Allow or Block External Extensions from Being Installed for User Policy using Intune
Control the installation of external extensions in Microsoft Edge using Intune Settings catalog to restrict extensions to the Edge Add-ons store
Endpoint Tech Blog
Intune insights that actually ship
Practical Microsoft Intune, Autopilot, and endpoint management tips, written for admins who fix things for a living.
Intune Insights & Tips
July 28, 2026
· By Allester Padovani
Block Untrusted Executables to Prevent Ransomware Attacks using Intune ASR Rule
Enable the Use advanced protection against ransomware ASR rule in Microsoft Intune to block untrusted executables and reduce the risk of ransomware...
July 23, 2026
· By Allester Padovani
Restrict Web Access to Allowed URLs in Edge and Chrome with Intune
Use URL blocklist and allowlist in a single Intune Settings catalog policy to allow only specific sites in Microsoft Edge and Google Chrome
July 21, 2026
· By Allester Padovani
Deploy Windows 11 25H2 with Intune Feature Update Policy
Target Windows 11 25H2 (2025 Update) on Intune-managed devices using a Feature Update profile and a dynamic device group
July 16, 2026
· By Allester Padovani
Implementing Windows Autopatch with Microsoft Intune
Set up automated Windows, Microsoft 365, Edge, and Teams updates using Autopatch groups and deployment rings
July 14, 2026
· By Allester Padovani
How to Expedite Out-of-Band Security Updates with Intune
Deploy critical security patches immediately using Intune's Expedited Quality Updates feature to protect your organization from emerging threats
July 9, 2026
· By Allester Padovani
Enable Boot-Start Driver Initialization Policy to Reduce Impact of Malware in Systems using Intune
Control which drivers load at Windows boot with Early Launch Antimalware so only trusted drivers run and malicious or rootkit drivers are blocked b...
July 7, 2026
· By Allester Padovani
Configure Microsoft Defender SmartScreen to Block Potentially Unwanted Apps with Microsoft Intune
Enable Microsoft Defender SmartScreen including the option to block potentially unwanted apps
July 2, 2026
· By Allester Padovani
Informing Users of Newly Enrolled Devices with Microsoft Intune
Turn on enrollment notifications in Microsoft Intune so users get an email or push alert when a new device is enrolled with their account
June 30, 2026
· By Allester Padovani
Working with Personal Windows Devices: Secure Access Options
Give users secure access to corporate data on personal Windows PCs without enrolling devices in Intune. Using session controls, managed apps, or vi...
June 25, 2026
· By Allester Padovani
Managing Personal Data Encryption for Known Windows Folders with Microsoft Intune
Enable Personal Data Encryption (PDE) for Documents, Desktop, and Pictures using the Intune disk encryption template so data is protected with Wind...
June 23, 2026
· By Allester Padovani
Enabling Optional Windows Updates with Microsoft Intune
Use an Intune Custom configuration profile to control optional Windows updates and controlled feature rollouts (CFRs) via the AllowOptionalContent ...
June 18, 2026
· By Allester Padovani
Securing Microsoft 365 Apps with Microsoft Entra Global Secure Access
Route Microsoft 365 traffic through Microsoft Entra Global Secure Access and enforce access only from compliant network paths using Conditional Access
June 16, 2026
· By Allester Padovani
Getting Started with the Microsoft Defender Browser Protection Extension for Google Chrome
Deploy and manage the Microsoft Defender Browser Protection extension in Chrome via Microsoft Intune so users get phishing and malicious-site prote...
June 11, 2026
· By Allester Padovani
Excluding Specific Files from Being Uploaded to OneDrive with Microsoft Intune
Use the Intune Settings catalog to exclude file types or names from OneDrive sync. For example desktop shortcuts. So they stay local and do not syn...
June 9, 2026
· By Allester Padovani
Installing Windows Security Updates During Windows Out-of-Box-Experience with Microsoft Intune
Use the Enrollment Status Page in Microsoft Intune to install Windows quality updates during OOBE so devices are patched before users sign in
June 4, 2026
· By Allester Padovani
Managing Account Management on Shared PCs with Microsoft Intune
Configure Shared PC Mode account management in Windows 11 with Intune so cached user accounts are cleaned automatically by disk space and inactivit...
