Event banner
AMA: Windows management with Intune
Event details
Do you manage Windows endpoints in Intune? Do you have questions that extend beyond configuration and involve ensuring security, compliance, and a seamless user experience on Windows? Join this Ask Microsoft Anything (AMA) and engage directly with Microsoft product engineers to get your questions answered. Let’s talk about hardware-backed device attestation, the settings catalog, BitLocker, App Control, firewall settings, baselines, and anything else related to endpoint management and security!
Post your questions in the Comments below. We'll have experts responding in the live stream and others in chat.
This session is part of Microsoft Intune: Tech Community Live. Add it to your calendar, RSVP for event reminders, and post your questions and comments below! This session will also be recorded and available on demand shortly after conclusion of the live event. |
192 Comments
- daisylee645Copper ContributorDoes moving Bitlocker keys from MBAM to Intune/Entra require an extra license? or is that part of Intune Plan 1?
- KaiserbotCopper ContributorAre Intune product team planning to release a more recent MDM Security Baseline for Windows 10 and later? No update since 2021..
- Mike-Danoski
Microsoft
The new baseline is set to roll out with this March release.
- tpeckmanCopper ContributorAre there any plans to support migration of devices from Hybrid-Join to Cloud-Join without wiping/re-enrolling the device?
- Joe_Lurie
Microsoft
tpeckman This is something that we really want to solve for, but as we are changing the device's identity (moving from Active Directory to Entra), certs and tokens and other things need to go away. We are, however, investigating how to make this easier.
Many of our clients are keeping existing devices as hybrid-joined and when new devices are being provisioned, those are cloud-native. Check out https://aka.ms/CloudNativeEndpoints for more information on this scenario.
- David_S165Brass ContributorAny plans to release the Education version of the device-based licensing to effectively replace KMS? I realize there are user-based licenses, but for those that already own KMS device licenses and just need KMS to work on devices not on the local network. Here is the Enterprise learn article, but no Education article that we could find. https://learn.microsoft.com/en-us/windows/deployment/deploy-enterprise-licenses?pivots=windows-11
- RussJ70Copper ContributorDo you recommend using Endpoint Security settings or Configuration profiles where the same settings are available in both areas...eg Bitlocker/Encryption?
- Char_CheesmanBronze Contributor
Thanks for participating in today's session of AMA: Windows management with Intune! For reference, the panel covered this topic at around 25:45.
- Wolfgang_Sauer
Microsoft
When will the 65000 errors fixed for the bitlocker profile? - FredericlemieuxBrass Contributorfor de moment the best configuration use rule only on microsoft defender also intune for not get conflit rule between both ?
- TODD D ALBOUMCopper ContributorAre there any plans to support Group Policy Preferences and item level targeting functionality in Intune?
- Char_CheesmanBronze Contributor
Thanks for participating in today's session of AMA: Windows management with Intune! For reference, the panel covered this topic at around 22:50.
- RichR-VPSBrass ContributorAnyone know if there is a good library of remediation scripts or deployment scripts etc maybe somewhere on github that I cannot seem to find? I would rather not reinvent the wheel if someone else has solved it for me.
- JaminAlmond
Microsoft
Hello Richard In addition to the information Brandon shared with you, I'd like to highlight the following GitHub repository. This resource may offer further insights or useful tools relevant to our discussion. Please feel free to explore it and let me know if you have any questions or need further clarification on anything. https://github.com/microsoft/mggraph-intune-samples - BrandonBrownBrass ContributorNot a single library, but both Adam Gross (https://github.com/AdamGrossTX/Toolbox/tree/master/Intune/Proactive%20Remediations) and Gary Blok (https://github.com/gwblok/garytown/tree/master/Intune) regularly post PR scripts to their Github repositories.
- MaenXeBrass ContributorAre there plans to support configuration files within device configuration profiles? It seems hacky to have to package a config file as an application, rather than just dropping it in a specific location.
- Joe_Lurie
Microsoft
MaenXe So I'm clear, are you asking for a sort of custom configuration profile where you can attach a PS script or whatever to configure the device, instead of using an actual Configuration Policy?
You could conceivably do this with a custom OMA-URI, if the setting exists as an MDM configurable setting, with a PowerShell script, or even Remediation script. If you're looking to add a script within a Configuration policy, I'm not aware of any plans for this. You can add that feedback though through https://aka.ms/IntuneFeedback.- MaenXeBrass ContributorNo, I'm asking about dropping an XML, CONF, or INI file on a system that is referenced by other application or services. I usually use GPP Files to do this.