Get all assigned Intune policies and apps from a Microsoft Entra group

Almost 4 years ago, back in 2019 I wrote an article on how to Get all assigned Intune policies and apps from an Azure AD group with the help of the Intune powershell SDK. https://timmyit.com/2019/12/04/get-all-assigned-intune-policies-and-apps-per-azure-ad-group/ This has become one of the most popular articles on my site and the reason

Intune – error when creating deployment for Zebra updates

Few months ago I wrote a blog post on how to manage updates for Zebra devices with Intune and new FOTA (Firmware over the air) capabilities we got in Intune. You can find that post here: Related to this I want to just showcase an issue I recently saw and

Android enrollment stuck at “Your work checklist” in Intune

This will be a short article on something that took me a while to figure out and hopefully helps anyone elserunning in to similar issues. To explain the problem, when you are enrolling your Android devices (in this case Corporate Owned Personally Enabled – COPE ) you get stuck on

Intune – Rename devices with Powershell and Microsoft.Graph module

This is an update to an older article I wrote back in 2019 on how to Rename a device with Powershell and Graph ( https://timmyit.com/2019/05/21/intune-rename-ios-devices-with-intune-powershell-sdk/ ). Whats changed since 2019 is the powershell module and the deprecation of the AzureAD module that was used for authentication. From now on we

Update to Filters in Intune 2302

About 2 weeks ago Microsoft deployed the service release 2302 for Intune and with that there was a great UI update for Filters which has been a happy surprise. Filters was first released 2 years ago and have since then got a few updates a long the way. If you

Restrict Windows 10 and Windows 11 logon to the current user or user who enrolled the device during Autopilot

A while back I investigate if there was any possibility to lock down a Windows 10 or 11 device that gets provisioned with Autopilot and enrolled in to Azure AD and Intune to only allow the user who enrolled the device to be able to logon to that specific machine.