Introduction Did you ever wonder, what happens, when you disable the security defaults in an Entra ID Tenant? I recently setup a brand new tenant and were pretty surprised. What are security defaults? Maybe first, let’s have a look, what…
Introduction Ever wanted to know, which app has which permission in your tenant? Happy to help 😊 This script gets all permissions from every app registration and enterprise app in the tenant and reports it in a user-friendly way. Capabilities…
At the time of writing, this feature is in public preview (March 2026) Introduction Don’t you think Microsoft is backing up your tenant… but now they do! At least some parts of it. Most of you have (hopefully) a working…
Why App Protection Policies? App Protection Policies are a great way to secure data while on BYOD – some may know that already from iOS or Android. I will show you today how to start with MAM for Edge on…
I struggled to get a whole sight about some tenants I managed, so I thought I would vibe code a bit 🙂 What can it do? It gets me a plain oversight over all users, mailboxes etc. but just have…
Introduction Do you ever had the problem, that you do not have access to a device and the logs, you get out of Intune with ‘Collect Diagnostics’ are not enough? Not anymore! In this post I will show you, how…
Introduction Robopack simplifies application packaging and deployment, but MSIX installations can still fail if specific requirements aren’t met. These issues often stem from trust configuration, policy restrictions, or packaging constraints that block installations from third-party deployment tools. In this guide,…
As the time of writing, synced passkeys are still in public preview (December 2025). Introduction I recently switched to a new iPhone and was REALLY annoyed, that my Authenticator App backup went south… Time to try synced passkeys. I use…
Remote Device Management spielt in Zeiten hybrider und verteilter Arbeitsmodelle eine immer wichtigere Rolle. Mit Microsoft Intune steht Unternehmen eine leistungsstarke Lösung zur Verfügung, um mobile Endgeräte und Desktops zentral zu verwalten und abzusichern. Doch gerade die Implementierung und der…
Warum Windows-Geräte manuell in Autopilot registrieren? Du möchtest Windows-Geräte manuell in Autopilot registrieren? Kein Problem! Auch ohne OEM-Anbindung kannst du Geräte ganz einfach über PowerShell und Intune nachträglich einbinden. Windows Autopilot ist der Gamechanger für alle, die keine Lust mehr…
