How can I enable and configure Multi-Factor Authentication (MFA) for all users in Microsoft 365, and what are the recommended steps for a smooth rollout?
I’m setting up Multi-Factor Authentication (MFA) for all users in Microsoft 365 through Azure Active Directory, aiming for a smooth rollout. I need guidance on both enabling MFA across the organization and the best way to configure it to avoid…
Conditional Access Policies to allow Guests to Teams
Hi We have a Conditiona Policy to require Compliant Device to access any data/app in MIcrosoft 365 cloud service. We have Microsoft 365 Business Premium licenses. We have a need to allow Guest users to access Teams teams, they are invited to. For this,…
Can a custom 53003 message be created to replace the default?
When validating Conditional Access violations, the default 53003 error provides too much information about the client and login attempt. Is there a way to customize this error response so if a Conditional Access policy is violated a very generic response…
How to allow my users to be password less when authenticating ?
Based on this: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-passwordless#choose-a-passwordless-method I am trying to enable all of my users with the Passwordless feature with the existing mobile/cell phones…
Intune Wrapped App Access Blocked for User – "This app has not been set up" Error
Hello, I am facing an issue where an Intune-wrapped app is showing the following error message when a user tries to access it: "App access blocked: This app has not been set up for Mohans@outsystemsDemo.onmicrosoft.com **to use. Contact your…
회사 또는 학교 계정 관련해서 로그인이 안돼요.
지금 계정은 개인 계정이고, 같은 계정으로 회사 또는 학교 계정이 있는데, 로그인 하려고 하면 microsoft authenticator 앱을 이용해서 로그인해야 되는데, 이 앱으로 인증 코드를 받으려고 해도 오류가 발생했다는 문구만 뜨고 받을 수 없습니다. 그래서, 인증 앱을 이용하지 않고 로그인할 수 있는 방법 있나요?
Bitlocker locked my hard drive D -/i have recawery KEY
Please help. I use drive D connected to a laptop. I used the bitlocker function and everything was fine until a certain moment, One day I connected the drive as usual - I enter the password - incorrect. OK I take out the printout with the security code I…
Export & import Intune tenant settings (Windows | Configuration profiles)
I have tried the following but seems like not working between Azure…
Verification of Step-by-Step Methods to Prevent Account Sharing in Microsoft Office 365
Hello, I’m looking to implement security measures in Microsoft Office 365 to prevent users from sharing their accounts externally. I have compiled the following step-by-step methods based on information I received from Microsoft AI. Could you please…
Bitlocker configuration - Password complexity to encrypt USB storage
Hi everyone, I have created a configuration profile in Intune to prevent users from writing information to unencrypted USB storage. Doing the encryption test on a storage USB, I see that it asks you for a password. Supposedly, the password complexity…
Implementing Passwordless Sign-In for Student Devices in Intune-Azure AD Environment
I’m exploring the implementation of passwordless sign-in for student devices that are already Intune-managed and Azure AD-joined, with existing passwords and Azure AD usernames. Here’s what I’d like to achieve: Best Approach: What would be the most…
How to setup/configure "Disable the local storage of passwords and credentials" using Intune?
How to setup/configure "Disable the local storage of passwords and credentials" using Intune? We have below recommendations in our tenant inside M365 Defender. See below screenshot.
Windows Security Center service is turned off and cannot be enabled
When I turn on my computer, it says “Enable the Windows Security Center service, Windows Security Center service is disabled, click or tap to enable. Big red X.” I clicked on it and it doesn't work, it won't start, it reports an error, what's wrong with…
Securing break glass account for access from multiple geographical locations?
Based on this news announcement…
Solidwork PDM View set up issue with intune
We currently have a large number of users running solidworks pdm viewer installed at the C: level. When trying to run the installer on a newer machine with intune it prevents installing at the C: level and requires an additional folder layer to be…
Evaluating Endpoint Encryption Solutions: MBAM vs Intune/SCCM
A client currently utilizes MBAM for encrypting laptops and USB drives and has a test Azure tenant along with an SCCM Lab. In the production environment, SCCM is fully responsible for managing workstation policies. A POC is being prepared to facilitate…
Upgrade To 2403 : Microsoft Defender security configurations are no longer managed with Microsoft Intune
Hello everyone, The current version of MECM we are using is 2303. (No Hotfixes Installed). We would like to upgrade to version 2403. We read about the problem “Security configurations removed from Intune” after the…
Protecting data on BYOD devices
Hi everyone, We have sixth form students using BYOD, and we're looking for advice on how to protect data on these devices, specifically for Microsoft 365 resources. I've tested Windows app protection for Edge, but students are also accessing data through…
How secure is the Wipe function in Intune for Windows 11 devices
Hi all, I am looking to remove quite a few devices from our Intune portal as part of that process getting them back to OOBE in a cleaned state. My main concern though, is how thorough a wipe from Intune is ? On a Corporate owned device that had been…
W11 - Virus & Threat Protection
Hi, When I disable "Automatic sample submission" (see below) I receive periodic popups that the device may be vulnerable (see below), and it remains the same until I "Dismiss". Is there any workaround to NOT show this popup…