What's New
Recast’s Endpoint Management Recap – April 2023
Topics: What's New
Welcome to Recast’s Endpoint Management Recap, April 2023 – by Daniel Engberg
Happy spring!
April has been a busy month for me personally and in Endpoint Management. My month started with me moving into a new apartment with my family and all the work that comes with it. We have now settled in, and we love the space! The office is one of the main highlights. 🙂
A lot of huge news this month:
- We now have a Public Preview release of Windows LAPS to store local admin passwords in Azure Active Directory. Windows LAPS is a game-changer!
- ConfigMgr has an updated update cadence, moving from three to two releases yearly.
- Microsoft has released ConfigMgr 2303. Now we can increase the maintenance window offset to 7 days, covering the whole week :).
Read more about it under the Microsoft Product Announcement section, with more details about all the new product launches.
This month, I also saw this post, which can help determine which scenarios you can and should use Windows Autopilot, depending on your situation: Windows Autopilot scenarios | Microsoft Learn
There is a new Microsoft exam coming on May 2nd, which also includes questions about Windows 365: Exam MD-102: Endpoint Administrator (beta) – Certifications | Microsoft Learn
Harjit Dhaliwal (@hoorge) has created a podcast I’m looking forward to following.
Tackling Tech: new podcast on the latest Microsoft capabilities – Microsoft Community Hub
Next week we have MMS. Recast Software is one of the sponsors at the annual conference. It would have been fun to meet all my friends there, but with all the time and effort it takes to move, I could not attend this year. For you that are going to the event. Enjoy it!
– Daniel Engberg
Contents – Endpoint Management Recap
Upcoming Events
- MMS – Midwest Management Summit – MMS at MOA, Minnesota – May 1 – May 4, 2023
- Recast Software sponsors MMS at MOA. Come visit us on-site for freebies, sweepstakes, product information, and demos.
- MMS – Midwest Management Summit – MMS 2023 Miami Beach Edition (mmsmoa.com) – October 30 – November 1, 2023
LAPs has been the go-to solution for securely storing and accessing random local administrator passwords. Unfortunately, LAPS has only worked in on-premises Active Directory, which meant you had to go for community solutions to solve this. These solutions were great, but as an enterprise, the lack of support and SLAs is often unacceptable. However, now we have Windows LAPS available in Intune in Public Preview. Starting with the security update for Windows 11 on April 11, 2023, we don’t need to install an MSI separately, as the feature is now natively included in the operating system.
Here are some resources on Windows LAPS:
- By popular demand: Windows LAPS available now! – Microsoft Community Hub
- Microsoft Cloud LAPS Password Management Solution HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
- Security: Getting to Know Windows LAPS for Active Directory- First Look | Gobisweb – Fabrizio Gobeli (@El_Duderino1985)
- Create Intune policies to configure and manage Windows LAPS | Microsoft Learn
- Windows LAPS with Microsoft Entra (Azure AD) and Microsoft Intune (rahuljindalmyit.blogspot.com) – Rahul Jindal (@rahulj1906)
- Security: Exploring Windows LAPS for Azure Active Directory – Initial Impressions in a Cloud-Only Setting | Gobisweb – Fabrizio Gobeli (@El_Duderino1985)
- Skilling snack: Windows LAPS – Microsoft Community Hub
- Windows LAPS Configurations From Azure AD And Intune HTMD Blog (anoopcnair.com) – Vidya M A
Another piece of news is that the ConfigMgr update cadence has changed from three times to twice a year. The change in update frequency might cause some relief for admins around the world.
- Release Cadence Changes to Microsoft Configuration Manager – Microsoft Community Hub
- SCCM Release Cadence Details and Changes (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
Last, we also have a new update for Configuration Manager, 2303!
