Teams VDI Optimisation Blocked by Security Policies? Here’s the Intune Fix for AVD & Windows 365
G’Day! I recently needed to fix an optimisation issue with Microsoft Teams on Windows 365 Cloud PCs — Teams was showing as “Not Optimised”. Once I traced the cause I realised the same fix works just as well for Azure Virtual Desktop, so I thought I’d share. If you’ve ever implemented security frameworks…
Windows 365 Alerts: Spot Problems Before Users Do
G’day everyone! Hope you’re all well. Quick awareness post today on something I keep coming across in Windows 365 environments – nobody’s configured the monitoring alerts in Intune! This isn’t going to be an in-depth technical deep dive, but more of a “wake up and smell the green tea” moment for anyone managing…
Teams Privacy Popups: Sort Them Once for All AVD and Windows 365 Users
G’day everyone! Hope you’re all well. Quick one today that I know will resonate with anyone managing Azure Virtual Desktop (AVD) or Windows 365 environments – those bloody annoying Microsoft Teams privacy prompts! You know the ones I’m talking about. Every time a new user logs into their AVD session or Windows 365…
RDP Multipath: Finally, Some Relief for Those Dodgy AVD Connections!
Last Updated on 16/09/2025 by Alex G’day everyone! Hope you’re all well. Quick post today on something that’s been rolling out that I’m genuinely excited about, RDP Multipath for Azure Virtual Desktop. If you’re anything like me and have been dealing with users moaning about dropped connections and laggy sessions, then this might…
Configure AVD Languages with Azure Image Builder
Last Updated on 26/08/2025 by Alex If you’ve ever had to deal with users logging into an Azure Virtual Desktop session that greets them in the wrong language, you’ll know how frustrating it can be for both them and you. Sorting out language and regional settings across a fleet of session hosts isn’t…
AVD App Deployments Made Easy with Nerdio ShellApps and PSADT
Hello! In this post, we’ll explore how to integrate Nerdio ShellApps with the PowerShell App Deployment Toolkit (PSADT) to streamline even the most complex application deployments. This powerful combination is particularly useful for handling challenging apps that require custom registry entries or files distributed across all user profiles. By pairing PSADT with Nerdio…
Take the Hassle Out of Office Template Deployments with SharePoint
Need to deploy your Word, Excel, and PowerPoint templates to both endpoints and Office Online without any client-side configurations? In this post, we’ll guide you through creating a SharePoint Asset Library to centrally manage and deploy your Office templates effortlessly across Microsoft 365. Whether you’re looking to streamline your workflow or ensure consistency…
Maximise your OneDrive: Recommended Profile Settings via Intune
Hello again, today’s topic is a practical one: how to deploy OneDrive profile settings using Microsoft Intune. This blog post aims to guide you through the process of setting up OneDrive on Windows devices in a way that’s both secure and user-friendly, complete with visual aids whenever possible. With Intune, you’ll be able…
Storage Sense not deleting downloads – Workaround
Hi all, in a previous post I went through what Storage Sense is and how to configure it via Microsoft Intune, this post can be found here. However, have you noticed that Storage Sense doesn’t actually delete the users’ files within the downloads folder? If so, stick around as I will give you…
Know your updates – Configuring Windows Update for Business Reports
Hello there! It’s been a little while since my last blog post, unfortunately, I was caring for a sick family member but on the positive side, I’m now a father so life has gotten in the way of posting, but I’m back and happy to be blogging again! More than ever, it’s important…
Set DNS Suffixes via Microsoft Intune
Post on how to easily set DNS suffixes via Microsoft Intune to your endpoints, this is especially helpful for end users so they don’t have to type in the full FQDN within environments where internal resources such as file shares are widely used and web sites are internally being hosted, etc. Create the…
Enrolment Notifications via Microsoft Intune
There’s new functionality released within Microsoft Intune that can be configured to automatically notify end-users when a device tied to their user account has been enroled, these can be in the form of emails and \ or push notifications, more information here on the what’s new page, this is a good development as…
Setting time zones via Intune
