Frustration is my fuel
In Intune guide number 15 we covered configuring ASR Rules with an Intune policy to harden our endpoints and reduce their attack surface. In this guide we are going to show how granular these controls are by creating an exclusion for a specific executable, for a specific ASR Rule, for two specific devices. In our …
Continue reading "Microsoft Intune 19 – Add ASR Rule Exclusion"
In our previous post we looked at how to create app based policies which can be used on mobile devices which are not enrolled in Intune as corporate devices. We looked at how we can control and protect corporate data within Microsoft apps by blocking copy and paste, access to local storage and non-approved apps …
Continue reading "Microsoft Intune 18 – Selective Wipe of Mobile App Data"
Introduction Mobile Application Management Policies can used to secure data on both managed and unmanaged devices. If you have Intune, and you have a problem with BYOD in your organisation, then this is the guide for you. We will be configuring a policy for iOS devices, but the steps for the Android devices are exactly …
Continue reading "Microsoft Intune 17 – Mobile Application Management Policies for iOS."
It's taken 16 blogs in this series to get here, but here we are, updating! Before we start, let's put it out there that we should all be working towards auto updating. Yes it's easier said than done, yes there are some very complicated infrastructures with legacy apps, different builds, oddities and exceptions, but even …
Continue reading "Microsoft Intune 16 – Windows and Driver Updates."
If you haven't been following this series from the start, we have gone from setting up Intune from scratch which included device onboarding, autopilot, MDE, LAPs and compliance and configuration policies. This is part 15 in a step by step approach to securing endpoints and devices, with this guide covering Attack Surface Reduction (ASR) Rules. …
Continue reading "Microsoft Intune 15 – Attack Surface Reduction Rules."
Intune allows us to control which device types can join Microsoft Entra based on the platform they have installed. As we have covered many times previously, there are no technical control silver-bullets in cyber security, however lot's of small configurations will add up to provide large returns in security posture and a reduction overall in …
Continue reading "Microsoft Intune 14 – Block and Control Device Enrolment."
To be honest this guide could sit in our securing Azure series under Identity Access Management, however as this is specifically for controlling Local Administrative accounts, and the policies sit within Intune, it does sit better within our Intune series. What is LAPS? Windows LAPS is a feature that allows us to manage and back …
Continue reading "Microsoft Intune 13 – Configure Local Administrator Password Solution (LAPS)."
@2codemonte 