Ask Me Anything: Intune, AVD, W365

Come with your questions and get them answered by the experts. If you are lucky, you might get a swag !

Become a more efficient Intune administrator by learning our PowerShell and Graph tips and tricks

Session Overview:
In this session, you will learn how to use the Microsoft Graph API to become a more efficient and effective Intune administrator. PowerShell and Microsoft Graph provides a unified endpoint for accessing various Microsoft services, including Intune. By integrating Microsoft Graph into your workflow, you can automate tasks, gain deeper insights into device and application management, and streamline complex processes

Key Takeaways:
Introduction to Microsoft Graph API: Understand what Microsoft Graph is, how it works, and its relevance to Intune management.

Authentication and Permissions:
Learn how to set up proper authentication using Azure AD and configure the necessary permissions to interact with Intune through Graph API.

Exploring Graph API Endpoints for Intune:
Discover the most useful Graph API endpoints for managing devices, apps, users, and policies within Microsoft Intune.

Automating Routine Tasks:
Learn how to automate repetitive Intune tasks such as app deployments, and compliance checks using Graph API and scripting tools like PowerShell.

Gaining information:
What can be done trough Graph, that cannot yet be done directly through the Intune portal.

Who Should Attend:
This session is ideal for IT administrators, Intune specialists, and anyone responsible for managing mobile devices and applications in an enterprise environment. Attendees should have a basic understanding of Microsoft Intune and be familiar with scripting or coding concepts.
By the end of the session, you will have gained the tools and knowledge to start your PowerShell and Graph journey to automate workflows, and optimize your use of Microsoft Intune, leading to more efficient device and application management.

Device Management Ignite 2024 update

Vi summerar de senaste nyheterna inom Device management, Windows, Windows 365 under denna session både från Ignite och vad som skett sedan förra MMUGSE mötet.

What is new in endpoint management

We will cover what is new in endpoint management, Intune, Configuration Manager, Intune Suite, Windows Updates and more

Our top 10 must-knows as an Intune administrator

Intune changes over time and new features are added on a monthly basis. This makes it hard for administrators to keep up, and it is hard to keep track of the latest and greatest.

Not only do we get new features, we also get new ways to achieve the same goal, which adds another layer of complexity... because let's face it, the fact "it" worked two weeks ago doesn't apply for "today".

In this session we will cover our top 10 must-knows as an Intune administrator to help you adapt with the latest technology.

Ready for Windows 11? Unlocking the secrets to a successful upgrade with realworld examples

Windows 11 is just around the corner and should be on everyone’s radar. As Windows 11 introduces new security features, which in turn necessitate new hardware requirements, it’s crucial to devise an upgrade plan that addresses all possible scenarios.

What are the potential costs of failing to upgrade on time?
What might different upgrade paths entail?
Are you considering a hybrid approach or a cloud-native solution?

In our upcoming session, we will reveal our top insights and strategies from real-world experiences.

Secure your Windows 365 environment

Windows 365 is managed through the Microsoft Intune portal and often times by different administrators.

This means that we need to tread carefully when assigning administrative roles.
In this session we will dig into how we could think differently while handing out permissions to make sure we allow just enough access (JEA) and just in time (JIT) to make sure each admin gets what is needed and not more.

We will investigate technologies such as:
* Conditional access
* PIM
* Entitlement management
* Passwordless
* Scope tags
* Custom Intune RBAC roles

10 security settings you must configure in Windows 11 - 2025 edition

Windows 11 is the most secure Windows version built so far, and there are differences between securing a W10 and a W11-device.

In the times we live in with constant cyber threats we must learn and know about new security features to keep our devices protected, regardless if they are physical or virtual.

During this session we will cover our top 10 configurations we must configure in Windows 11. We will have a look at what they do and how they affect our devices.

Join for great tips on how to take your Windows security posture to the next level

Mastering Windows 11: Top 10 Must-Dos for Optimal Experience using Intune

Let's get together to level up our tech game and dive into the Windows 11 hype.

With Windows 10 waving goodbye, Windows 11 should be on every agenda 2024.

But, hold up!

- Can we really manage Windows 11 the same way we did with Windows 10?
- Are there any differences?
- What are the new security features?!

The questions add up when we start thinking of it, so let's unravel the excitement and have a look at the game-plan post upgrade.

Enhancing Security with Windows 11: Leveraging Intune and Defender for Ongoing Protection

Embracing the dynamic landscape of technological advancements is challenging. As we approach the end of life for Windows 10, enterprises find themselves in the position of adapting to Windows 11 and its capabilities.

In this session, we invite you to explore the seamless integration of Windows 11, Intune, and Microsoft Defender, fortifying your organization's security posture. We will guide you through the optimal utilization and configuration of Windows 11's cutting-edge security features with Intune, ensuring your systems remain safeguarded and resilient.

