Microsoft Workplace Community Blog

Windows Defender Application control - Part 2

In part 1 of my blog, I explained step by step how to get started with application control in a simple way. In this part of my blog, I'm going to discuss how to use the company portal in Intune as a managed installer. The benefit of this is that you don't have to adjust the application control policies every time. There is one limitation though, th...

Continue reading
  10889 Hits

Windows Defender Application control - Part 1

In this blog, I will explain how to implement Windows Defender Application control (WDAC) in Intune. Intune has two different ways to implement WDAC. Intune (limited built-in policies or custom policy deployment via OMA-URI). This blog will only cover the OMA-URI deployment because the built-in has no customization options and this makes the circle...

Continue reading
  11785 Hits

Setup Windows Autopilot and add existing devices


Windows Autopilot is Microsoft's modern solution that allows you to customize the Out-Of-Box Experience (OOBE) to your needs. With Autopilot you can ensure that users no longer receive 10 different screens before they are actually logged into the device. The only thing the user has to do is connect to the Wi-Fi and after connecting a custom company...

Continue reading
  16768 Hits

Adobe reader DC - Windows app (Win32)

Intune is the new modern way for managing Windows 10 devices. This includes delivering applications to users. Intune offers a wide range of possibilities for deploying applications. It is possible to deploy Windows 10 store apps, MSI files and EXE files. For .EXE files some additional actions have to be performed since .EXE files cannot be uploaded...

Continue reading
  14045 Hits

Default file associations Intune

In intune, it is possible to associate protocols and file types with specific programs. In the on-premises environment, this was already easy to accomplish by creating a GPO. At this moment it is also possible to do this with Intune, although the actions are somewhat different than we are used to. ApplicationMicrosoft endpoint manager (Intune)Webli...

Continue reading
  20736 Hits

Unpin Microsoft store from the taskbar

How to unpin the Microsoft store from the taskbar in Windows 10 with Intune? At the time of writing, there is no option in Intune to easily remove the Microsoft store from the Taskbar.  You can prepare a start menu and taskbar using XML, but the disadvantage of this is that the user can no longer make changes. If there are any develo...

Continue reading
  10692 Hits

Recovering SCCM Administrator Access


In my test environment, I deleted the account I installed SCCM with. Unfortunately, I had not given any other account admin rights and therefore I had locked myself out of SCCM. However, in the SQL database you can easily give another account the rights to get back into SCCM. It can happen that an administrator leaves a company and his account...

Continue reading
  4838 Hits

Block applications with Indicators


Microsoft Defender for Endpoint offers several options to block applications; you have the following options, file hashes, IP addresses, URLs/Domains and Certificates. These settings can be found at the following location in the Microsoft Defender for endpoint security portal; navigate to settings, Endpoints and under the Rules heading you wil...

Continue reading
  11926 Hits