Windows 10 – Troubleshoot Intune Multi App Kiosk Configuration

This is a short one: While you will find plenty of blogs how to configure a Windows 10 Kiosk Device, I was not able to find a very important information:
Where can I find Information, if starting an app within a multiple App Kiosk configuration fails. And it’s that simple:
Open Event Viewer and go to Microsoft\Windows\AppLocker, there you will find more Information about the process that fails to start:

Hope this helps 🙂

Intune – Deploy required user settings to Windows 10 with powershell

In this blog I would like to describe, how I managed to set required user settings to Windows 10.
Since I still do have an On-Premises environment, in which also File Servers reside and a DFS Namespace is still up and running, I wanted to make sure to get the advantages of using the local network.
So here are my two use-cases to solve:
1. Add a Network location for the DFS Path if the user is logged on On-Premises
2. Modify the local “host” file, to redirect the workfolder clients to the file server internally
Continue reading

Intune Autopilot – Prepopulate the Startmenu

It might be not that popular with Windows 10, but every company wants a well curated startmenu, rather than the default delivered from Microsoft:

We have multiple Options to configure the startmenu, I’m sure I don’t know them all. But when it comes to Windows 10 and Intune autopilot, we do not really have an option as what I have considered. This blog tries to catch the available options we currently have with Intune and Autopilot.
Continue reading

Intune – Configure “Fast startup” (HiberBoot) for Windows 10

Since I changed my clients from GPO managed to Intune controlled, not all settings from GPO, but some of them needs to be set through Intune as well. As outlined in my previous blog, I tried to disable the Fast Startup Option on Windows 10 through a CSP. And I did not even found a CSP supporting this setting. Within this blog, I would like to show, how you can configure the fast startup (“Turn on fast startup (recommended)”) setting in Windows 10 through Microsoft Intune:

You may ask, why I want to disable this? My reason: I don’t want to reuse a desktop session which was hibernated. And only a reboot will force the client to create a new desktop session, if fast startup is enabled.
Continue reading

Windows 10 settings management with Intune

When a journey ends, a new journey will begin. My journey with the old school domain joined and GPO managed devices within my LAB ended, and I finally conquer new areas with Azure AD join and Intune controlled devices. Due to the lack of opportunities, I still waited so long, because a lot of settings were not possible to set. And some of them are still not that simple to set through Intune, but there is a solution for, I would like to say, most of the requirements.

So within this blog post, I would like to document my current knowledge of Windows 10 settings management through Intune. As today, we have the following options to configure GPO alike settings through Microsoft Intune:

  • Intune Windows Enrollment settings
  • Intune Portal blade settings
  • Intune Portal Custom CSP settings
  • Intune ADMX-backed administrative template settings (Preview)
  • PowerShell Script
  • Let’s have a closer look to the different options.
    Continue reading

    Windows 10 – Remove Windows.old Folder

    Long time no see, huh? Now I’m back with a new post about removing the Windows.old folder after a feature Upgrade.
    Recently I seen this on twitter, a commented it with: Why don’t you let the automation from Windows 10 let it do. But since then, I was in a project, where the removal of this folder was required, and within the Upgrade Task Sequence. I thought, this is easy, starting the Scheduled Task should do the job…
    Continue reading

    Windows 10 1703 – Remove Universal Windows Platform (UWP) Apps

    DON’T Do THIS! Use AppLocker instead! Do not remove any apps from the image

    Hi reader,

    I would like to share my script to remove windows universal apps, which I have tried to make it simple as possible.
    First let me explain, that there seems to exist two different types of Apps which reside within the Windows 10 Image. You can list them with Get-AppxPackage and Get-AppxProvisionedPackage (you need Administrator permission to do so):

    Continue reading

    ConfigMgr – My Guide for a SCCM driven Windows 10 Installation

    In this blog I would like to give an overview of my Windows 10 Installation, since this has changed a lot to previous versions of Windows.
    This blog will cover the following topics:

    • Windows 10 Image Customization
    • Windows 10 Unattended File
    • Windows 10 Language Pack (MUI) Integration
    • Optional: Windows 10 with .Net feature

    The blog is based on Windows 10 1703:

    Continue reading

    ADFS – Single Sign On with automatic Login on Edge Browser

    Today I would like to share my experience when it comes to add a User Agent (e.g. Browser) to the list of Single Sign On capable applications. There is quite a good Article from Microsoft that describes how to add a User agent to the ADFS Configuration, you will find this Article here:
    https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-intranet-forms-based-authentication-for-devices-that-do-not-support-wia
    Continue reading