I recently discovered that I caused an unintended side effect on Windows 10 when deploying a default taskbar for all users. In my post Intune Deploy Default Taskbar I inadvertently introduced a bug to the Windows 10 Start Menu making it so users can’t customize anything. The bug is that users can pin programs to…
As the end of Windows 10 starts creeping up we have to adapt some of our methods to support mixed environments with Windows 10 and Windows 11. Most settings in Microsoft Intune aren’t specific to Windows 10 or Windows 11 some settings are specific to the version. For example, one of them is the Windows…
Update The process detailed below works perfectly on Windows 11 however, on Windows 10 the process below will lock the Start Menu layout preventing users from being able to pin anything to the Windows 10 Start Menu or change anything in the Start Menu. The process to fix this is to also deploy a default…
When you are managing devices with Microsoft Intune aka Microsoft Endpoint Manager it’s great to control BitLocker but silently enabling BitLocker for all devices is even better. Here is everything you need to know to silently enable BitLocker with Intune. Disk Encryption Policy Profile First up we need to create a disk encryption policy profile…
Intune aka Microsoft Endpoint Manager can be extremely powerful but as it always goes with great power comes great responsibility. To make sure I’m only targeting the devices I want, I like to make a few dynamic device groups that I’ll use for various Intune policy targeting. The dynamic device groups I create are: By…
