Block Apple Facetime Built-in App with Microsoft Intune

Nicolas PilonApp Protection Policies, Intune, SCCMLeave a Comment

Block Apple Facetime Intune

A new bug was discovered with Apple’s Facetime app that gives the caller the ability to listen to the other device and even watch the video without approving the call. This vulnerability is not giving access to corporate data or personal information, but have more consequences on personal level. Even though Apple temporarily kill the switch of the service and seems to have solved the problem via a future software update, there are some actions that can be made if you want to avoid trouble. You can manually turn off the Facetime app with iOS and MacOS. But, can we … Read More

Migrate Users from iOS Mail Native to Microsoft Outlook with Intune

Nicolas PilonApp Protection Policies, Conditional Access, EMS, Intune3 Comments

Nowadays, the smartphone takes up a lot of room in our personal and professional lives. Being able to receive your work emails directly on a mobile device is becoming popular. Based on latest numbers provided by Brad Anderson from Microsoft, companies are more willing to use mobile device management solution like Microsoft Intune and let users access company data from outside the corporate network. Some companies shared beautiful stories of using Microsoft’s EMS solution, like Pepsi Cola and much more. Companies gain a lot of benefits in letting their employees access corporate data from everywhere, especially emails. There are several mail applications available in the … Read More

Import Windows Devices for AutoPilot using Microsoft Intune

Benoit LecoursIntune11 Comments

Windows Autopilot is a new and emerging solution designed that allows to setup and pre-configure Windows devices for your environment using Azure and Intune. The goal of Autopilot is to reduce the Os deployment complexity. If done correctly, a user logs to an out-of-box computer, logs on his computers with his ADD user account and applications and configurations gets deployed. All that with minimum infrastructure requirements. When announced a couple of months ago, Autopilot has its flaws but it’s improving very fast. One of those flaws was that device importation was made from the Windows Store for Business or the Microsoft … Read More

Updating your Mobile Devices against Meltdown and Spectre with Intune

Nicolas PilonEMS, IntuneLeave a Comment

Everyone has heard of Meltdown, and Spectre vulnerabilities in modern computers leak passwords and sensitive data. In case you don’t, the most important thing to remember is to update all devices that mainly have an Intel processor, including mobile devices. If you are using Microsoft Intune to manage mobile devices in your organization, you can configure compliant rules to force the users to update their operating system version. For those who want to keep their old OS version, will lose their access to Office 365 at one point. It’s essential that employees know the importance of updating their devices more often, … Read More

How to Deploy an iOS Application with Intune and SCCM

Benoit LecoursIntune, SCCM9 Comments

Updated 2018-03-19 One of Microsoft Intune feature is to deploy useful mobile applications that your users need to get their job done. We can think of the Office suite such as Word, Excel, Powerpoint and One Note. This blog post will show how to deploy Microsoft Word on managed iOS devices with Microsoft Intune and SCCM. This is the 9th post of the Mobile Device Management with Intune and SCCM 2012 blog series. Microsoft Word for iOS devices requires Mobile Application Management (MAM) policies in Microsoft Intune. Since it’s a pre-requisites for Microsoft Word, we will configure a MAM policy … Read More

No Enrollment Policy during Intune Client Installation

Nicolas PilonClient, Intune, SCCM1 Comment

  When a company wants to manage an iOS mobile device, an Apple Push Notification Service (APN) certificate is installed on the iOS devices. This certificate installation makes sure that the connectivity between the devices, Apple, and your MDM solution is trusted. Intune makes no exception to this process. It’s the main reason why, from Intune or SCCM console, you have the possibility to send remote actions directly on iOS devices. After the certificate is configured in Intune, users can install the Company Portal app to enroll their devices (Android, iOS, Windows). When you open the Company Portal for the … Read More

How to Strengthen Security for Intune with RBAC in SCCM

Nicolas PilonApplication, Console, Intune, SCCMLeave a Comment

  The majority of companies use SCCM to manage laptops, computers, servers and some for mobile devices, if they use Microsoft Intune in hybrid mode. In some situations, Intune and SCCM management is done by 2 different teams. Except for the Full Administrator role in SCCM, it’s possible to separate Intune with Configuration Manager infrastructure in the console by using security roles and security groups (RBAC). The goal is to ensure that an Intune administrator does not access Configuration Manager client devices and objects, as you don’t want to end up with people who may wipes or manages mobile devices when they are … Read More

Intune Client | Error User License Type Invalid

Nicolas PilonClient, Intune, SCCM6 Comments

  The starting point of all mobile management project is enrolling devices. Without enrollment, you can’t manage any devices. When running in hybrid mode, the enrollment process is different than running Microsoft Intune in standalone mode. The SCCM Service Connection Point role keeps connectivity between both end (SCCM on-premise and the Cloud). Both environments must be synchronized, otherwise, you have chance of getting Intune error User License Type Invalid during Intune enrollment on your mobile devices. This post will explains how to resolve this issue. Intune Error User License Type Invalid This is the error message shown just before the enrollment process when you click Enroll : If … Read More

How to install Microsoft Intune Client for MAC OSX

Nicolas PilonClient, Console, Intune, REPORT, SCCMLeave a Comment

Did you ever wanted to install the Microsoft Intune client on MAC OSX? Microsoft Intune standalone supports Apple operating systems since November 2015. SCCM 1602 is required to support the Microsoft Intune client with the SCCM connector (hybrid environment). The Intune client is a lightweight version of the SCCM client. You can deploy some policies, SCEP certificates, VPN and WiFi profiles. There is also a hardware inventory scan on the devices. In a previous post, we explained how to set up a compliance policy for MAC OSX, now that our client is ready to receive the compliance policy, we will install the … Read More

How to install SCCM 2012 R2 Windows Intune Connector

Benoit LecoursSCCM2 Comments

Download and own part 1 to 18 of the SCCM 2012 R2 Installation Guide in a single PDF file. Use our products page or use the download button below. This blog post won’t be updated, only the document will be.   In part 1 of this blog series, we planned our hierarchy, prepared our Server and Active Directory. In part 2, we installed and configured SQL in order to install SCCM. In part 3, we installed a stand-alone Primary site. In the next 16 parts, we will describe how to install the numerous Site Systems roles available in SCCM. Role installation order is not important, you … Read More