Disabling Windows Copilot on Windows Insider devices

Categories: TechnologyTags: · · · · · · · Leave a comment

If you’re like me, you run Windows Insider for Business in your org (There are many benefits to this and I’m planning a blog series on how I do this soon), you may have noticed Windows Copilot appearing.  While it pains me to write this blog, I do recognise that there are companies out there that are not yet in a position to enable Windows Copilot – even on Insider builds. If you find you are not quite ready to use Windows Copilot in your environment, you can disable it. With Intune, you will need to use the WindowsAI Configuration…

Bing Chat Enterprise and the Microsoft Edge Sidebar

Categories: TechnologyTags: · · · · Leave a comment

The age of AI is upon us, but as the saying goes, “With great power, comes great responsibility” Talking with my peers, I’m aware that many companies have blocked access to AI such as ChatGPT, but that can only be efficient for so long, and folks will still ask for (and eventually require) access. Microsoft recently went into preview with Bing Chat Enterprise, which is being promoted as “Your AI-powered chat with commercial data protection” and to use it you’re going to require a specific license (Microsoft 365 E3, E5, Business Standard, and Business Premium licenses) Bing Chat Enterprise is…

Windows Update for Business – A (Potential) Feature Update bug…

Categories: TechnologyTags: · · · · Leave a comment

In my last company-wide deployment of the Windows 10/11 22H2 feature update, I had this strange issue where a very small percentage of devices failed to upgrade. I recently wrote about how I do Feature Upgrades at my organisation and in that post, I describe how I use dynamic groups to ensure that all of my devices have the required feature update profile assigned. However a very small number of devices persisted in not having the recent Feature Upgrade offered to them. I spent many hours looking at data in the Windows Update for Business Workbook in Azure monitoring as…

Intune Proactive Remediation

Categories: TechnologyTags: · · · · · Leave a comment

If Intune filters was my favourite new Intune feature of 2021, Proactive Remediations is fast becoming my favourite for 2022. I’m starting to use this feature a lot at work and its starting to replace the Win32 app method to deploy a configuration as well ensuring it remains set. I’ve also previously blogged about how to remove the “Teams Personal” app that keeps returning in Windows 11, especially after patching/feature updating (It’s a lot more noticeable on the Windows Insider builds). So, after using Intune PowerShell and then switching to Win32 app, I find that it’s third time lucky with…

How I Feature Update Windows

Categories: TechnologyTags: · · · · · · Leave a comment

It’s been a few weeks since 22H2 has been released for both Windows 10 and Window 11, and after validation by both my Windows Insiders and my early adopters, I am ready to deploy this Feature Update to all of my managed Windows devices at work. I thought it could be useful to blog about how I do Feature Updates using Intune and Windows Update for Business Deployment Services taking advantage of the Intelligent Rollout feature. I can cover how I set up my Windows Insider for Business rings in a later blog post if that also interests anyone. For…

Configuring IE Mode with Cloud Site List Management

Categories: TechnologyTags: · · · · Leave a comment

Recently I was required to configure IE Mode for a project.  In my org, Internet Explorer 11 has been removed from our Windows Endpoints for about a year to 18 months now, so the only option to run “legacy” web app on Microsoft Edge is IE mode. Turns out it wasn’t needed in the end, but I picked up a new way to do this compared to how I’ve done it previously.  In the past I’ve used the Enterprise site mode list manager app to generate an XML, then uploaded it to a publicly available storage (e.g. Azure Blob Storage),…

Configure Google Chrome on macOS with Intune

Categories: TechnologyTags: · · · · Leave a comment

A while ago, I blogged about deploying DMG type of apps to macOS devices using Intune.  In this blog, I used Google Chrome as an example. Deploying the app is one thing, but in an Enterprise environment, I also want to be able to configure the browser to enforce a few settings (also aligning the browser configuration with what is configured with Google Chrome on Windows devices is a good thing for a consistent employee experience) This can be achieved with the macOS Intune configuration profile Property Lists First of all, you should give the documentation on docs a quick…

The new Quick Assist…  Not quite ready for Prime Time

Categories: TechnologyTags: · · · · · Leave a comment

So this weekend, I sat down knowing I needed to blog. It has been almost EIGHT weeks since I’ve written one, and that’s really too long. I have a few draft blogs which are starting to take the form of a series that my friend MVP Darrell Webster helped name “How I stay Intune”, but the last few months have been very busy (Work, home life – I’m a 100% single parent) and burn out is becoming a very real reality for me right now. So after seeing that Microsoft had released a new version of Quick Assist, and reading…

Ensuring the Device Name for Windows Intune managed devices is set to Serial Number

Categories: TechnologyTags: · · · · · Leave a comment

A while ago, I wrote a blog around Restricting the Local Admin group with Intune.  In that blog, I mentioned some scenarios where certain Windows Autopilot configurations may not have worked correctly for one reason or another.  That blog focused on the Local Admins group, but I did note the device Computer Name, so I thought I would follow up with a blog on this. I have mentioned in a past blog that I am a fan of using the serial number of a device as its Device Name in Intune.  The Windows Autopilot deployment Profile is a great and simple…

Deploy DMG app to Intune managed macOS devices

Categories: TechnologyTags: · · · · Leave a comment

Earlier this year, Microsoft released the public preview of Intune DMG deployments to managed macOS devices. This has been very timly with the work I’m currently doing with macOS devices. The documentation sets out how to do this, but I thought I would document my experiences with this type of deployment. The first thing I gathered is the detection method.  This can be done in multiple ways. If you have a macOS device, start by mounting the DMG image file On the app, I right click and selected Show Package Contents In the Contents folder, there should be an info.plist…