June 2, 2026
· By Allester Padovani
How to Disable Windows Spotlight with Microsoft Intune
Turn off Windows Spotlight on the lock screen and desktop using a Settings catalog configuration profile in Microsoft Intune
May 28, 2026
· By Allester Padovani
Free up Space for Windows 11 Upgrades with Intune Remediation
Use Intune Proactive Remediation to detect low free space and prompt users to clean Recycle Bin and Downloads so Windows 11 feature updates can com...
May 26, 2026
· By Allester Padovani
Lock Windows 11 to 24H2 During Onboarding with Microsoft Intune
Stop new or re-imaged devices from upgrading to a newer feature update before Windows Update for Business takes over by pinning them to Windows 11 ...
May 21, 2026
· By Allester Padovani
Protecting Against Device Code Phishing Attacks in Microsoft Entra ID
Block or restrict the device code authentication flow with Conditional Access in Microsoft Entra ID to reduce the risk of device code phishing and ...
May 19, 2026
· By Allester Padovani
Config Refresh in Microsoft Intune: Faster Policy Enforcement Without Check-Ins
Use Config Refresh so devices reapply Intune policy locally at a configurable interval, detect drift, and revert settings without waiting for the n...
May 14, 2026
· By Allester Padovani
How to Configure Google Chrome Single Sign On (SSO) with Entra ID and Microsoft Intune
Enable automatic sign-in to Microsoft cloud services in Google Chrome using Entra ID and Intune Administrative Templates. No Windows Accounts add-o...
May 12, 2026
· By Allester Padovani
How to Configure Intune Energy Settings Always ON with Microsoft Intune
Keep Windows devices from sleeping or locking using a Settings catalog power policy in Microsoft Intune for kiosks, POS, and shared workstations
May 7, 2026
· By Allester Padovani
How to Configure Defender for Endpoint Web Filter with Microsoft Intune
Use Microsoft Defender for Endpoint web content filtering to monitor and block web traffic on devices outside your corporate network, with SmartScr...
May 5, 2026
· By Allester Padovani
How to Remove Old User Profiles with Microsoft Intune
Use Microsoft Intune Proactive Remediation to detect and remove stale Windows user profiles so disk space stays available and logins do not fail
May 1, 2026
· By Allester Padovani
How to Configure Windows Updates for Business with Microsoft Intune
Control update rings, feature updates, and quality updates for Windows 10 and 11 using Windows Update for Business policies in Microsoft Intune
April 29, 2026
· By Allester Padovani
How to Remove OneDrive Personal from Explorer with Microsoft Intune
Hide the OneDrive Personal entry in Windows Explorer using a PowerShell script or Proactive Remediation deployed via Microsoft Intune
April 27, 2026
· By Allester Padovani
How to Delete Microsoft Teams Cache with Microsoft Intune
Clear Microsoft Teams cache across devices using a PowerShell script deployed via Intune to fix loading or boot-loop issues
April 24, 2026
· By Allester Padovani
How to Proactively Remove Unwanted Desktop Shortcuts with Microsoft Intune
Use Proactive Remediation to detect and remove unwanted desktop shortcuts on Windows devices on a schedule
April 22, 2026
· By Allester Padovani
How to Manage Desktop Shortcuts with Microsoft Intune
Deploy and update desktop shortcuts for apps, sites, or web apps using a PowerShell script packaged as a Win32 app in Intune
April 20, 2026
· By Allester Padovani
How to Create Win32 App (.intunewin) with Microsoft Intune
Package installers as .intunewin with the Win32 Content Prep Tool, then add them as Win32 apps in Intune for deployment
April 17, 2026
· By Allester Padovani
How to Remove Windows 11 Taskbar Widgets and Chat with Microsoft Intune
Hide the taskbar widgets button and Teams Chat icon using a Settings catalog profile so the Windows 11 taskbar fits corporate standards
April 15, 2026
· By Allester Padovani
How to Monitor OneDrive Status with Microsoft Intune
Turn on OneDrive sync admin reports via an Intune configuration profile so you can see sync status and health in the Microsoft 365 admin center
April 13, 2026
· By Allester Padovani
How to Enable Windows Hello with Microsoft Intune
Turn on Windows Hello for Business (PIN and biometrics) using a PowerShell script deployed via Intune
April 10, 2026
· By Allester Padovani
How to Disable Connect Printer Automatically with Microsoft Intune
Turn off Windows automatic network printer discovery using a PowerShell script deployed via Intune