Furthermore, gain invaluable insights into the proactive realm of Microsoft Defender for Endpoint as we provide you with a comprehensive onboarding experience. Elevate your security protocols and equip your workforce with the latest tools to address emerging threats efficiently.

Top 10 challenges when moving to Windows 11 AAD Joined & Intune

Moving from on-premise Hybrid joined devices to a modern AAD joined device has its challenges. We will go through the top 10 issues we have seen when moving organizations to a modern managed AAD joined & Intune managed device and their solutions!

Let's have a party with Windows 365 and friends

In this session we will have a look at how to optimize our admin experience with Windows 365 and some friends.

Identity governance is excellent for user onboarding, logic apps and Azure automation is great for a lot of reasons so let's invite them to the party!

Empowering Your Organization with Windows 11: A Deployment Success Guide

With the upcoming end of support for Windows 10 in fall 2025, prioritizing the deployment of Windows 11 is crucial for all IT departments. In this session, we will delve into various upgrading methods, potential pitfalls, and invaluable tips and tricks. Additionally, we'll explore how to customize and optimize Windows 11 to ensure it meets the unique enterprise requirements within your organization. Join us to gain all the essential information necessary for a successful Windows 11 project.

Windows LAPS: More than just a policy

In this session we will have a look at how to get going with Windows LAPS and all the planning around it.

We will dig into monitoring, auditing and troubleshooting to make sure we GET and STAY in control.

We will cover with the latest additions to Windows LAPS to make sure we stay up to date.

We will build proactive remediation scripts for centralized monitoring and there could even be a surprise moment!

One thing is clear: Windows LAPS is more than just a policy.

This session focuses on the modern approach by utilizing Windows LAPS on Entra ID and Intune.

Remove common cloud only technical blockers

Hybrid Azure AD-join is for sure the most commonly used method as it allows for us to adapt to the cloud in a controlled and structured way. But as time flies many organizations are still finding themselvesin that state even though the step towards cloud only could be small. Having both GPO's and MDM-policies applied is not a rare sight - but is that really the best solution?

In this session we will dig into common challenges when it comes to taking the step towards Azure AD-join and a cloud only setup.
We will make sure to get those pesky GPO's transitioned to MEM and shine some light on automation.

Up your Windows 365 game with Microsoft Graph and PowerShell

In this session we will have a look at how to use MS Graph to manage Windows 365. We will do a deep-dive into user experience and look at how to optimize the onboarding to make sure our users have the best possible experience to get going with Windows 365 ASAP! The mindset here will be: "Get as far as possible with as little effort as possible". psst! There even might be a new community tool reveal.. ;-)

This session will be both inspirational a show a lot of demos. The audience should have worked with Microsoft EndPoint Manager before.

Optimize user onboarding/offboarding with Azure Identity Governance

User onboarding & offboarding are often forgotten. A good onboarding experience is welcoming to the new user and allows for us to keep track of access and privileges. A good offboarding is important to make sure access and privileges are deleted. In this session we will learn how to create and use Catalogs and Access Packages to allow for an optimized user experience for both internal and external users. We will keep track and review access using “Access Reviews”.

Identity Governance is in my opinion not covered enough in events/webinars. I hope to shine some light on the topic with this session. Keeping track of access and privileges is a big struggle for a lot of my customers. By using Identity Governance we have seen an optimized user experience and a more secure environment as managers or data owners are able to review access in a monthly or quarterly manner.

Mastering Scope Tags in Microsoft Intune

Have a organization where every 1st/2nd/3rd-line admin has the Intune administrator role?! Or, are your support technicians Helpdesk administrators?! Join this session to learn how to allow your admins to work as secure as possible, with as few permissions as possible, AND you will learn how to make it easy to adapt and onboard new admins to all of this as well!

This session focuses on scope tags in Microsoft Intune, a crucial feature for organizing, securing, and delegating administrative access to resources within Microsoft Intune. Scope tags allow organizations to segment and manage devices, applications, and policies based on various operational needs such as department, geography, or role.

It is about time we start thinking of the Intune Administrator role as a high-privileged role, and start delegating permissions the correct way.

Security is top of mind, which often means that it is hard to work with... Once we are done with our presentation we have showed you an extremely easy way to onboard new administrators to a delegated permissions approach, 100% based-upon Microsoft products such as PIM, Conditional access, Entitlement management etc..

Sounds good? - Join us for useful tips and common pitfalls!

Target Audience:
- IT Administrators managing Microsoft Intune in multi-site organizations.
- Security Managers looking to implement granular access control.
- Support Teams responsible for device management and app deployments in distributed environments.

Prerequisites:
Basic knowledge of Microsoft Intune and RBAC.