#Modern Workplace

Source credits: Microsoft This one has been long coming and I am glad that I have finally been able to implement Defender for Office 365 in my tenant and write about it. Implementing Defender for Office 365 may seem like a herculean task, and while it can involve many moving parts, organizations can actually set it up quickly using the preset security policies and build over it. What are preset security policies? Preset security policies are Microsoft's recommended starting point for all customers when it comes to their security configuration. Like all changes, it's important to understand any potential impact. They provide a simplified method to apply all of the recommended spam, malware, and phishing policies to users across your organization. As Microsoft adds new threat protection capabilities, preset policies through the templates will automatically stay up to date and continue to enforce ever so evolving recommended settings. More importantly, organizations that are looki...

  While working on a customer's Azure tenant, I came across an issue that I hadn't seen before. I was configuring the Intune tenant to provision Windows 11 devices using Autopilot. As part of the configuration, OneDrive for Business was also included to manage and secure user data. However, after provisioning a device, I soon started seeing issues with OneDrive failing to sync. I will only see a pop-up window displaying the message ' Sorry, OneDrive can't add your folder right now. Please contact support .'. Not really helpful. There was nothing in the Entra sign-in logs, so ruled out conditional access policies as the root cause. I also had the relevant licenses assigned so I ruled that out as well. Then I recalled that there was something similar in relation to Outlook mailbox device management setting which could interfere with Intune device management policies. Something that I also blogged about which you can check out over here . Not really like for like, but ...

I have recently been testing and  familiarizing myself with Microsoft Single-sign on (SSO) extensible configuration for websites and apps on macOS. While the feature is still in preview, it has immense potential and has already proved to be a worthy edition in the management of Apple devices in general. While exploring the configuration, I felt the need to configure Microsoft 365 apps, particularly Microsoft OneDrive. In this blog, I will cover the configuration required to setup and manage Microsoft OneDrive on macOS devices using Intune. Intune Configuration Part 1 - As the first step, I will encourage to configure the SSO extension on the macOS devices to make the sign-in as seamless as possible. If you are interested in knowing how to go about this, then I recently blogged about  Reduce app sign-in prompts with SSO on macOS using settings catalog in Intune   which covers the steps and details. Part 2 - As the second step, Microsoft OneDrive app needs to be installed...