April 8, 2026
· By Allester Padovani
How to Enroll macOS Devices in Intune – A Step-by-Step Guide
Choose ADE, manual enrollment, or user enrollment depending on device ownership and Apple Business Manager
April 6, 2026
· By Allester Padovani
Managing macOS Security and Compliance in Intune
Enforce compliance rules, FileVault encryption, firewall, and Gatekeeper on enrolled Macs. Then monitor status and pair with Conditional Access
April 2, 2026
· By Allester Padovani
Preparing Intune Devices for Secure Boot Certificate Updates 2026
Get Windows devices ready for the 2026 Secure Boot certificate expiration by enabling certificate updates in Intune and monitoring rollout across y...
March 31, 2026
· By Allester Padovani
How to Setup macOS LAPS (Local Administrator Password Solution) with Intune
Configure Automated Device Enrollment so new Macs get a managed local admin account with a random password stored in Intune
March 30, 2026
· By Allester Padovani
How to Allow or Block Cellular Data with Microsoft Intune
Use a Settings catalog profile to allow or block cellular data on Windows devices. Control costs and steer traffic to Wi‑Fi
March 27, 2026
· By Allester Padovani
Install Intune Company Portal on Mac (macOS)
A clear, user-friendly walkthrough for installing Company Portal, enrolling your Mac, and passing required compliance checks.
March 26, 2026
· By Allester Padovani
How to Renew Apple MDM Push Certificate for Microsoft Intune
Replace your expiring APNs certificate so iOS, iPadOS, and macOS management continues without interruption
March 25, 2026
· By Allester Padovani
How to Create Apple MDM Push Certificate for Microsoft Intune
Obtain and upload the APNs certificate so Intune can manage iOS, iPadOS, and macOS devices
March 24, 2026
· By Allester Padovani
How to Install Microsoft 365 Apps to macOS Devices with Microsoft Intune
Deploy Word, Excel, PowerPoint, and other Microsoft 365 apps to Intune-managed Macs from the cloud
March 23, 2026
· By Allester Padovani
Learn about Local Autopilot Reset with Microsoft Intune
Reset Windows devices to a clean, managed state on-site without a full wipe. Ideal for handover and repurposing
March 20, 2026
· By Allester Padovani
How to Configure Multi-Factor Unlock with Microsoft Intune
Require two Windows Hello for Business factors at device unlock using a Custom OMA-URI profile in Intune
March 19, 2026
· By Allester Padovani
How to Hide "Turn on an ad privacy feature" in Chrome with Microsoft Intune
Suppress the Chrome Privacy Sandbox / ad privacy prompt on managed devices using imported ADMX and an Intune configuration profile
March 18, 2026
· By Allester Padovani
How to Configure Minimum Password Age with Microsoft Intune
Enforce how long users must keep a password before changing it using a Settings Catalog profile
March 17, 2026
· By Allester Padovani
How to Allow or Block the Camera with Microsoft Intune
Control camera access on managed Windows devices using a Settings Catalog profile
March 16, 2026
· By Allester Padovani
How to Allow or Block Windows Widgets with Microsoft Intune
Control the Windows 11 Widgets panel on managed devices using a Settings Catalog profile
March 13, 2026
· By Allester Padovani
How to Schedule a Reboot with Microsoft Intune
Set one-time or recurring reboot schedules on managed Windows devices using a Settings Catalog profile
March 12, 2026
· By Allester Padovani
How to Enable or Disable Windows Fast Startup with Microsoft Intune
Control Windows Fast Startup on managed devices using a PowerShell script deployed via Intune
March 11, 2026
· By Allester Padovani
How to Configure Display Mode with Microsoft Intune
Enforce how Windows uses built-in and external displays using a Settings Catalog profile
March 10, 2026
· By Allester Padovani
Learn about Device Preparation (Autopilot v2) with Microsoft Intune
Understand and set up the newer Autopilot flow that enrolls Windows devices without hardware hash registration
March 9, 2026
· By Allester Padovani
How to Deploy HP Support Assistant with Microsoft Intune
Package HP Support Assistant as a Win32 app and deploy it to managed Windows devices via Intune
March 6, 2026
· By Allester Padovani
Improving Network Protection with the Minimize Simultaneous Connections Policy in Intune
Configure Windows Connection Manager policies in Intune to control how devices manage multiple network connections, reducing security risks and imp...
