Recast’s Endpoint Management Recap – Vol. 54

Welcome to Recast’s Endpoint Management Recap, Vol. 54

by Daniel Engberg

Hi everyone!

Happy summer from Sweden. I hope you’re well and enjoying the season. I will soon go on a long holiday with a combined vacation and parental leave (8 weeks). But don’t worry, the REMR will maintain its monthly schedule for July and August.

While most of the talk in the endpoint management space revolves around Intune, you shouldn’t overlook ConfigMgr, which continues to receive robust updates. The latest technical preview, version 2405, introduces several enhancements to improve security and performance.

Thank you to everyone in our community for continuing to learn and create new content.

Enjoy the updates and have a great summer!

– Daniel Engberg

Contents – Endpoint Management Recap

• Events / Conference News
• Microsoft Product Announcements
• Community Tools / News
• Recast Software Updates

Upcoming Events

• MMS 2024 Flamingo Edition – Fort Lauderdale – October 20-23
• Microsoft Ignite – Chicago – November 18–22

Check out Recast Software’s Event and Tradeshow page for some additional event details.

This month features the release of Technical Preview Version 2405 for Configuration Manager, which introduces several significant updates anticipated to transition into production soon. Here’s what’s new:

• SQL Extended Protection for Authentication: This update enhances security by protecting against Man-in-the-Middle (MITM) attacks, ensuring more secure data transmissions.
• BitLocker Support on ARM Devices: Enhanced BitLocker integration, now including Task Sequence steps specifically designed for ARM devices, enhancing device security.
• Performance Enhancements: Improvements have been made to policy processing and collection evaluation, streamlining operations and boosting overall system performance.
• Centralized Search: Enhances user experience by enabling workspace selection, which allows for more refined and targeted search results within the system.

For a detailed look at these updates, check out the official post on the Microsoft Community Hub: Configuration Manager technical preview version 2405 – Microsoft Community Hub.

Products

Microsoft Entra ID (Azure AD) [What’s New Page]

Microsoft ConfigMgr [What’s New Page] [Tech Community] [Virtual Hub][MS Q\A][Reddit][Feedback]

• CMG update for Microsoft Configuration Manager version 2403 – Configuration Manager | Microsoft Learn

Microsoft 365 [What’s New Page]

Microsoft Defender for Endpoint [What’s New Page]

• Microsoft Defender for Endpoint now supports device control for BitLocker

Microsoft Intune [What’s New Page]

• Announcing new Windows Autopilot onboarding experience for government and commercial customers – Microsoft Community Hub
• The guide to Microsoft Intune resources — Microsoft Intune Blog
• Granular RBAC permissions for endpoint security workloads – Microsoft Community Hub

Microsoft Windows [What’s New Page]

• Windows Client
  • Skilling snack: Managing Windows 11 updates | Windows IT Pro Blog (microsoft.com)
• Windows Server
• Windows 365
  • MAM (preview) for Windows 365 and Azure Virtual Desktop | Windows IT Pro Blog (microsoft.com)

Security Alerts and Info [Microsoft Security Portal – Security Update Guide]

Podcasts / Blog Series / Video Blogs‍

• How to configure Autopilot Device Preparation Part 1: Set it up — Rubix (getrubix.com) – Steve Weiner (@getrubix)
• Autopilot Device Preparation (AutoPilot V2) Part 3: Automating Corporate Identifiers (youtube.com) – Steve Weiner (@getrubix)
• Autopilot Device Preparation (AutoPilot V2) Part 1: First look (youtube.com) – Steve Weiner (@getrubix)
• 2023E18 – Drive Encryption (I.T) (youtube.com) – Intune Training Series (@OnPremCloudGuy, @AdamGrossTX, @powers_hell, @jgkps and @shackelfjaco)
• How to configure Autopilot Device Preparation Part 3: The New Flow — Rubix (getrubix.com) – Steve Weiner (@getrubix)
• How to package Office 365 for Intune deployment (youtube.com) – Steve Weiner (@getrubix)
• How To Setup Intune PKI with EZCA (youtube.com) – Keytos Security (@keytos_security)

