Author: Thomas Kurth

SCCM
Thomas Kurth

Monitor Windows Hello and AAD Hybrid join enrollment with MEMCM

Dsregcmd.exe is one of the most important troubleshooting tools on a Windows device when working with Azure AD Hybrid Join or Windows Hello. But this tool is only available as a command line tool and not in PowerShell. I wrote a translation function to change that. The Get-DsRegStatus function can

Read More »
Azure AD
Thomas Kurth

Lessons Learned: Azure AD Conditional Access

Azure AD Conditional Access is one of the most named features which customer implement to protect their environments. But as with many cloud features at first glance it looks really simple to implement but then the complexity comes visible during rollout. Many customers activating it without thinking what the impact

Read More »
Intune
Thomas Kurth

Updated Automatic Intune Documentation Script

Today I had time to improve the Intune Documentation PowerShell Module. This new release brings the following benefits: Bugfix: All ADMX settings are now correctly displayed Assignments of various elements like Scripts, ADMX, Enrollment Status Page and Windows Hello for Business are now documented Section “Enrollment Status Page” renamed to “Enrollment Configuration” because it contains also WHfB, Enrollment Restrictions, ESP, and Enrollment Limits.  Configuration Profiles are now loaded from the Beta Graph API. Therefore, much more types are returned. For example the Domain Join configuration is now part of the documentation. Since

Read More »
Intune
Thomas Kurth

Extended Windows Autopilot Companion App

The last weeks I had time to play a little bit more with Windows Autopilot especially White-Glove and the Companion App example from Microsoft.  First of all, one of the bad things is, that the app is not published to an Store. But I hope I can change that in

Read More »
General
Thomas Kurth

Why is the modern and secure workplace my focus?

From time to time it’s good to not only write technical blogs, today there was one of these days. I always ask my self what is the value of my work? Especially why the modern and secure workplace is in my focus? In this blog I try to share why

Read More »
Intune
Thomas Kurth

Added ADMX backed Policy to Automatic Intune Documentation Script

I just had time to add new objects to the Intune documentation which makes your documentation much more complete. This time I added ADMX backed policies or in the Intune console named Administrative Template Profile. This profile type provides a lot of settings which are not available over OMA-Uri. Therefore,

Read More »
Intune
Thomas Kurth

Configure Windows 10 Auditing with Intune

Windows 10 auditing needs to be configured to comply with the Microsoft Security Baseline. In my opinion this is an important part but completely missed in the Intune UI. But happily there is the Policy CSP which allows us to configure it. The CSP is documented here https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-audit. To simplify

Read More »
Security
Thomas Kurth

Defense in depth on an example: Office Macro Protection

Office Macros are one of the things every IT department tries to block, but will never really be able to 100% eliminate them. The reason is simple the documents with macros are sometimes produced by business apps, sent by business partners via e-mail or created by employees to improve business

Read More »
Windows 10
Thomas Kurth

Be prepared the Chromium based Edge will be released in January

Update 10.01.2020: The docs article is updated with better information about which devices are targeted. https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-blocker-toolkit#overview   Update 27.12.2019: The Microsoft Edge team informed me, that they will only make Edge available in specific scenarios. For more information read the comment of Sean. Thanks for this update and hopefully the official docs will

Read More »