Posts

Showing posts with the label CMPivot

The curious case of Defender ASR rules not enforcing from Intune

Image
  It was a cold gloomy day when I set out on a mission to fix an issue involving ASR rules. Something which I may have done a dozen of times so I said to myself, why it should be any different this time. But if history has taught me anything, it is that no two issues are the same, despite how much they resemble and that for every issue there is a possible solution. You just have to stay relentless and you will eventually make it to the other side. The issue.. It all began with the ASR rules in 'block mode' starting to block macros on a set of devices. Pretty routine at this stage as the logical thing to do is either to configure necessary exclusions or put the relevant ASR rule in a non restrictive state like 'Audit' mode. The problem is that no matter what changes I made to the ASR rules, they simply didn't make any difference. Macros continued to be blocked and the events in Advanced hunting would confirm the same. When I checked the registry on the devices in que...

ConfigMgr: CMPivot in all its glory

Image
CMPivot was first introduced in ConfigMgr CB 1806 and since its release, ConfigMgr as a product has became a little more real time. Especially when it comes to pulling deployment or compliance status. I must admit that I didn’t use CMPivot much earlier, but ever since remote working became the new normal, I started using CMPivot queries regularly and the more I used it, the more I found myself appreciating the efforts of the product team behind implementing this great feature . If you manage your end user devices over the internet using  Cloud Management Gateway  (CMG), you would understand the pain of not being able to perform any remote administration tasks like checking the logs, or taking remote control etc. This is where CMPivot query can be really helpful. According to Microsoft:- CMPivot allows you to quickly assess the state of devices in your environment and take necessary actions. When you enter a query, CMPivot will run a query in real - time on all currently connec...