#Modern Workplace

I recently had a conversation around the configuration of shared windows devices with a customer and as part of the discussion, the customer showed interest in being able to login on web applications on Edge by multiple users in a secure manner. It immediately struck me that Microsoft recently released secure password deployment feature for enterprise customers. It had been recently moved into GA and I thought it was a legitimate option and possibly a right fit considering their specific requirement. Microsoft Edge's Secure Password Deployment feature is a new enterprise-grade solution designed to enhance password security and simplify access for organizations. It allows administrators to securely share encrypted passwords with specific users or groups within an organization using Microsoft Edge for Business. This is especially useful in environments where shared credentials are needed but must be tightly controlled. These passwords are encrypted using Microsoft Information Protect...

  I have finally jumped on the Copilot bandwagon and started familiarizing myself with the feature. For those who are unware or getting to know it like me, then it is Microsoft's latest AI-powered productivity tool that uses large language models (LLMs) and integrates data with the Microsoft Graph and Microsoft 365 apps and services. I don't intend to do a deep dive into what Copilot is as there is plenty of material available online for that, but I will like touch base on commercial data protection and what organizations can do to manage Copilot on mobile devices using Intune. According to Microsoft , To provide chat responses, Copilot uses global data centers for processing and may process data in the United States. Optional, Bing-backed connected experiences don't fall under Microsoft's EU Data Boundary (EUDB) commitment.  They also don't fall under the terms of the Data Protection Addendum (DPA) which requires company data to remain inside geographic or tenant b...

A question on techcommunity prompted me to write this blog post. The question is around how to push a PDF to iOS using Intune and the first thing that came to my mind is Web clip.  For those who don't know a web clip is a URL-based bookmark associated with a policy that when applied on a mobile device, the web clip bookmark is automatically created on the home screen. For iOS there is an app type which can be used for this.  For Android, the process is slightly different, but more on that later. Let's see how one can leverage web clip to push a PDF to an iOS device.  Now as part of the solution, we are really not pushing the PDF file, but a URL link to the PDF file. I feel that the easiest way to host the PDF file for corporate use is to use a Azure blob storage and configuring the relevant permissions. I am not going to cover the steps on how to create a blob storage as the official documentation contains the relevant details, instead just cover the steps of what all is...

Microsoft keeps the security baselines up to date in general with each new versions coming out. Be it Windows OS 10\11, Windows Server OS 2022, Microsoft 365 Apps or Edge. Edge security baseline for v112 was recently released and I wanted to roll this out in my tenant using Intune. This blog covers the details on the setup. If you are using still using GPOs, then you can easily import the security baseline templates and assign them. In Intune, Microsoft had introduced Security baseline profiles to allow rolling out the security baselines out of the box. However, despite being a cloud managed feature, the baselines have not been updated in a long time. However, as of 31st March 2023, in a blog post comment, Microsoft have indicated that the security baselines may now finally be getting updated in Intune. More details can be found in this  link . This is fantastic news and long awaited in my opinion. However, if you don't want to wait until the security baselines are updated in Intu...