Posts

Showing posts with the label Endpoint Analytics

Addressing Defender Security Recommendation 'Disable JavaScript on Adobe Reader 2017' using Proactive Remediation Scripts in Intune

Image
Microsoft 365 Defender portal is a one stop shop for monitoring and responding to threat activity and in the process also strengthening the security posture across identities, email, data, endpoints, and apps. Within the portal and under the Vulnerability section, Microsoft have included Recommendations that gives you insight into various mitigatation steps to address the vulnerabilites. The more you remediate, the more your security score improves and reduces the over all threat exposure of the devices within your organization. I have been assisting a customer to improve their security score and I wanted to cover the steps I carried out to remediate one particular recommendation. The recommendation in question is ' Disable JavaScript on Adobe Reader 2017 ' and this is what I did. The remediation steps involve configuring a registry key to disable  bDisableJavaScript . The information can be accessed within the recommendation itself. There are multiple ways to configure the ...

How to fix broken device sync using Proactive Remediation Scripts feature in Intune

Image
In the world of Microsoft Endpoint Management (MEM), it is important that devices regularly check in with Intune. If this breaks down, then one practically loses the ability to manage the devices for any MDM based policies. However, not everything is lost at this point and there is a way to get around this and get your devices checking in again. I recently dealt with an issue where devices stopped checking in soon after they were enrolled. While the investigation is on to find the root cause, a 3 rd party remote management application is under suspicion. Now I don’t want to go into too much detail about the application as the investigation has not concluded yet, but I must say that the app was found to be interfering with the Intune services during Autopilot and had to be removed from the standard list of apps. Instead, it was made available to users to install from the Company Portal and almost every device where it was installed, stopped checking in. On further investigation, it...