#Modern Workplace

Credits: Adobe Stock While working on a MDM migration project, I came across an interesting issue in Intune that almost had me heading down a rabbit hole. As part of the migration, the existing mobile devices were to be un-enrolled from a non Microsoft MDM solution and then enrolled into Intune using the Company Portal method. Nothing fancy, but when this process didn't work, I obviously got into an investigation mode and started looking at some of the obvious things. The obvious items that I looked at - 1. Network requirements for Intune, Android and Apple services. I must state that in this customer's tenant they had ADFS setup, so that added to the complexity. However, since the enrolment was taking place outside the customer's network, none of the network requirements really played a factor. 2. Intune device platform restrictions. Normally when a device is not allowed to enrol in Intune, more often than not it is due to device platform restriction policies. Especially ...

Ever since endpoint device management gravitated towards Intune (aka Microsoft Endpoint Management or MEM), the need for SOE management (Standard Operating Environment) for end user devices has become a prime requirement. A small but important part of this is implementing Windows 10 customizations to suit organizational needs.  I recently had to implement the same for a customer so wanted to cover some unique & specific aspects through this blog. Desktop Icons Customization If you are anything like me who likes his desktop clean or have a similar SOE requirement in your organization then the following method may just help you. A Powershell script can be used to clean the desktop for all the unwanted icons and place custom icons like ‘This PC’ shortcut. I did the same for devices that were getting provisioned using Autopilot. Please note that this will nuke all the icons for all user profiles so use it carefully. Get-ChildItem $env:Public\Desktop\*.lnk | ForEach-Object ...