Jóhannes's blog

  • Who has been logging in?

    Did you know that you can see the entra user GUID of the accounts that have been logging into intune managed devices? You only need the Microsoft.Graph.Authentication Module to run this, as I don’t rely on mggraph cmdlets to do anything (and neither should you!) All you need to do is input the Intune device…

    ·

  • Last Authentication Method Used

    Ever wondered which authentication method your users last used to sign into their device? Digging this out of entra can be a chore, assuming you even have access to the entra portal in the first place. It basically grabs the GUID of the last credential provider used, chucks that into the hashtable and outputs the…

    ·

  • Collecting Files with Intune

    Intune has a built in feature that collects diagnostics logs, but what if you need to collect a log file very quickly and can’t be bothered to wait? or just some specific file that has nothing to do with intune logging at all? One way to tackle this is to use a combination of azure…

    ·

  • One Liner Powershell Commands In Win32 Application

    Intro Do you always need to put actual content into your win32 app in intune? lets take a look. Basics of a win32 app What is a win32 app composed of? When you create a Win32 application in intune, you must provide a intunewin file. The general idea is that you put an app installation…

    ·

  • Dealing With Misbehaving MSI Files In Intune

    Intro I have deployed a whole lot of apps in my IT career, and occasionally i need to deal with weird nonsense from the vendor. Lets take a look at one recent example The Problem This is just another app, what could possibly go wrong? After wrapping the app with IntuneWinAppUtil.exe and then when i…

    ·

  • Provisioning Entra Users On-Demand with Powershell Graph

    The Scenario The customer relies on active directory as their source of authority for their user identity they are using entra cloud sync to connect active directory to entra When they create a new user in active directory it can take up to 2 minutes for the new user to appear in entra, not the…

    ·

  • Adding VS Code Toolbox to Windows Sandbox

    I just upgraded to Windows 11 24H2 and notice to my absolute horror that powershell_ise is no longer there 😭 I normally use Visual Studio Code for the majority of my script writing but setting up vscode with what I want everytime I opened sandbox got old real fast and the powershell_ise was always there…

    ·

  • Enrolling Devices To Autopilot Using a App Registration

    Intro Normally you would use a built in method to add your existing devices into autopilot, but that is not always possible due to various reasons. such as the devices are not hybrid joined, no SCCM to grab the hardware hash from or the devices are simply not managed at all. The App Registration In…

    ·

  • Collect and Store Monitor Metadata in Azure Tables

    Intro I’ve always found that the best way to learn about a feature is by having a valid use case for that feature. Azure tables has been on my radar for years, but I didn’t know what to do with it, that is until Hailey Phillips barged into my office and said: I need a…

    ·

  • Managed by Co-Managed?

    I was laying in my banana hammock in my office when Martin Himken karate kicked in my office door and wakes me up. “Gelegentlicher Notfallalarm! after we removed all the SCCM clients from our environment, Intune still thinks that some clients are co-managed, you need to fix this immediately” Well, mister himken was indeed right.…

    ·

    ,