Tag: Microsoft Intune

extensionAttributes – add values via Powershell + CSV file

It is common to have one or multiple extensionAttributes in an Azure AD environment for use with Intune for example. These extensionAttributes can be handled in a couple of different ways when it comes to managing the values set for each of those. For simplicity I’ve created a Powershell script that can add values to…



Device cleanup rules for Microsoft Intune

As an IT Administrator you want to keep your IT environment clean and tidy and the same goes for Microsoft Intune. By default all devices that has been inactive or stale and hasn’t checked in for over 270 days will automatically been removed from the console. In the latest update for Microsoft Intune dated July…



App Protection Policies for managed and unmanaged devices in Intune

In the latest update of Microsoft Intune, you now have the option to target App protection policies for Mobile apps if the device is Intune managed or if its unmanaged. The two options that for now is available, if you select not to target all app types are: Apps on unmanaged devices Unmanaged devices are…



Block external access for Service Accounts using Conditional Access in Azure AD

Conditional Access in Azure Active Directory is normally used for users and administrators to secure and control company data in Office 365 and Azure, but what about Service Accounts? Aren’t they a potential security risk? Using Service Accounts for scripts and other tasks related to Office 365, Azure and Azure AD is a normal practice…