Видео

Amazing, comprehensive and very easy to understand Though I have implemented MDE to one of my client. Follow all your steps to onboard devices via intune Device shows up in intune portal but cannot see them in security portal from Asset - Devices. Do you have any idea how can i fix that, Thanking you in advance Regards

Bro, no new updates 😐

correct me if i am wrong but with CAP - you CANNOT have a policy to check if the machine has an anti virus or not right? this could only be done by the intune compliance policy ?

thanks ! i learned some stuff :)

Nice video - Correct me if i am wrong but with CA - Block takes precedence right? lets say i got two CAs # one CA states BLOCK all users from accessing a Entra ID SSO app # second CA states allow all users to access a Entra ID SSO App, this means all users will be BLOCKED from accessing that Entra ID SSO app. Correct me if i am wrong but with CA - the most restrictive takes place? Lets say there are two CAs # one states users must have MFA enabled before accessing a Entra id SSO app # second CA states allow all users to access a entra ID SSO app without any specific authentications - This means when the users access this entra id sso app they will have to use MFA due to the first CA rule being the most restrictive

nice video, just a question here - by default why would you want user's to be able to join devices to ENTRA ID? This could be a security concern as what if some user's bring some devices that has malware in it - they could join it to the entra tenant and have access to more features. I would personally set the setting so, some sort of an IT person could join the device to it.

Good one. Thank you Rajith.

How do you keep Chrome updated?

Thanks for your session , I have one Question , I created a user on Entra id Admin center portal and sync to on premises, But still user not sync to on premises. Can u suggest on this Note : license : Microsoft Entra ID Free.

Thank you for this video but I have a question. 5:31 If I wanted to block sign in on private devices to locally installed office Apps (on windows, Mac, iOS, Android) but I wanted to allow people sign in to web apps should I leave the "Browser" unticked in the "Client apps" section?

Thank you sir very useful

Thanks for the info. Glad to see you're also a 'Friends' fan ;-)

There are some great policies, thanks for sharing. I have always overlooked Windows Phone when blocking unsupported Operating systems! Do you ever include GPS location in your location-based CA policy?

hello Rajith, how can we block access to task schedular?? i know we can block cmd, powershell, registry but want to know about task schedular, so that only admin can open that

Our BI department cannot us the Power BI from the Microsoft Store, any recommendations on installing the .EXE version via Intune as I've been having problems getting it installed with the following status 0x80072BF5.

How we can uninstall the m365 apps if app are deployed as xml file

Just a thought by this CA rules, are you also blocking the device while joining Intra?

Hello Sir, I was searching for Videos to prepare MS-102 exam, and landed on your page. I was like a savior for me. But couldn't find the other parts, can you please tell me if I can find other parts / continue for this. Thank you and I really appreciate your real guidance.

what are methods enable MFA scenario and creating conditional policy using template what are the scenario I am not cleat about logging to windows 354 portal enable mfa (manage) conditional access policy something Microsoft tag

Amazing video...best I have seen so far. Thank you sir

thanks for this video !!

Very usefull! Thanks

Thank you Rajith. I'm learning so much from you!

Great vid!

do we need to create a separate profile for each setting - are only for company wide settings?

Hi Rajith would like to see audit checklist and more video on Entra ID recommedation

Hi, can you please create a video on extension attributes and Graph.

Hi Sir, How do I block powershell from accessing Azure tenant?

Hi Rajith, Your explanation is pretty nice, i suggest you to have Videso on all Azure services, Wonderfull work🌟🌟

Thank you Rajith. Played around with the Microsoft SSO extension for hours before I saw your video. Ace!

is there a way to deploy as config profile form Intune

How to disable the same local admin account from intune? Is it better to use windows CSP( Custom Oma-uri) to enable the admin account Instead of intune policy from setting catalog?

A nice collection of CA policies. Always good to see some fresh thinking in this space!

great learning

Hello @ranjit Thank you for the detailed video. This information is helpful for creating policies. I’d like to know more about notifications for admins. Is there a way to be alerted if a user attempts to log in from a non-company device? If so, that would be very useful. For now, blocking access from unauthorized devices is working as expected.

Thanks for the video. I often see configuration policies that have both a device and a user setting. It is never clear to me if I need one or the other or both. In this case you chose the (user) option only. Can you explain why user was chosen in this case and if there would be implications for choosing the device option or both? I have been finding your content quite useful. Thanks!

If I sign-in to the PC using Administrator account and the password it doesn't work.

Hi, can we set a "OneDrive Shared folder" to be automatically synced on the OneDrive app, via Intune settings?

Thank you Mr Renjith. Good work simple explanations, This is helping me at work.

Did NOT work

How to upload bulk user external contact or bulk guest user through azure ad connect synchronisation

There is some misconception here. This token binding and protection described in the video, applies to PRT token only. Not to access token or session cookie. This is very important to understand that difference. It itself still doesn't protect from AiTM attack for example - although compliant device requirement does, kind of. I wouldn't use "session token" name, as it's really misleading - rather use a concrete artifact name, given protection is targeted to.

You're a great teacher! Detailed, thorough and good delivery. Thank you Rajith!

Thanks for another amazing video

Can you help me with how to create acceptable usage policy in intune?

Can we bind a particular EMail Account to a Particular Device, so that the user can only be accessible on this device?

Where is the Library Sync ?

could you pls do a playlist only for Intune troubleshooting

Great Video Rajith. CA is not applied to Windows Login or Microsoft Authenticator "Application" for obvious reasons, but they keep showing in the CA Reports as Not Covered. Any solution for this ?

Along with the usual must CA policies, the list includes not so common ones like blocking device code flow, disabling persistent browser sessions etc.