Intune – You can now assign Windows Autopilot profile to already registered clients

As you may already know Windows Autopilot simplifies Windows 10 device enrollment to Azure Active Directory (AAD) and providing seamless user experience. One of the problem with Windows Autopilot was if your already have Windows 10 devices registered to your Azure AD, you were not able to assign an Autopilot profile. With the latest update on Intune, you can now update your Autopilot policy to apply the policy also on…

Read More

Intune – Display an enrollment status page

With the latest Intune update, you can now display an enrollment status page after a Windows 10 device has been registered. The page will let your end-users know what is happening while their device is finalizing the registration process. To do so, you first need to enable the feature in Intune Connect to your Azure portal and reach out the Intune configuration blade Then reach out the Device Enrollment\Windows Enrollment…

Read More

Windows / Azure – Reset password from all Windows

You may be already aware that you can provide the ability to your end-user to reset their password (Self Service Password Reset – SSRP) directly from the logon screen for Windows 10 Azure AD Joined device (see https://t.co/LW060QqgGV if you want to know more). Well, Microsoft has announced a major improvement for this feature as you can now use it for all Windows version (from Windows 7 to Windows 10…

Read More

Windows – Windows 10 1809 and Windows Server 2019 have been pulled out

Just few days after the release of Windows 10 1809 and Windows Server 2019, Microsoft has pulled out these releases from MSDN (and possibly Volume license) as well as paused the delivery through Windows Update. This follows reports of missing files and Microsoft is investigating (limited details available here https://support.microsoft.com/en-us/help/4464619/windows-10-update-history)

Read More

Windows – Windows 10 1809 and Windows Server 2019 are now available

UPDATE Oct, 6th – Windows 10 1809 and Windows Server 2019 have been pulled out for further investigation after issues reported (see https://t.co/WLZS6uC7Px) Windows 10 1809 update is being rolled out through WindowsUpdate and is already available using the Installation Media tool or MSDN. Windows Server 2019 is also available on MSDN or in evaluation, additional availability (volume licensing, Azure VM) will come within the next few days.

Read More

Azure/Windows 10 – You can use your Authenticator App to sign in

Going the same way than Windows Hello for Business, you can now use your Microsoft Authenticator app to sign in to your corporate resources protected by Azure AD (Azure, Office 365, Azure published apps…) You need off course few prerequisites: Running Windows 10, registered to your Azure AD tenant Have setup an authentication policy on your Azure AD Have register your Microsoft Authenticator app Setup the authentication policy on Azure…

Read More

Windows – Quick reminder: Windows Server 2008 and Windows Server 2008 R2 are reaching end of support in Jan 2020

It has been already reminded few times but as this is quite important as these versions are still use quite a lot you really need to start thinking to move on from Windows Server 2008 and Windows Server 2008 R2. They are reaching their end of support/end of life on January 14th 2020.You have few options available to move on: migrate your 2008/2008 R2 workloads on Azure; you will enjoy…

Read More

Intune – You can now target specific users/devices when applying Windows Hello policy

With the latest updates on Intune, you can now define specific users/devices when you apply a Windows Hello policy. Until then, the Windows Hello policy was a tenant level settings and as such applied to all users/devices. To define the Windows Hello policy, go to your Intune configuration blade and reach out the Device configuration\Profiles and create an Identity Protection profile, then you will be able to define the targeted…

Read More

Windows 10 – Error 0x80180014 when joining Windows 10 to Azure AD

I just got an interesting error when trying to join a Windows 10 1803 to Azure AD; I was continuously getting the error ‘0x80180014’ when trying to join the device to Azure AD. The interesting thing was this device has been already Azure AD Joined but has been reset, with all reference in Azure AD or Intune removed. Nonetheless, each time I tried to join again I was getting this…

Read More

Azure – AD FS 4.0 is now available on Azure Marketplace

You can now quickly deploy a Windows Server 2016 virtual machine with AD FS configured for Federation and single sign on for cloud applications. Search the Azure Marketplace or the virtual machine catalog for “ADFS 4.0 Server Windows 2016” (I give you the direct URL for it https://azuremarketplace.microsoft.com/en-us/marketplace/apps/cloud-infrastructure-services.adfs-server-2016 to the Marketplace). AD FS will then be ready for the final touch, meaning adding the certificate and setting up the federation…

Read More

Azure – Windows Server 2019 Preview is available as VM image

Windows Server 2019 Preview (the next major release of Windows Server) is now available for Azure Virtual Machine. Just search for Windows Server 2019 when you create a new virtual machine Search the marketplace (https://azuremarketplace.microsoft.com/en-us/marketplace/apps/) for Windows Server 2019 Or access the marketplace directly from this URL https://azuremarketplace.microsoft.com/en-us/marketplace/apps/microsoft-hyperv.rs5_preview Enjoy

Read More

Windows – Windows 10 1803 ADMX files are now available

Few days after the release of the new Windows 10 build (1803, also known as April Update), the ADMX files to manage GPO settings for Windows 10 1803 are now available for download here https://www.microsoft.com/en-us/download/details.aspx?id=56880 NOTE for some reason, the files are not extracted to the defined target folder when running the MSI package (default “C:\Program Files (x86)\Microsoft Group Policy\Windows 10 April 2018 Update (1803)\”) but to C:\PolicyDefinitions. Even if…

Read More

Windows 10 – You can (finally) manage the bandwidth used by Windows Update

UPDATE May 6th, after the release of the ADMX file for Windows 10 1803, the GPO settings to manage these restrictions are available With the Windows 10 April Update (build 1803) you finally can manage the amount of bandwidth being used by Windows Update. To manage the limits (applicable to both download and upload [aka sharing with internet clients] – knowing that if you have already restrict the sharing with…

Read More

Windows – Windows Admin Center is now available in GA

Windows Admin Center (formerly known as Project Honolulu) is now available. You can get it from http://aka.ms/WACDownload Windows Admin Center (WAC) is a new web-based administration interface, centralizing all (or most of) administration consoles (MMC) you are using as a Windows servers administrator. WAC can be used to manage Windows Server 2012 to Windows Server 2016 – will also support the coming Windows Server 2019, as well as Windows 10.…

Read More

Intune – Enable Windows Redeployment from logon screen

Starting with Window 10 build 1709, it is possible for administrators to re-initialize Windows 10 devices to remove personal files and settings and revert the device to an original state, while keeping the device enrollment. Enable the policy To make Windows Automatic Deployment available from the logon screen, you must first enable the policy; which can be done either with Intune (or any MDM supporting CSP) or with a Windows…

Read More