I recently helped a new client with an existing Azure infrastructure and conducted an analysis of how they could reduce their Azure spend. This was a smaller organization without many resources, but their most expensive resource was an RDS server running 24/7, but their working hours were only 8 AM – 5 PM. The compute […]
RDP Broke Every Morning After an Azure VM Start Task Read More »
Many situations have use cases for kiosk-type devices that need more functionality than a single-app kiosk. For those use cases, we steer towards shared devices or multi-app kiosks (now configured using assigned access). Back in the Windows 10 days, there was an actual multi-app kiosk profile template that we could use in Intune, but Microsoft
Auto-logon for Assigned Access and What Breaks It Read More »
If you ever see an Intune environment where Windows PCs are showing up with unknown ownership, and no apps or configuration policies apply to those devices, then your devices are probably enrolled under the wrong MDM authority of Office 365 Mobile instead of Intune. Here’s what you will see in Intune. And in Entra, we
Fixing Existing Office 365 Mobile MDM enrollments Read More »
Update 10/16/25 – The script has been completely rewritten to use raw Microsoft Graph API endpoints via Invoke-MgGraphRequest, rather than relying on the Microsoft Graph PowerShell SDK cmdlets. It also pulls the policy and configuration profile JSON files from my GitHub instead of as objects inside the script. If you want to use your own
Configure MAM for iOS/Android with one Script Read More »
Azure Temp storage and Page file review If you do any work with Azure Virtual Machines, you have probably run into VM SKUs that contain a temporary storage disk. These are VMs with a “d” in the name (e.g. – D4ds). Many people don’t know what they’re for or why they are even an option.
Azure v6 VMs and AVD: Automating Page File Setup on Temp Storage with Intune Read More »
If you’ve been working with Intune and Autopilot for at least the last few years, you’ve probably heard the saying “Friends don’t let friends use Hybrid-Joined Autopilot”. Trust me, I agree with that, but as an IT Consultant/Advisor, you can only guide and advise clients. You can’t force them to do things. In addition, some
App deployment is something just about every Intune admin must be comfortable with. Recently, most apps have become simpler to package and deploy. However, occasionally you’ll still have proprietary, legacy, or just poorly written apps that don’t contain silent installers or do things out of the ordinary. This was the case for an app I
IMECache Permissions Errors with User Context Win32 Apps Read More »
If you’re running virtual servers in Azure, it’s a good idea to explore removing your servers in favor of PaaS/SaaS solutions. Running VMs is often more expensive, and you have more overhead and maintenance. With that said, VMs are still very common, and oftentimes, migrating existing VMs to Azure is one of the first steps
How to in-place upgrade your Azure Windows Servers Read More »