Blog Posts

Intune

• CIS Intune Baselines – What do they break? (deploymentshare.com) – Jonathan Fallis (@JonnieHACK)
• Intune – No more hardware hash requirement for Autopilot (preview) (hametbenoit.info) – Benoit Hamet (@benoit_hamet)
• Windows deployment with Autopilot Device Preparation – Joey Verlinden (@jvldn1)
• Simon does Autopilot Device Preparation: How to Collect Windows Corporate Device Identifier (skotheimsvik.no) – Simon Skotheimsvik (@SSkotheimsvik)
• Automatically adding devices to Entra ID group when Autopilot completes with Logic App | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• Create Endpoint detection and response policy in Intune (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• Autopilot Device Preparation: Import Corporate Device Identifier using Graph API and PowerShell | Syst & Deploy (systanddeploy.com) – Damien Van Robaeys (@syst_and_deploy)
• Exploring the Managed home Screen redesign for shared Android devices. (youtube.com) – Andy Jones (@Andy_69Jones)
• Smoothly introducing new feature updates for Windows 11 as optional updates – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Digging into Windows Autopilot v2 – Out of Office Hours (oofhours.com) – Michael Niehaus (@mniehaus)
• My journey to the cloud with Microsoft Intune | Microsoft Intune discussion – Lior Bela (@BelaLior)
• Windows 11: Config Refresh – Nicklas Ahlberg (@AhlbergNicklas)
• Getting started with the Remote Help web app – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)
• Automated Windows Update Compliance Policy In Intune (cloudflow.be) – Maxime Guillemin (@coolximi)
• Mapping Network Printers on Windows Devices with Intune: Setup and Requirements – tuneMDM.com – Ahmad Aoun (@Ahmad_Aoun)
• Bulk Creation of Network Printers with Intune Win32 App – tuneMDM.com – Ahmad Aoun (@Ahmad_Aoun)
• Windows Autopilot Device Preparation Setup Guide | Autopilot v2 Device preparation policies (youtube.com) – Chander Mani Pandey (@Mani_CMPandey)
• How to package, deploy, and manage apps for Intune with Robopack (youtube.com) – Steve Weiner (@getrubix)
• USB Security Using Microsoft Defender for Endpoint – tim beer (@timbeer)
• How to evaluate Windows 11 Readiness with Intune (systemcenterdudes.com) – Jonathan Lefebvre (@JLefebvreGloben)
• Autopilot Device Preparation – Evolution or optional add-on ? – Move2Modern – Andy Jones (@Andy_69Jones)
• Migrate Group Policy to Microsoft Intune (systemcenterdudes.com) – Benoit Lecours (@benoitlecours)
• How to remove the Classic Teams client with Intune (youtube.com) – Steve Weiner (@getrubix)
• Understanding enrollment time grouping – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)

ConfigMgr

• MEM.Zone | Configuration Manager Next Maintenance Window SQL Function – Ioan Popovici (@IoanPopovici)
• MEM.Zone | Introducing: Configuration Manager Set Implicit Uninstall Flag Tool – Ioan Popovici (@IoanPopovici)
• SCCM 2403 Hotfix KB28290310 – OOB fix for CMG VMSS (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• How to Update PowerShell Help Content for SCCM (prajwaldesai.com) – Prajwal Desai (@PrajwalDesai)
• HP BCU to HP CMSL – GARYTOWN ConfigMgr Blog – Gary Blok (@gwblok)

Windows 11 & 365

• Windows 365 GPU – extending your graphics capabilities in the cloud | just another windows noob ? (niallbrady.com) – Niall C. Brady (@ncbrady)
• Managing Windows AI features – All about Microsoft Intune (petervanderwoude.nl) – Peter van der Woude (@pvanderwoude)

Cloud Security

 Other SysAdmin Info

• Get notifications of missing devices in Windows Update for Business reports | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com) – Peter Klapwjik (@inthecloud_247)
• Optimizing BranchCache with RepubQuorumSize: An Undocumented Yet Crucial Tweak (2pintsoftware.com) – Mattias Benninge (@matbg)
•  Know your updates – Configuring Windows Update for Business Reports – Let’s ConfigMgr! (letsconfigmgr.com) – Alex Durrant (@ADurrante)

Tool Updates

On Discord? Join Recast Software on Discord WinAdmins under “products and vendors” -> #recast-software.

We just finished our three-part webinar series on automation within Right Click Tools. This popular trio of short webinars showcased custom built automation workflows using over 450+ Right Click Tools actions. See how and watch customizations get built live during the webinar:

Part I

---

Part II

---

Part III

We also recently unveiled our Essentials Package. Check out the video below to learn how vendor consolidation paves the way for streamlined IT operations and efficiency gains across both ConfigMgr and Intune.

Check out our newest blog posts

• Patch Tuesday June 2024: Critical Vulnerability Roundup
• How to Start with Microsoft Graph

Intune Posts

• How to Manage Browser Extensions via Intune
• How to Enable Known Folder Move with Intune
• How to Remove Personal Teams Chat from Windows 11 Devices Using Intune
• How to Block Apps with Intune

‍Thank you for reading Recast’s Endpoint Management Recap – Vol. 54. Stay tuned for more helpful content coming your way next month.

Follow Recast Software on Twitter, LinkedIn, Discord (#recast-software), and YouTube to see the latest news and updates.