Microsoft Intune

Customizing the power options in Start layout

by

This week is all about customizing the power options in the Start layout, and is the first follow-up on this post about customizing the account settings in Start layout. Again, it is important to start with that the fact that something is technically possible, does not mean that it should actually be done. In most cases, it should be up to the user to configure in the Start layout whatever they need to be productive. There are, however, cases in which an IT administrator might need to take a bit more control. That can be useful on shared devices, such as kiosk devices and Shared PCs. This post will be another part in the series to go through the different sections of the Start layout, …

Read more

Getting started with Android Enterprise personally owned devices with work profile

by

This week is all about the move of Android personally-owned devices to the Android Management API (also known as AMAPI). The Android Management API is the API that is already being used for all the different corporate-owned device flavors that might exist already within the environment. That API is the recommended path for Android device management, by Google. With that API, Google also provides its own companion app Android Device Policy. That means that it is no longer required to create and maintain a custom device policy controller (DPC) to talk to an API. Together, that should help with faster availability of new features and consistency between the all different Android Enterprise management flavors, as all of those flavors are now managed via the same …

Read more

Customizing the account settings in Start layout

by

This week is all about customizing the account settings in the Start layout. Customizing the Start menu layout has been the subject of discussion multiple times already on this blog. There is, however, a lot more that can be done. Of course, that something is possible, does not mean that it should be done. In most cases, it should be up to the user to configure in the Start layout whatever they need to be productive. There are, however, cases in which an IT administrator might need to take a bit more control. That can be useful on shared devices, such as kiosk devices and Shared PCs. This post will be part of a series to go through the different sections of the Start layout, …

Read more

Turning off account notifications in Start and multi-app kiosk mode

by

This week is also all about another relatively small, but nowadays essential, configuration to further enhance the Start layout experience. Especially when using multi-app kiosk mode with local accounts. That configuration is to turn off account notifications for Microsoft accounts (MSA) and local users in the user tile of Start. Turning off account notifications is especially relevant when using multi-app kiosk mode with local accounts, as that includes getting users to sign with a Microsoft account to backup their device, to manage cloud storage quotas, and more. Those account notifications might trigger users to perform actions that do not belong on managed devices and that are not available. Especially not on kiosk devices. It is actually pretty strange that those account notifications show on managed …

Read more

Hiding the recommended section from the Start layout and multi-app kiosk mode

by

This week is all about another relatively small, but essential, configuration to further enhance the Start layout experience. Especially when using multi-app kiosk mode. That configuration is to hide the recommended section from the Start layout. Hiding that section is especially relevant when using a multi-app kiosk mode, as that includes a link to the Settings app when there are no recommendations. Even though that might sound pretty small, it does take away another item that a user could potentially click on and hitting an unnecessary blockage. In those cases lesser is better. That means that there are definitely scenarios in which it can be really useful to prevent the Start layout from displaying recommended applications and files. This post will provide a closer look …

Read more

Using Microsoft Edge secondary tiles in the Start layout and multi-app kiosk mode

by

This week is all about Microsoft Edge secondary tiles. Microsoft Edge secondary tiles are website shortcuts that are pinned to the Start layout. Those pins provide quick access to specific websites directly from the Start layout. Basically, those pins function similar to any other app shortcuts that are pinned to the Start layout. Any user can create website shortcuts in the Start layout by simply navigating in Microsoft Edge to Settings > More tools > Pin to Start. There can scenarios in which it might be useful to already pre-pin specific websites for the user. The most common scenario is a multi-app kiosk mode configuration in which specific websites must be pinned for the users of those devices. That’s where Microsoft Edge secondary tiles become …

Read more

Using sensitivity labels for protecting labeled content in Microsoft 365 online apps

by

This week is all about Microsoft Edge. More specifically, this week is all about even using sensitivity labels for protecting Microsoft 365 online apps in Microsoft Edge. Sensitivity labels on itself are nothing new, using it in Microsoft 365 online apps not either, but support for using it in Outlook on the web is. The basics of sensitivity labels are still the same. After applying a sensitivity label, the IT administrator can prevent actions like copying, pasting, taking screenshots, forwarding emails, replying to emails, and more. Initially that functionality was only available in Microsoft 365 desktop applications, and now slowly moved towards Microsoft 365 online apps via Microsoft Edge. Within Microsoft Edge, that same behavior can now be enforced. Of course that does require the …

Read more

Introducing enhanced app inventory for Windows devices

by

This week is all about the new and enhanced app inventory for Windows devices. A lot has been written about that feature already, but it is such an important enhancement that it deserves it place on this blog as well. For many years the best thing for app inventory in Microsoft Intune was the Discovered apps report. That report provided some pretty limited insights abouts the apps that are installed on the devices and the totals for all devices in the environment. The sources used for those insights, however, were pretty limited, which was the main reason why the information was never really useful. That might all change now, with the enhancements to the app inventory for Windows devices. It now uses a new upload …

Read more

Dynamically removing preinstalled Microsoft Store apps using native functionality

by

This week is all about a really nice addition to the native functionality to remove preinstalled Microsoft Store apps. That nice addition is the ability to dynamically remove any preinstalled MSIX/APPX app, which builds on the functionality described earlier about removing preinstalled Microsoft Store apps using native functionality. The story around removing those apps is still the same. When working with Windows devices in an enterprise environment, a common request is to control the preinstalled Microsoft Store apps. These default apps, which ship as part of the Windows image, often include consumer-oriented or redundant functionality that does not align with corporate standards. That makes removing often desirable. Removing these apps often required custom scripting, or other creative solutions. Starting with Windows 11 version 24H2, however, …

Read more

Locking down Windows devices by suppressing key combinations

by

This week is not about something new. Not even close actually. This week is all about further locking down specific types of Windows devices, such as shared devices, kiosk devices, or even just actual locked down devices, by suppressing specific key combinations. There can be many scenarios on those types of devices that might require preventing users from using specific key combinations. That can be useful for preventing users from getting out of the locked down experience. And that should help with the device integrity and preventing unwanted access to the environment. There are actually multiple methods to actually achieve that configuration, and the best part is that Windows already contains one of those methods. As a part of the Windows Embedded experience, Windows contains …

Read more