Secure SharePoint Online data – Part 2

In my previous blog post, which you will find here, I showed how to start with securing SharePoint Online data with just a few simple steps. In this blog post I will go further with securing SharePoint Online by using Office 365 Labels and Data Loss Prevention (DLP) policies. By using those labels and policies, …


OneDrive for Business Files Restore

About a week ago Microsoft announced a new OneDrive for Business feature: Files Restore. OneDrive for Business Files Restore is a much requested feature by the users of OneDrive for Business. Until now we have been able to restore our OneDrive files only one file at a time with version history, but when it is necessary …


Fully cloud based print management with Printix [UPDATED]

February first Alex Simons from Microsoft announced “Print to corporate printers from Azure AD joined Windows 10 devices! in this article. It finally allows your users to print directly to your corporate computers from your Azure AD joined computers”. But with this solution, you still need at least one print server in your on-premises network …


Deploy Heimdal Security with Microsoft Intune

We are managing Windows 10 clients with Microsoft Intune as MDM devices. This provides us the option to deploy software (.msi files) to these Intune managed devices. Today we have a look at deploying Heimdal Security, which we use to increase security on our devices on which Windows Defender Anti-virus is also active. Editing the …


Control Windows 10 privacy settings with Intune [UPDATED]

Since the first day Microsoft released Windows 10 there is a lot to do about the data Microsoft is collecting from you when using this OS. A lot of those apps connect to the internet and you have no idea what data is collected In this blog I will show you how you can use …


Enable self service password reset feature on the windows logon screen

With the latest release of Windows 10 (1709, Fall Creators Update) a new option is added to Windows; enable self service password reset feature on the windows logon screen. It provides your Azure AD users the option to reset their password direct from the Windows logon screen. Usually when a user arrives at the office in …


First look at the Sharepoint Migration Tool by Microsoft

This week Microsoft announced the SharePoint Migration tool at Ignite which can be downloaded from this site. Till now you needed to migrate your data to SharePoint Online by third-party tooling like Sharegate or BitTitan. Sharegate comes with a lot of options, but is pretty expensive (for a small migration). BitTitan MigrationWiz is free, but …


Manage Internet Explorer settings with Intune

In the past, Intune was only able to deploy a predefined set of device settings to MDM managed Windows devices. Fortunately Microsoft introduced ADMX-backed policies in the Windows 10 Creators update (version 1703). With those new MDM policies we are able to set a lot of policies using Policy CSP and with the Fall Creators …


Azure AD and Intune support macOS Conditional Access

Two weeks ago Microsoft announced the availability of Intune/ Azure AD Conditional for macOS in this blog article. With this feature it is possible to only allow access to your Azure AD applications to compliant macOS devices and block access to all other macOS devices. Around the same time Microsoft released the Intune Company portal …


Azure Active Directory B2B Collaboration

Earlier this year Microsoft released Azure AD business-to-business Collaboration world wide in general availability. With Azure AD B2B collaboration companies are able to work together with users of partner companies, without providing those users an user account in there own Azure AD. The user accounts of the partner company may exist in Azure AD, but …


Azure AD shows all devices

It has been a little bit challenging to get a nice overview off all your devices in Azure Active Directory. The devices which are managed by Intune were not a problem, but the devices which are Azure AD joined or Azure AD registered (and not Intune managed) could only be found when going to the …