Modern Device Management

Citrix Workspace app for Windows provides access to a user’s resources using Citrix Virtual Apps and Desktops. These resources include SaaS, web and legacy applications and desktops. Citrix Workspace app provides access from the desktop, start menu, Citrix Workspace user interface and web browsers. Now in an Active Directory infrastructure, Citrix Workspace app can be centrally configured using Microsoft group policies. This requires that the administrative templates (the ADMX and ADML files) for Citrix Workspace app are copied to your Group Policy Central Store. Part of these setting include configuring  Client Selective Trust registry keys which allows controlling the user permission prompts in a Citrix session related to access of resources on the device like local drives, webcams, microphones etc. But how does one address this on devices that are Azure AD joined only? If you are managing devices using Intune, then one can using PS scripts to configure the necessary registry keys.

  While working with Google Chrome admx policies, a feature called  Safe Browsing  caught my attention. After doing some research I decided to blog my thoughts on it and how it can be enabled using Intune. What is Safe Browsing? Safe Browsing helps in protecting against phishing, social engineering, malware, unwanted software, malicious ads, intrusive ads, and abusive websites or extensions. Chrome contacts Google's servers periodically or real-time (depending on the protection level) to download the most recent Safe Browsing list of unsafe sites and is stored locally in the system. Chrome checks the URL of each site visited or file that is downloaded against this local list.  When Chrome starts, and on each update of the Safe Browsing list, Chrome scans extensions installed in the browser against the Safe Browsing list. If an extension on the list is found, Chrome will disable the extension. Different levels of Protection are -  Enhanced protection (Recommended) -Automatically war