Nickolaj Andersen
Senior Architect - Enterprise Mobility MVP
Stockholm, Sweden
Nickolaj specializes in Enterprise Mobility and Security, Windows deployments and automation. Additionally, he has extensive experience with planning, implementing and migrating Microsoft Endpoint Manager environments on a global scale. Nickolaj has also been awarded as PowerShell Hero 2015 by the community, is the creator of popular community tools and solutions such as Modern Driver Management, CloudLAPS, ConfigMgr Prerequisites Tool, ConfigMgr OSD FrontEnd, ConfigMgr WebService and a frequent speaker at conferences and user groups.
Links
Awards
Area of Expertise
Secure automation for your Intune devices
Would it not be cool if your Intune devices could securely connect to Intune or Azure AD to perform actions on query on itself? What if your device could query information about itself from MSGraph or even update some custom attributes in the cloud triggered by a script running locally.
This is all possible in many ways, but how can we do such things without compromising security or giving away secrets in our code?
In this session we dig deep into the concepts of automation for cloud managed devices, how to make sure communication between the device and cloud is secure and is only coming from a trusted device in your organization. We'll share best practices on how to secure your automations in a cloud-first world when retrieving data from Intune or Azure AD in scripts running locally on the device and which Azure services to leverage to accommodate everything.
If you manage Windows device with Intune and have ever been in need of retrieving data from Intune or Azure AD, or perhaps want to learn more how you can securely send log data from your devices to Log Analytics, you don't want to miss out on this demo heavy session.
• Learn about using Azure Functions and Managed Identities for automation
• Understand how Azure Functions and Conditional Access improves security
• Ensure only trusted devices can communicate with your infrastructure
• See real examples on how we use this in large companies today.
Proactive Remediations and Azure Functions better together
If you manage Windows device with Intune and have ever been in need of retrieving data from Intune or Azure AD, or perhaps want to learn more how you can securely send log data from your devices to Log Analytics, you don't want to miss out on this demo heavy session.
In this session we dig deep into the concepts of automation for cloud managed devices, how to make sure communication between the device and backend is secure and is only coming from a trusted device in your organization.
We'll share best practices on how to secure your automations in a cloud-first world when retrieving data from Intune or Azure AD in scripts running locally on the device and which Azure services to leverage to accommodate everything.
How we migrated some big organizations to Intune
Come join this session where industry experts will showcase how large organizations have successfully completed the steps to move their whole device management infrastructure to Intune. We'll discuss obstacles, solutions to where there's a gap in functionality, common pitfalls but also provide tips and tricks on how to shift the mindset when it comes to legacy organizational structures that requires new thinking where a flat-structured approach is the key to success.
In this session we'll focus on two large organizations that have recently gone through this journey and are now managing devices completely with Intune in a cloud-only fashion.
Deep dive into Graph API and Intune
In this session, we will provide a deep dive into using the Graph API for automating Intune related tasks. We will discuss authentication, the different credential flows and when to use delegated or application scopes when setting up your own app registration to keep track of who can access your data.
By the end of this session, you'll have a better understanding of how to construct an efficient request using query parameters, deal with pagination, lazy properties and when to use the v1.0 and Beta versions of Graph API.
Fully automated Win32 application packaging in Intune
Imagine a world where Win32 apps in Intune would just download, package and publish themselves, all made ready for your end users to consume the apps they want. Does that pique your interest? Join this session to get a deep technical understanding of tools and community solutions available today that can ease your daily administrative tasks associated with application packaging and take them to the next level, more or less fully automated. This will be a session where there's more PowerShell code shown than PowerPoint slides! We will go through the IntuneWin32App module, IntuneWin32AppFramework and finally touch point on how these tools can be combined into a fully automated Azure DevOps Pipeline powered solution, the Intune App Factory.
Nickolaj Andersen
Senior Architect - Enterprise Mobility MVP
Stockholm, Sweden