Problem Statement We are about to new on Intune, We want to know if there is any Intune configuration policy that can disable USB drive if that drive does not use BitLocker encryption. All computers are using Windows 10 Professional. Can you please help me out in this case because we have been finding such […]
In this blogpost I want show you how to use the Endpoint Protection (Bitlocker) policy within Intune to configure Bitlocker on Windows 10. With Endpoint Protection policies you can configure and enforce Bitlocker on your Windows 10 devices. With the old policies we could already enforce Bitlocker but not enforce the settings of Bitlocker. With […]
Today a short blog about a new setting which will be introduced in the next major release of Windows 10, version 1809 or 1810, which is in preview at the moment of writing. This setting allows you to specify the preferred Azure AD Domain using a new Policy CSP setting under Authentication; PreferredAadTenantDomainName. For example […]
UPDATE: Enterprise Data Protection is available again from Windows 10 Version 1511 rs1 builds if you want to test Enterprise Data Protection! UPDATE: Stay on Windows 10 Version 1511 th2 build 10576 if you want to test Enterprise Data Protection! In this blog I’ll cover a brand new Windows 10 feature, Enterprise Data Protection (EDP). […]
Fairly recently, I had a conversation with someone who lamented that Microsoft isn’t a security company and often they need to look to third-party products to fill the gaps. It is fair to say that’s a pretty common and reasonable view given the history of Microsoft in the security arena. Things have of course […]
In Office 365 & Microsoft Exchange, by default, your resource mailbox won’t show your Meeting Subject. Instead, it replaces this with your organizer’s name. This occurs for privacy reasons, but it’s only the default. Most organizations opt to see meeting subjects instead. Consider the following: A Resource mailbox is configured to AutoAccept in an Microsoft Exchange Server or Office 365 environment. You send a […]
Windows 10 includes a huge number of security settings that can be applied to protect your computers from ransomware, viruses, and other malware. Because Microsoft makes the deployment of these settings available through many different sources and because every business environment is different, these settings are not configured by default. There are many ways to […]
This week is all about a recently introduced profile in Microsoft Intune to configure shared PC mode on a Windows 10 device. That profile is named Shared multi-user device profile. Something similar has been available already for a while via Intune for Education. The main use case for this profile are school devices that are shared between multiple […]