#Modern Workplace

When it comes to capturing BitLocker encryption status, there are multiple options available in the Windows compliance policy in Intune. From  Require BitLocker , Require Secure Boot to be enabled on the device , and Require code integrity under Device Health attestation, to  Require encryption of data storage on device which not only captures the encryption status of the OS drive against BitLocker, but even non-Microsoft encryption solutions. However, it is a known fact that due to delays in getting BitLocker encryption compliance to report in a timely and accurate manner, it can rather be challenging in getting the right compliance settings in place. Especially if the device compliance state is being used in Entra ID conditional access policies. Another issue that I have come across is lack of compliance reporting against BitLocker recovery key escrow. This is especially common in Co-management scenarios when the BitLocker Drive Encryption management has moved to Intune an...

Earlier this year in January, I posted a blog on how to Enable Safe Browsing in Google Chrome in Windows devices using Intune . Now it is time to extend the same security policy to mobile devices. While there are many security features that can be enabled for Google Chrome, the prime focus for this blog will be Safe browsing. I will not go into too much detail about Safe browsing and why Enhanced protection should be enabled as I have already covered the details in the earlier blog post . However, when it comes to mobile devices and iOS in particular, it is not as straight forward as it is for Android. Let's see how the setting can be configured using in Intune. Enabling Enhanced Safe Browsing mode in Android 1. In Microsoft Intune admin center , go to Apps > App configuration policies 2. Click on Add and select Managed Devices. 3. Provide a name and select platform as Android Enterprise. 4. In the Profile type, you can select the profile of your choice, or All profile types. In...