A while back I investigate if there was any possibility to lock down a Windows 10 or 11 device that gets provisioned with Autopilot and enrolled in to Azure AD and Intune to only allow the user who enrolled the device to be able to logon to that specific machine.
If you have been working with OEMConfig in Intune for Samsung devices you might have seen that there are some specific policies that says “Premium Features” on them when looking through the list of settings. https://www.samsungknox.com/en/solutions/it-solutions/knox-platform-for-enterprise How to claim your 2 year free license Go to https://www.samsungknox.com/ and login if
As an IT Admin you are probably familiar with the different processes and tools to manage updates for your Windows devices and servers in one form or fashion. For our Windows environment we have options like WSUS , ConfigMgr and Windows update for business if we want to have some
Intune and Microsoft Endpoint Manager administrators overview of Azure AD Dynamic queries.
IMPORTANT NOTICE. A new updated article on this topic has been published here: https://timmyit.com/2023/10/09/get-all-assigned-intune-policies-and-apps-from-a-microsoft-entra-group/ The new article covers using the new Microsoft.Graph Powershell SDK instead of the old Intune Powershell SDK that has not been updated since 2019. I recommend you take a look at the newer article. During MMS