Microsoft’s sample detection for expired certificates returns a count before its exit 1, so it exits 0 and the remediation never runs. My linter flags that, and every rule cites the device test behind it.
Intune runs my scripts in Windows PowerShell 5.1, from system32, often as SYSTEM. My console is none of those, so I built a module that tests scripts the way the agent will, from what real devices did.
A report-only CA policy, and one question: if I enable it, who stops being able to work? What If gave me thirteen rows and no answer. So I wrote a PowerShell module that folds them into one.
Browser extension policy in Intune is spread across blocklists, allowlists and forced installs, and nothing shows you the combined result. So I wrote an analyzer that does.
OneDrive administration notes from the M365 Community Conference: sync controls, retention, storage limits, and the settings most admins never touch.
Free trials, guided pilots and no-cost migration assistance are available to organizations with as few as 150 licenses. What is on offer, and how to actually use it.
Recently I worked with a client who wanted absolutely nothing to do with OneDrive, this details my cleanup.
While Microsoft has delayed their baked in solution to updating your OS during Autopilot. You can still do it with a required application in Intune.
Using mggraph for powershell, find all licenses in use and which users have which license. Detailing whether they are directly assigned or inherited via a group.