MDM on wporter.org

Microsoft MD-102 (Endpoint Administrator): Pass!

Sat, 23 Aug 2025 12:00:00 +0000

My thoughts on the certification

I passed the Intune test!

It’s been about a year since I started working at a shop that uses Intune (a bit - for iOS and Macs), so on a whim I decided I should get the cert. It took me about three weekends, plus a few hours of study during the week.

I had a decent bit of experience with Intune, but don’t use it daily.

Configuring silent OneDrive sign-in and Known Folders sync

Sun, 17 Aug 2025 17:00:00 +0000

MS Learn link here.

You can do this via Group Policy or Intune, depending on how your environment is configured, but the policies are the same.

Deploying silent OneDrive sync with Intune

For successful, silent sync, you MUST configure these three policies:

Silently move known folders to OneDrive
Silently sign users in to OneDrive with their Windows credentials
Enable Files on Demand

Here is an example of this minimal configuration in Intune. Choose just these settings from the Settings Catalog and enable them:

Onboarding Microsoft Defender for Endpoint with Intune

Sun, 17 Aug 2025 16:45:00 +0000

Licensing Prerequisites

Your tenant requires a license for Defender for Endpoint - either a Microsoft Defender for Endpoint P1 or P2, Microsoft Defender for Server, or Microsoft Defender for Business (“P1.5” edition for SMBs included with Microsoft 365 Business Premium).

Without one of these licenses, you will not see the Assets > Devices tab or the Settings > Endpoints menu, and cannot onboard devices to MDE.

It may take up to 24 hours for your Defender tenant to be provisioned once you have purchased and assigned the required licensing. Your admin account does not need to be licensed.

Microsoft Intune Assignment Filters

Sun, 17 Aug 2025 16:30:00 +0000

For info on designing filters for performance and manageability, see MS docs.

Device assignment filters allow you to select what devices a policy assigned to users will apply to, and let you select what devices in a device group are eligible for a policy.

App assignment filters allow you to select what devices specific app protection policies apply to.

They’re both useful tools for scoping down your Intune configuration policies. Let’s have a look at them!

Deploying Windows LAPS for client PCs with Microsoft Intune

Sat, 09 Aug 2025 16:35:00 +0000

Introduction

The Windows Local Administrator Password Solution (LAPS) allows administrators to configure a randomized, automatically rotated administrative password for Windows devices. This is a distinct feature from macOS LAPS.

Windows LAPS, integrated with Entra ID, replaces the older ’legacy’ Microsoft LAPS solution as of Windows 11 23H2. Microsoft is no longer updating ’legacy’ LAPS and its .msi package will be blocked from installing on Windows 11 24H2, Server 2025, and newer OSes.