Check out the links below for more information:
- Update 2303 for Microsoft Configuration Manager current branch is now available. – Microsoft Community Hub
- Step-by-Step SCCM 2303 Upgrade Guide (systemcenterdudes.com) – Benoit Lecours (@benoitlecours)
- SCCM 2303 New and Removed Features | UUP Updates | MSfB | Collection Member Sync Status – YouTube – Anoop C Nair (@anoopmannur)
Products
- Purchase and add apps for Microsoft Intune | Microsoft Learn
- Microsoft Intune: Simplified endpoint management – Microsoft Security Blog
Microsoft Azure Active Directory [What’s New Page]
Microsoft ConfigMgr [What’s New Page] [Tech Community] [Virtual Hub][MS QA][Reddit][Feedback]
Microsoft Intune [What’s New Page]
- Endpoint security reports in Intune admin center for tenant attached devices – Microsoft Community Hub
- Configuring BitLocker via Microsoft Intune settings catalog – Microsoft Community Hub
- Limit your attack surface with Endpoint Privilege Management – Microsoft Community Hub
- Ask Microsoft Anything: Microsoft Intune Suite (Day 1) – Microsoft Community Hub
- New settings in Microsoft Intune to enhance Windows Defender Firewall management – Microsoft Community Hub
- Microsoft Enterprise SSO plug-in for Apple devices – Microsoft Entra | Microsoft Learn
- Recap: Microsoft Intune Suite at MS Secure and Tech Accelerator – Microsoft Community Hub
- From Copilot in Microsoft Viva to the new Microsoft Intune Suite—What’s new in Microsoft 365 | Microsoft 365 Blog
Microsoft Windows [What’s New Page]
- Windows Client
- Windows 365
Security Alerts and Info [Microsoft Security Portal – Security Update Guide]
Other
- Windows Update for Business reports: access and region control – Microsoft Community Hub
- What’s new in Windows Autopatch: April 2023 – notifications and impact – Microsoft Community Hub
- Public Preview: Authenticator Lite (in Outlook) – Microsoft Community Hub
- Skilling snack: Using Windows Update for Business – Microsoft Community Hub
- Unified update platform (UUP) FAQ’s – Microsoft Community Hub
Podcasts / Blog Series / Video Blogs
- What’s new in Microsoft Intune (2303) – YouTube – Mattias Melkersen & Nikolaj Andersen (@MMelkersen)
- Intune Suite Part 3: Advanced Endpoint Analytics – Modern Device Management (jannikreinhard.com) – Jannik Reinhard (@jannik_reinhard)
- Migrate to Cloud Management – YouTube – Niall C. Brady (@ncbrady)
- Local admin/privilege management with Intune – YouTube – Niklas Tinner (@NiklasTinner)
- What’s new in Windows 365 (2303) Featuring Femi Adebayo – YouTube – Mattias Melkersen & Femi Adebayo (@MMelkersen)
Blog Posts
Intune
- Enroll Android Devices To Android For Work In Intune HTMD Blog (anoopcnair.com) – Malepati Naren
- Working with Windows Autopilot deployment events – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
- Intune – Endpoint Privilege Management (preview) (hametbenoit.info) – Benoit Hamet (@benoit_hamet)
- Intune Policy Conflicts – EMS Route – Shehan Perera (@Shehanperera85)
- Rename devices with PowerShell and Microsoft Intune (ccmtune.fr) – Mogis Christopher (@MogisChris59)
- Proactive Remediation script: Automatically update Lenovo BIOS to the latest version directly from Lenovo website | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
- Enable Windows Update for Business reports – Just about the Modern Workplace (joostgelijsteen.com) – Joost Gelijsteen (@Jgelijsteen)
- Intune Exam MD 102 Study Guide Starter Kit – Microsoft Intune Certification HTMD Blog (anoopcnair.com) – Vidya M A
- Speed Up Windows Update Detection Frequency Policy Using Intune HTMD Blog (anoopcnair.com) – Abhinav Rana
- Efficiently Target Your Devices and Users with Intune Filters – All about Microsoft Endpoint Manager (eskonr.com) – Eswar Koneti (@eskonr)
- Configure Enrolment Notifications For New Enrolled Android Devices In Intune HTMD Blog (anoopcnair.com) – Malepati Naren