G’Day to you. Today, a quick post on how to set time zones on your Windows endpoints via Microsoft Intune. We’ll gather the timezone ID’s and then deploy via the settings catalogue. Gathering the timezone ID First of all, we need to gather the timezone ID of your desired location, to do this,…
Script – Bulk create common AAD Groups for MSIntune
Hello there, I want to share with you my a script that bulk creates common Azure AD dynamic queries that are used for Intune deployments, I work for a managed service provider and find that I create the same groups over and over again, so I thought I would create a script that…
Keeping your Intune base applications Evergreen
Last Updated on 04/04/2022 by Alex Hello there (Obi-Wan voice), keeping your Intune base applications up to date can be a challenge, today I want to show you how you keep your base applications up to date without 3rd party toolsets so when delivered to endpoints the latest versions are always installed to…
Domain join account for Azure Virtual Desktop (AVD)
Hello there! Quick post today on how to create a domain join service account to add Azure Virtual Desktop (AVD) session hosts to the domain. Prerequisites Create a service account, e.g. AVDDomainJoin@domain.net Permissions within Active Directory to delegate control to various OU’s Organisational structure for AVD Organisational Unit Structure for AVD Before we…
Customise Google Chrome using Admin Templates via Intune
Hello there (obi wan voice), back in July 2020 and my 2nd ever post on this blog I demonstrated how you could leverage Microsoft Intune custom OMA-URI’s to deploy customisations for Google Chrome, that post is still very much valid but with the MEM team at Microsoft have recently introduced the Google Chrome…
Auto-subscribe Remote Desktop clients to Azure Virtual Desktop \ W365 via Microsoft Intune.
Hi everyone! Today, I want to demonstrate how you leverage Microsoft Intune to auto-subscribe Remote Desktop clients into Azure Virtual Desktop (AVD) and \ or Windows 365 environments, this approach will negate the need for end-users to manually subscribe and enhance the end-user experience when managing thin clients via Intune. Prerequisites Administrative rights…
Deploy Firefox Bookmarks using MSIntune
Happy new year, hope you had a great time! With my first post of 2022, I want to describe how you can deploy bookmarks (aka favourites) into the Mozilla Firefox browser, display the bookmark bar and remove default bookmarks for a clean layout via Microsoft Intune. TIP: Want to deploy bookmarks for other…
Remove Chat from Taskbar on Windows 11 using Intune.
G’day, a quick post on how you can remove the Chat icon from the taskbar on Windows 11 devices using Microsoft Intune. Before we begin this policy only applies to Windows 11 Enterprise editions. Let’s dig in…. Creating a Custom Configuration Profile Log into MEMAC portal, go to Devices, Configuration Profiles and then…
Enable Firefox Windows SSO using Intune
G’day, a short and sweet post on how to enable Windows SSO for Mozilla Firefox using a custom Configuration Profile deployed via Microsoft Intune. Prerequisites Administrator rights within Intune Test User with licence Mozilla Firefox 91+ installed on test device Obtain Firefox ADMX We’ll need to download the latest Mozilla Firefox ADMX templates…
Using Filters to selectively target Intune Apps and Configs
Hi all, a post on how you can use Device Filters to target specific configurations within Intune to include or exclude Windows 11 devices only. This may be useful when you’re configuring personalisation settings or application deployments and want to either include or exclude specific device properties. What are filters? Microsoft released Filters…
Deploy Visual Studio Code via ConfigMgr
G’Day, quick post on how to deploy Visual Studio Code via ConfigMgr today! Download For my environment, I’ll be using the x64 installer to deploy via ConfigMgr. x64/x86/ARM installers can be found at https://code.visualstudio.com/download, make sure to select the System Installer to be able to ensure that the application is available for all…
Increasing SharePoint Site Size via PowerShell
Today, I want to show you how you can increase SharePoint Online site storage limits (aka quotas) via PowerShell. I ran into an issue today where a client was unable to upload new files to a private Microsoft Teams Channel due to the channel reaching it’s quota limit within SharePoint and the new…
Remove News and Interests via Intune
G’Day, today, I want to show you a quick and easy way of removing the News and Interests section from the taskbar via Microsoft Intune. News and Interests was introduced by Microsoft in the May monthly update for Windows 1909+ devices. It is seen as more of a consumer item so many organisations…
