematic examination of cert attributes, extensions, and associated metadata to validate the authenticity of your Entra/Intune devices? 🔐

#Intune #EntraID

msendpointmgr.com/2024/10/12/u...

Simplifying Intune Automation with Microsoft Graph SDK: Exploring Authentication Options YouTube video by MSEndpointMgr - Jungling the Cloud

🎄 Feeling festive? 🎅 Dive into our latest video @msendpointmgr.bsky.social with @mardahl.bsky.social and I where we unwrap the magic of the Graph SDK auth for Intune automation!

🔑 Authenticate securely.
📜 Use app registrations, delegated permissions, & cert-based auth.

youtu.be/ExGEvkYz45M?...

Fine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector - MSEndpointMgr Learn how to fine-tune your data collection for Azure Sentinel when using Intune while carefully weighing the impact on security and compliance.

Warning - click bait heading here at its finest but also worth considering if you use Sentinel and Intune.

"Fine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector" - MSEndpointMgr

msendpointmgr.com/2024/12/24/f...

a woman talking on a cell phone with the words " opportunities like this " above her ALT: a woman talking on a cell phone with the words " opportunities like this " above her

🙌🏻

We're looking to hire another Purview expert for our team! :)

$150-$200K base salary DOE
32 hour work weeks
100% remote work from home
100% employee health coverage
3% 401k (no contribution required)

If you love learning and helping people, check it out:
patriotconsultingtech.com/work-for-pat...

Sterling work 🍺🍺

2Pint Software - DeployR - Modern operating system deployment 2Pint Software specializes in advanced IT infrastructure solutions for large enterprises.

It exists.
2pintsoftware.com/products/dep...

a cartoon of a woman with blue hair covering her face ALT: a cartoon of a woman with blue hair covering her face

Haha

The user isn’t using a privileged account?

Do you have 2016 DCs or higher?

Windows Hello for Business on-premises certificate trust deployment guide Learn how to deploy Windows Hello for Business in an on-premises, certificate trust scenario.

And this is all in place and correct for cert requirements?

learn.microsoft.com/en-us/window...

Do you have KDCs (DCs) correctly configured in the AD site the user signs into?

Haha. The only thing non stick about non stick pans is the vendors promise that it’s non stick 😂

Playing with timestamping today. It’s always been a thing of the dark arts but now it’s much clearer to me. It’s also useful to know which URLs are being used during your cryptographic operations.

💭 Thinking about removing built-in #Windows Store #apps after #WindowsAutopilot?

This blog will discuss the risks, rewards, and best practices for keeping your deployments clean and problem-free.

patchmypc.com/uninstall-bu...

#Intune #MSIntune #patchmypc

I started asking ChatGPT for JavaScript help and…our relationship changed. I could feel the personality shift in its responses 😂

a close up of a monster with the word friend written on it ALT: a close up of a monster with the word friend written on it

Anybody else find themselves being polite to ChatGPT incase it becomes sentient one day and remembers who you are?

If anyone is still struggling with update detection applicability after MS decided to remove DisplayName reg value for Edge WebView2 to hide it in ARP…these PR scripts will restore the reg values.

github.com/PatchMyPCTea...

Thankfully MS have now backtracked on doing that in the recent version.