- Use Safe browsing in Google Chrome on mobile devices (rahuljindalmyit.blogspot.com) – Rahul Jindal (@rahulj1906)
- Best Method To Prevent Users From Modifying Settings Policy Using Intune HTMD Blog (anoopcnair.com) – Abhinav Rana
- Windows Autopilot Scenario For Streamlined Modern Device Deployment HTMD Blog (anoopcnair.com) – Jitesh Kumar (@jitesh8092)
- Always Install With Elevated Privileges Policy Using Intune HTMD Blog (anoopcnair.com) – Abhinav Rana
- Intune And Windows 365 Cloud PC Are Reaching New Heights In Terms Of Enterprise Adoption HTMD Blog (anoopcnair.com) – Vidya M A
- How to Deregister Devices from Autopatch Service in Intune (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
- Windows MDM Security Baseline – Settings Catalog – CCMEXEC.COM – Enterprise Mobility – Jörgen Nilsson (@ccmexec)
- Intune – New partner portals page (hametbenoit.info) – Benoit Hamet (@benoit_hamet)
- Enforcing Screen Lock For Android Devices In Intune As Per CIS Benchmarks HTMD Blog (anoopcnair.com) – Malepati Naren
- Manage Chromebooks with Intune – Mr T-Bone´s Blog (tbone.se) – Torbjörn Granheden (@MrTbone_se)
ConfigMgr
- HP Dock WMI Provider Deployment & Inventory with ConfigMgr – GARYTOWN ConfigMgr Blog – Gary Blok (@gwblok)
- Updating HP Docks with Intune or ConfigMgr using PowerShell – GARYTOWN ConfigMgr Blog – Gary Blok (@gwblok)
Windows 365
- Windows 365 Cloud PC Frontline Provisioning Policy Creation Process | 3 Cloud PC With One License HTMD Blog (anoopcnair.com) – Anoop C Nair (@anoopmannur)
- Gathering Battery Information via PowerShell & WMI – GARYTOWN ConfigMgr Blog – Gary Blok (@gwblok)
- olastrom.com – Windows 365 Frontline – Let’s talk about it – Ola Ström (@olastromcom)
- Simon does Easy Universal Print With The Revitalized Microsoft 365 Plans (skotheimsvik.no) – Simon Skotheimsvik (@SSkotheimsvik)
- Introducing Windows 365 Frontline – techlab.blog – Dominiek Verham (@dominiekverham)
Cloud Security
- Protect your users against Phishing with Defender SmartScreen (endpointcave.com) – René Laas (@mr_helaas)
- Getting started with Endpoint Privilege Management – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
Other SysAdmin Info
- Dealing With Frontline Workers and OneDrive-SysManSquad | Systems Management Squad – Alec Weber (Alec Weber)
- Getting started with Advanced Endpoint Analytics – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
- Embracing change, accelerating adoption | Tackling Tech – YouTube – Harjit Dhaliwal (@Hoorge)
Tool Updates
Sign up to join security expert, Sami Laiho, for an upcoming webinar titled, Patch Management: Best Practices and Why It’s Important. During this live session held May 9th at 10am CST, Sami will provide insights on:
- The reasons many companies overlook this crucial practice, and the consequences of neglecting it
- The benefits of automating third-party patching
- Best practices to successfully implement an efficient patching process
Recast Software recently hosted The 2023 State of System Administration Webinar at the end of March. You can listen to the recording here. CEO Will Teevan and Content Marketing Manager Matt Wieland of Recast Software discussed the current state of system administration based on a recent survey conducted on 500 System Administrators. Read The State of System Administration white paper here.
Check out these new Recast Software blog posts:
- Letter to the Chief Technology Officer
- No Need to Switch Endpoint Management Software
- A Big Bank’s IT Asset Management Success Story
- Polling Data Confirms the State of System Administration
- Our Cybersecurity Survey Revealed Successes and Underlying Issues
Also:
- Follow Recast on Twitter @RecastSoftware to hear the latest.
- Read our new eBooks, The Top 10 Most Used Right Click Tools and The Top 5 Endpoint Insights to Empower IT Teams.
Thank you for checking out Recast’s Endpoint Management Recap – April 2023. Stay tuned for more helpful content coming your way in the new year.
