Windows 10 – Troubleshoot Intune Multi App Kiosk Configuration

This is a short one: While you will find plenty of blogs how to configure a Windows 10 Kiosk Device, I was not able to find a very important information:
Where can I find Information, if starting an app within a multiple App Kiosk configuration fails. And it’s that simple:
Open Event Viewer and go to Microsoft\Windows\AppLocker, there you will find more Information about the process that fails to start:

Hope this helps 🙂

Intune – Deploy required user settings to Windows 10 with powershell

In this blog I would like to describe, how I managed to set required user settings to Windows 10.
Since I still do have an On-Premises environment, in which also File Servers reside and a DFS Namespace is still up and running, I wanted to make sure to get the advantages of using the local network.
So here are my two use-cases to solve:
1. Add a Network location for the DFS Path if the user is logged on On-Premises
2. Modify the local “host” file, to redirect the workfolder clients to the file server internally
Continue reading

Intune Autopilot – Prepopulate the Startmenu

It might be not that popular with Windows 10, but every company wants a well curated startmenu, rather than the default delivered from Microsoft:

We have multiple Options to configure the startmenu, I’m sure I don’t know them all. But when it comes to Windows 10 and Intune autopilot, we do not really have an option as what I have considered. This blog tries to catch the available options we currently have with Intune and Autopilot.
Continue reading

Windows 10 settings management with Intune

When a journey ends, a new journey will begin. My journey with the old school domain joined and GPO managed devices within my LAB ended, and I finally conquer new areas with Azure AD join and Intune controlled devices. Due to the lack of opportunities, I still waited so long, because a lot of settings were not possible to set. And some of them are still not that simple to set through Intune, but there is a solution for, I would like to say, most of the requirements.

So within this blog post, I would like to document my current knowledge of Windows 10 settings management through Intune. As today, we have the following options to configure GPO alike settings through Microsoft Intune:

  • Intune Windows Enrollment settings
  • Intune Portal blade settings
  • Intune Portal Custom CSP settings
  • Intune ADMX-backed administrative template settings (Preview)
  • PowerShell Script
  • Let’s have a closer look to the different options.
    Continue reading

    ConfigMgr – NDES Certificate Deployment fails due to Network Device Enrollment Service failure

    I was struggling a little bit within my LAB trying to get the Network Device Enrollment Service (NDES) up and running again for the Simple Certificate Enrollment Protocol (SCEP), which is I believe not that simple, but anyway. I was really unsure what I did have changed (because I changed a lot in the last month within my LAB), that would have stopped the functionality of the Certificates to my devices, but I had a start point, the event log of the NDES Server told me the following:
    The Network Device Enrollment Service cannot retrieve one of its required certificates (0x80070057). The parameter is incorrect.
    The Network Device Enrollment Service cannot be started (0x80070057). The parameter is incorrect.

    Network Device Enrollment Service error
    Continue reading

    Windows and Local Administrator permission delegation

    In this post, I would like to explain, what my experiences and solutions for the delegation of local Administrator permissions are. In a Client deployment Scenario, you will often be asked for a solution to provide IT Professionals and maybe also end users with local Administrator permissions. I will point out the most useful solutions which I do prefer.

    1. Local Administrator Account
    2. Permanent Local Administrator permissions for IT Professional
    3. Microsoft Local Administrator Password Solution for spontaneous permission
    4. Local Administrator delegation based on group per client

    Continue reading

    ConfigMgr 1602 – All devices are part of the same server cluster

    Hi folks,

    we are on the way, it will finally happen: We will be able to serve Clusters with System Center Configuration Manager and it’s update functionality. With the new released current branch 1602, a new feature called server cluster maintenance coordination was added to ConfigMgr, it comes close to a Cluster Aware updating solution. You will find it on the General Tab of a collection named “All devices are part of the same server cluster”:
    ConfigMgr Cluster Aware Updating
    Continue reading