Quick Assist – UAC Black Screen resolution via Intune
Last Updated on 12/07/2021 by Alex Happy FriYAY, when using Quick Assist when the end-user is in user mode to remote control devices, a black screen is presented to the rescuer when a UAC dialogue box appears on the end-user device and the administrator cannot enter in a password or dismiss. This is…
A first look at Windows 11
G’Day all, a different kind of post today, as most of you are probably aware a leaked version of Windows 11 hit the forums recently, the official announcement is expected on the 24th of June, here is the link to the stream, but I thought I’d grab hold of the leaked ISO and…
Control Edge Extensions via Intune
G’Day, hope you’re enjoying the Euros! Today, I want to describe how you can control which Microsoft Edge browser extensions can be installed via Microsoft Intune. With this configuration, you’ll be able to block specific edge extensions or only allow specific edge extensions to be installed, for demonstration purposes, we’ll work on the…
Block Internet Explorer via Intune
Good day! Short and sweet post today, this post will detail the steps on how to block the Internet Explorer application via Intune. First, why block Internet Explorer? Internet Explorer has been around for 25 years now since its release in 1995 (I was four!), in a nutshell, it’s served its duty but…
Configure Storage Sense using Setting Catalog via MSIntune
Last Updated on 14/08/2021 by Alex Back in August last year, I created a post on how to enable and configure Storage Sense within Intune by creating a custom profile that post is still relevant and can be found here, today, I want to show you how to deploy the exact same settings…
Deploy WVD Client in System Context via MSIntune
Last Updated on 06/04/2022 by Alex Today, I want to show you how to deploy WVD client via Microsoft Intune in a truly system context method with a little help from the PowerShell App Deployment Toolkit (PSADT). The Problem This may or may not be a problem as such, the Remote Desktop client…
Unable to load the Community Hub within ConfigMgr – Resolution
Welcome, this post will describe how to resolve the Unable to load the Community Hub error within Configuration Manager. The Community Hub is a great is a place where Microsoft and other ConfigMgr administrators share content, such as scripts, PowerBI reports, task sequences, CMPivot queries, etc. Issue On the site server(s) when attempting…
Block USB Drives within Microsoft Intune
This post details how to block USB mass storage devices within Microsoft Endpoint Manager.
Deploy Barracuda VPN and Profiles via Microsoft Intune
Welcome! Last month, I demonstrated how to deploy the FortiClient VPN and Profiles via Microsoft Intune, this week I’ll show you how to deploy Barracuda VPN and Profiles instead, I hope you find this guide useful, let’s get into it! Prerequisites Basic understanding of Win32 application packaging Microsoft Intune licence Permissions to create…
Deploy FortiClient VPN and Profiles via Microsoft Intune
Last Updated on 04/12/2021 by Alex Welcome! Today, I will show you a complete guide on how to deploy FortiClient VPN and VPN profile settings via Microsoft Intune for Windows 10 endpoints. Prerequisites Basic understanding of Win32 application packaging Microsoft Intune license. Permissions to create applications within Microsoft Intune. Test device and user.…
Deploy Edge Favourites via Microsoft Intune
Welcome! Today, I will show you a complete guide on how to deploy Edge favourites via Microsoft Intune. Prerequisites Microsoft Intune license. Permissions to create Configuration Profiles within Microsoft Intune. Test device and user. Creating the Edge favourites XML Layout To deploy a list of corporate managed favourites to the Edge browser, we…
Complete Introduction to Endpoint DLP – Microsoft 365
Last Updated on 26/01/2021 by Alex Welcome! Back in November 2020, Microsoft announced the general availability of Endpoint Data Loss Prevention (DLP), being the new kid on the block (pun intended!), I want to introduce you to Endpoint DLP, highlight it’s pro’s and con’s, how to onboard devices and get you started with…
Hyper-V – Optimise Storage by Implementing Data Deduplication
Last Updated on 04/06/2021 by Alex Hi guys, different kind of post today, I want to show you how I’ve implemented data duplication within my Hyper-V lab to optimise my storage drives, in case you’re unfamiliar with data deduplication, it’s a technology that reduces storage space on an NTFS or ReFS volume by…
MEM – Standardise Android layouts using Microsoft Launcher