March 5, 2026
· By Allester Padovani
How to Configure Screen Lockout Time with Microsoft Intune
Set how long Windows can be idle before the screen locks using a Settings Catalog profile
March 4, 2026
· By Allester Padovani
How to Block Control Panel and Windows Settings with Microsoft Intune
Restrict access to Control Panel and Windows Settings on managed devices using a Settings Catalog profile
March 3, 2026
· By Allester Padovani
How to Remove the Personal OneDrive Icon with Microsoft Intune
Block personal OneDrive sync and remove the extra OneDrive icon from Windows Explorer using a Settings Catalog profile
March 2, 2026
· By Allester Padovani
How to Disable Edge Browser Notifications with Microsoft Intune
Block desktop notifications in Microsoft Edge on managed Windows devices using a Settings Catalog profile
February 27, 2026
· By Allester Padovani
How to Disable Chrome Browser Notifications with Microsoft Intune
Block desktop notifications in Google Chrome on managed Windows devices using a Settings Catalog profile
February 26, 2026
· By Allester Padovani
How to Deploy Google Chrome Bookmarks with Microsoft Intune
Push a standard set of bookmarks to Chrome on managed Windows devices using a Settings Catalog profile and a JSON bookmark list
February 25, 2026
· By Allester Padovani
How to Manage Windows Updates with Microsoft Intune
Use update rings, optional reporting, and restart notifications to control when and how Windows updates install on managed devices
February 24, 2026
· By Allester Padovani
How to Automatically Update Google Chrome with Microsoft Intune
Control Chrome update behavior across your fleet using imported ADMX templates and an Intune configuration profile
February 23, 2026
· By Allester Padovani
How to Configure Auto-Login in Outlook with Microsoft Intune
Use a Settings Catalog profile to provision Outlook with the user’s primary SMTP address so mail opens without manual setup
February 20, 2026
· By Allester Padovani
How to Deploy a WiFi Profile with Microsoft Intune
Push a WiFi (WLAN) configuration profile to Windows devices so they connect to your network automatically
February 19, 2026
· By Allester Padovani
How to Deploy Shortcuts to the Public Desktop with Microsoft Intune
Push desktop shortcuts to the public desktop using a Win32 app and PowerShell
February 18, 2026
· By Allester Padovani
How to Setup Endpoint Privilege Management with Microsoft Intune
Let users run as standard user and elevate only approved apps with Intune EPM
February 17, 2026
· By Allester Padovani
How to Deploy Lockscreen with Microsoft Intune
Push a custom lock screen image to Windows devices using a Win32 app and a Settings Catalog profile
February 16, 2026
· By Allester Padovani
How to Block Removable Storage with Microsoft Intune
Restrict USB drives and other removable storage on Windows devices using Intune device restrictions
February 13, 2026
· By Allester Padovani
How to Create a Microsoft Intune Device Enrollment Manager
Add a non-admin account that can enroll many devices in Intune
February 12, 2026
· By Allester Padovani
Customizing Your Intune Company Portal Branding and Appearance
Apply your organization’s branding and support details to the Company Portal
February 11, 2026
· By Allester Padovani
How to Enroll Windows Devices in Microsoft Intune
Options for enrolling personal and organization-owned Windows devices in Intune
February 10, 2026
· By Allester Padovani
How to Deploy PowerShell Scripts with Microsoft Intune
Run PowerShell scripts on managed Windows devices using Intune Scripts
February 9, 2026
· By Allester Padovani
