Removing the Windows 11 Xbox App with Intune

When managing Windows 10 devices, I use a handy script in Intune that removes a number of inbox apps that come built-in to Windows.  Recently l wrote about removing the Teams Personal app, but another app almost slipped past me. The Xbox app.  It had me a little bit confused as I thought my existing script to remove inbox apps covered all the Xbox apps.  However, it looks like there is a new Xbox app in Windows 11 To find this new Xbox app, I used the following command to get a list of all Appx packages installed. I was…

Removing Teams Chat from the taskbar with Intune

Windows 11 comes with a built-in version of Microsoft Teams.  I have written a blog detailing how to remove this with Intune, but there is also a Teams Chat icon that still remains pinned to the taskbar. Microsoft have released a CSP to allow the Chat icon on the taskbar to be configured I created the following Custom Configuration Profile in Intune Profile Name Win 11 – Custom – Policy CSP – Experience – ConfigureChatIcon Profile Description Disabled Teams Chat Icon OMA-URI Settings Name ConfigureChatIcon Description ConfigureChatIcon OMA-URI ./Device/Vendor/MSFT/Policy/Config/Experience/ConfigureChatIcon Data Type Integer Value 3 There options available for value are…

Removing the Built-in Microsoft Teams app with Intune

Update – 28 November 2022 – Check out this blog for a better way to remove the Windows 11 built in Teams app With Windows 11, Microsoft Teams is now available as a built in app… which is great! But at the time of writing this post, you cannot use the Microsoft Teams built-in app with a Work or School account…  not great. Many business managed devices that have been upgraded to Windows 11 will also still have the Teams Machine-Wide Installer version of Microsoft Teams, resulting in the user the experience of two versions of Microsoft Teams in the…

Upgrade to Windows 11 using Feature Updates in Intune

Today marks the General Availability of Windows 11. Along with this there is an update to the Feature updates for Windows 10 and later (Preview) feature in Intune to assist with upgrading Intune managed devices to Window 11. I have previously used the Feature Updates feature to control deployment of Feature Updates outside of my Windows Insider for Business channels Before I get into how I have configured this for Windows 11, it may be useful to see how I have done this previously for Windows 10. Below I have two Feature Update profiles.  Win 10 – Feature Updates Deployment…

Configuring the Windows 11 Start Menu Layout and Taskbar with Intune

The Windows 11 Start Menu Layout is one of the most noticeable features that is different from its Windows 10 predecessor, so therefore it would also make sense that configurations set in in Intune for the Windows 10 Start layout will not work on Windows 11 Microsoft have released some information on how to configure the Windows 11 start layout using Intune, so I thought that I would detail what I have done with configuring both the Windows 11 Start Layout and Windows 11 Taskbar using Intune. Windows 11 Start Layout To create a Windows 11 Start Layout and deploy…

Restricting the Local Admins group – Intune

Sometimes, a device that should be onboarded with Autopilot, doesn’t get onboarded with Autopilot – for example, I recently uploaded the hardware hashes for several hundred devices provided by a hardware vendor.  The majority of these devices kicked into Windows Autopilot and onboarded with the appropriate Deployment Profile assigned. But I noticed that a very small number of devices did not onboard correctly, and while this isn’t a huge issue for the user, there were a few things that could cause an issue – two immediately spring to mind The computer name is randomly generated instead of having the computer…

Windows 11 Azure AD Groups and Filters – An update

The more I think about managing Windows 11 in Azure AD and Intune, the more I want to refine some of the configurations I have done. The recent Windows 11 Dev Channel build had me thinking about the Azure AD and Intune Filter blog posts and the configurations done there. Now if you are not doing any Windows Insidering at your company (first thing I’d ask is why not, but that’s a conversation for another time), then the configurations for Windows 11 in those blog posts should be perfectly fine until the next release of Windows 11 in 2022 (Remember,…

Windows 10, 11 and Intune Filters

In a previous post I wrote about a way to create an Azure AD dynamic device group to identify Windows 11 devices. But what if you don’t want to add an additional group or groups, or do a bit of rework with your Intune configuration, or have Intune profiles and policies targeted at groups that only contain users? Fortunately a recent Intune feature (currently in preview) may be able to help here. Filters are a way to deploy Intune profiles and policies to user and/or device groups where there maybe (for example) both Windows 10 and Windows 11 devices, but…

Windows 11 and Intune – A Windows 11 Dynamic Device Group

I’ve recently started working on validating Windows 11 in my organisation. We manage our devices primarily with Intune now so I need a quick and easy way to identify these devices. I’m a big fan of using Azure AD Dynamic Groups to reduce admin overhead, and I use these a lot (both Device and User) to help me manage my environment. I have a standard Windows 10 Dynamic group The Query used here (device.managementType -eq “MDM”) -and (device.deviceOSType -contains “Windows”) will look for all Windows devices that are Intune managed and add them to this Azure AD group. However, at…