Last Updated on 04/06/2021 by Alex Happy new year everyone! In this post, I will show you to set-up your Android Enterprise fully managed user devices home screen layout in a consistent manner using Microsoft Launcher delivered via Microsoft Intune. This will ensure the Android layout is consistent for your end-users, thus potentially…
MEM – Automatic Syncing of OneDrive Shared Libs via Intune
Last Updated on 07/09/2022 by Alex Welcome! A few months ago now, I wrote a post on how to set up OneDrive known folder move via Microsoft Intune, this week, I want to show you how you can deploy a Configuration Profile that will automatically sync a SharePoint document library via OneDrive to…
VMM 2019 – VM Template deploying random VHDXs
Last Updated on 14/08/2021 by Alex I recently came across a very strange *issue* on my VMM 2019 lab, after creating a new Windows 10 2004 VHDX template, I noticed when attempting to deploy VM’s using this template that I would end up receiving my Windows 10 1909 or Server VHDX, needless to…
MEM – ‘mfc120.dll’ is missing when extending AD schema for ConfigMgr
Last Updated on 14/08/2021 by Alex Hi all, I ran into the following issue when attempting to extend the AD schema for a new ConfigMgr installation for a client this week and I wanted to share the resolution, albeit, a simple one. Issue When I attempted to extend the AD schema on the…
SCORCH 2019 – ‘The Server Threw an Exception’ error after applying UR1\UR2
Last Updated on 14/08/2021 by Alex In this post, we’ll look into resolving an issue with System Center Orchestrator 2019 following the installation of UR1 and \ or UR2. The Issue After installing UR1 and \ or UR2 for System Center Orchestrator 2019, the Runbook Designer throws the following error on launch: Upon…
MEM – Configure OneDrive KFM via Intune
Last Updated on 04/06/2021 by Alex In this post, we will demonstrate how to set up OneDrive KFM (Known Folder Move) for Business via Microsoft Intune. As always, the following is for example purposes only, further restrictions might be required from your organisation, you can view a full list and descriptions of the…
MEM – Why you should be blocking 3rd party keyboards
Last Updated on 14/08/2021 by Alex In this post, we’ll discuss why organisations should be blocking 3rd party keyboards for Android and iOS devices via Microsoft Intune. Introduction Have you ever read the 3rd party privacy policy on iOS devices? Maybe you should, here’s the highlights: So, in short, 3rd party keyboard developers…
MEM – Removing MS Teams Desktop Shortcuts
Last Updated on 14/08/2021 by Alex Welcome! In today’s post, we’ll be removing the Microsoft Teams desktop shortcut, if you’ve ever deployed Office via Intune, you’ve most likely run into issues with the MS Teams desktop shortcut duplicating when OneDrive known folder move is in place and the device has been reset via…
MEM – Deploying Trusted Sites
Last Updated on 14/08/2021 by Alex In this post, we will demonstrate how to deploy IE trusted sites via Microsoft Endpoint Manager (aka Intune), we will demonstrate two methods, one for complete control which will lock down the trusted sites location within Internet Settings and the other to maintain user choice, by simply…
Deploying Adobe Reader DC via ConfigMgr and Intune.
Last Updated on 05/09/2022 by Alex Welcome, in today’s post, I will demonstrate the complete end to end process on how to customise and deploy Adobe Reader DC via Microsoft Endpoint Manager (MEM) and Microsoft Endpoint Configuration Manager (MECM). As always, the customisations that I select during the process are examples only, change…
MEM – Managing Storage Sense
Last Updated on 04/06/2021 by Alex Update 02/06/2021: This post is still completely relevant today, however, I have created a new post that demonstrates configuring the below but using the settings catalog instead, see more here. Welcome! Today’s post is about managing Windows 10 storage settings via Microsoft Endpoint Manager. Managing Storage Sense…
Manage Google Chrome Policies via Intune
Last Updated on 25/03/2022 by Alex Welcome! In this second part of managing and deploying Google Chrome series, we’ll be looking into how to manage Google Chrome policies using Microsoft Endpoint Manager (aka Intune), if you missed the part on how to deploy Google Chrome, please find it here. In this post, I…
MEM – Deploy Google Chrome
Last Updated on 04/06/2021 by Alex Hi everyone, this will be the first post in a series of posts on how to deploy and manage Google Chrome browser via Microsoft Endpoint Manager (Aka Intune), today’s post is a straight forward one on how to deploy Google Chrome via the Win32 application model. Why…