#Modern Workplace

  While working on a customer's Azure tenant, I came across an issue that I hadn't seen before. I was configuring the Intune tenant to provision Windows 11 devices using Autopilot. As part of the configuration, OneDrive for Business was also included to manage and secure user data. However, after provisioning a device, I soon started seeing issues with OneDrive failing to sync. I will only see a pop-up window displaying the message ' Sorry, OneDrive can't add your folder right now. Please contact support .'. Not really helpful. There was nothing in the Entra sign-in logs, so ruled out conditional access policies as the root cause. I also had the relevant licenses assigned so I ruled that out as well. Then I recalled that there was something similar in relation to Outlook mailbox device management setting which could interfere with Intune device management policies. Something that I also blogged about which you can check out over here . Not really like for like, but ...

I have recently been testing and  familiarizing myself with Microsoft Single-sign on (SSO) extensible configuration for websites and apps on macOS. While the feature is still in preview, it has immense potential and has already proved to be a worthy edition in the management of Apple devices in general. While exploring the configuration, I felt the need to configure Microsoft 365 apps, particularly Microsoft OneDrive. In this blog, I will cover the configuration required to setup and manage Microsoft OneDrive on macOS devices using Intune. Intune Configuration Part 1 - As the first step, I will encourage to configure the SSO extension on the macOS devices to make the sign-in as seamless as possible. If you are interested in knowing how to go about this, then I recently blogged about  Reduce app sign-in prompts with SSO on macOS using settings catalog in Intune   which covers the steps and details. Part 2 - As the second step, Microsoft OneDrive app needs to be installed...

Are you deploying OneDrive configuration including Known folder move using Settings Catalog and wondering why your known folders Documents and Pictures are not synching like Desktop , then you are not alone. Ever since settings catalog was introduced, I have practically moved all my device policies over, where ever possible of course. Naturally, I moved OneDrive settings as well, but soon realized that this may not be such a good idea. At least not until Microsoft addresses the issue. As of writing this blog, it is not possible to configure all known folder move configuration in settings catalog. Currently the following settings are available under Settings Catalog - When you configure these settings and assign them, only the Desktop known folder will get enabled for sync, leaving the other 2 known folders Documents and Pictures un-managed. To fix this natively in Intune, the only option is to use built Administrative template. This is because the built-in administrative templates...

Most organizations use custom office templates and traditionally GPO would be used to configure them. However, things are evolving and traditional methods may not get you the desired results anymore. One will need a more robust method which allows you to manage the templates centrally and update the same on end user devices quickly and efficiently. I recently had a similar requirement and decided to blog about the configuration I put in place. Things that you will need – Devices enrolled into Intune. Azure Blob Storage. Onedrive for Business installed and configured for Known folder Move (KFM) Step 1 – Upload the templates in the Blob storage and set the relevant permissions. You can set it to Private to make it restrictive, but I am choosing to make it Anonymous for the Container at a granular level.   Step 2 – Create the Admin template policy to configure the custom templates location as shown below – Sign-in to the  https://endpoint.microsoft.com Browse to...