byteben

Microsoft Endpoint Blog Posts - A New Home

ben@byteben.com (Ben Whitmore) — Mon, 08 Jun 2026 00:00:00 +0000

Back in March 2021 I was invited to contribute over at https://MSEndpointMgr.com

Block the Office File Transfer Endpoints to help prevent data leakage on Managed Devices

ben@byteben.com (Ben Whitmore) — Mon, 08 Aug 2022 00:00:00 +0000

In this post we will look at the Office File Transfer feature and implement a simple solution to prevent “one way” that users can leak corporate data.

Remove Built-in Windows 11 apps leveraging a Cloud-Sourced reference file

ben@byteben.com (Ben Whitmore) — Mon, 08 Aug 2022 00:00:00 +0000

In this quick post we will be removing built-in Windows 11 apps, for all users, and optionally showing you how to leverage a “Cloud-Source” as a reference file to select apps for removal.

Use Proactive Remediations to pop a Toast Notification when Unsupported Apps are found

ben@byteben.com (Ben Whitmore) — Mon, 08 Aug 2022 00:00:00 +0000

Many organsiations, against strong advice, still allow some users to install apps on their devices. Quite often this is applicable to software developers and IT admins, both being given permission to install apps to “test it works”. The old argument was that IT simply could not turn around app packages in Intune of ConfigMgr to keep up with the demand from developers

Windows Update Settings Compliance

ben@byteben.com (Ben Whitmore) — Mon, 08 Aug 2022 00:00:00 +0000

In this post I will show you how to use Proactive Remediations and Log Analytics, together, to ensure Windows Update Settings are Optimal and Compliant on your devices. This post comes on the back of a session both Aria Carley and I presented at #MMSMOA this year - Fun times!

How to install Printer Drivers and Printers from Intune using Win32 apps and PowerShell

ben@byteben.com (Ben Whitmore) — Mon, 03 Jan 2022 00:00:00 +0000

In this post I will show you how to easily install network printers with Intune using win32 apps and PowerShell.

Update Compliance - Checking client prerequisites

ben@byteben.com (Ben Whitmore) — Mon, 03 Jan 2022 00:00:00 +0000

Background

Before you can begin to process Update Compliance data from your devices, you must first ensure that they meet the requirements to participate in the Update Compliance process. Update Compliance uses Windows client diagnostic data for all of its reporting. It collects data for update deployment progress, Windows Update for Business configuration data, and Delivery Optimization usage data. Collected data is sent to a customer-owned Azure Log Analytics workspace.

SSO to domain resources from Azure AD Joined Devices - The MEGA Series

ben@byteben.com (Ben Whitmore) — Sun, 15 Aug 2021 00:00:00 +0000

Welcome to this new blog series which will hopefully demystify SSO to domain resources from Azure AD Joined devices - and get you up and working quickly with a comprehensive guide on AOVPN configuration.

Proactive Remediations - Getting your message across with repeated Toast Notifications

ben@byteben.com (Ben Whitmore) — Tue, 08 Jun 2021 00:00:00 +0000

Running custom actions during a Windows 10 Feature Update with Configuration Manager

ben@byteben.com (Ben Whitmore) — Mon, 12 Apr 2021 00:00:00 +0000

Deploying Windows 10 Feature Updates in your organisation can be approached in multiple ways. As we merge the perimeter with the Cloud some of us are trying to understand the best way to deliver Feature Updates to our devices. Should we deploy an in-place upgrade using a ConfigMgr task sequence? Perhaps we should push the Feature Update directly from ConfigMgr to our devices. Have we considered leveraging our CMG and using Microsoft as a source for the update binaries to save our VPNs? Maybe some of us are on a co-management journey and are looking at using WUfB. Which ever technology we are leveraging one of the questions that normally gets asked is “Can we control the update process in a way that lets us ‘Run Stuff’ after the Feature Update has completed”.