How to Install Microsoft 365 Apps to Windows 10/11 Devices with Microsoft Intune
Add and deploy the Microsoft 365 Apps suite (Office) to managed Windows devices from the Intune admin center
February 6, 2026
· By Allester Padovani
How to Configure Bluetooth Settings with Microsoft Intune
Control discoverability, advertising, encryption, and more for Bluetooth on managed Windows devices
February 5, 2026
· By Allester Padovani
How to Disable Bluetooth with Microsoft Intune
Turn off Bluetooth on managed Windows devices using Intune Settings Catalog
February 4, 2026
· By Allester Padovani
How to Deploy Universal Print Printer with Microsoft Intune
Push Universal Print cloud printers to Windows devices using Intune Printer Provisioning
February 3, 2026
· By Allester Padovani
How to Disable Microsoft Store with Microsoft Intune
Turn off the Microsoft Store app for end users while keeping Intune-based Store app deployment
February 2, 2026
· By Allester Padovani
How to Block Google Chrome Extensions with Microsoft Intune
Control and restrict Chrome extension installations across your organization using Microsoft Intune
January 30, 2026
· By Allester Padovani
How to Install Edge Extensions with Microsoft Intune
Deploy Microsoft Edge extensions automatically across your organization using Microsoft Intune
January 29, 2026
· By Allester Padovani
How to Install Google Chrome Extensions with Microsoft Intune
Deploy Chrome extensions automatically across your organization using Microsoft Intune
January 28, 2026
· By Allester Padovani
How to Disable Windows 11 Built-in Teams with Microsoft Intune
Disable the built-in Teams chat app on Windows 11 devices using Microsoft Intune
January 27, 2026
· By Allester Padovani
How to Install Zoom Desktop Client with Microsoft Intune
Deploy Zoom Desktop Client across your organization using Microsoft Intune
January 26, 2026
· By Allester Padovani
How to Deploy SharePoint Sites with Microsoft Intune
Deploy SharePoint site libraries automatically using Microsoft Intune with remediation scripts
January 23, 2026
· By Allester Padovani
How to Create a Local Admin with Microsoft Intune
Create local administrator accounts on Windows devices using Microsoft Intune
January 22, 2026
· By Allester Padovani
How to Configure UAC (User Account Control) with Microsoft Intune
Configure User Account Control settings to enhance security using Microsoft Intune
January 21, 2026
· By Allester Padovani
How to Prevent the Computer From Joining a Homegroup with Microsoft Intune
Secure your network by preventing computers from joining Homegroups using Microsoft Intune
January 20, 2026
· By Allester Padovani
How to Disable USB Ports with Microsoft Intune
Block removable storage devices and USB ports to enhance security using Microsoft Intune
January 19, 2026
· By Allester Padovani
How to Deploy Background with Microsoft Intune
Deploy custom desktop backgrounds across your organization using Microsoft Intune
January 16, 2026
· By Allester Padovani
How to Align Windows 11 Taskbar Left with Microsoft Intune
Customize Windows 11 taskbar alignment using PowerShell scripts and Microsoft Intune
January 15, 2026
· By Allester Padovani
How to Configure LAPS with Microsoft Intune
Secure local administrator passwords with Local Administrator Password Solution (LAPS) using Microsoft Intune
January 14, 2026
· By Allester Padovani
How to Deploy TeamViewer QS with Microsoft Intune
Deploy TeamViewer QuickSupport to desktop using Microsoft Intune
January 13, 2026
· By Allester Padovani
How to Remove Preinstalled Apps with Microsoft Intune
Remove unwanted preinstalled Windows apps using PowerShell scripts and Microsoft Intune
January 12, 2026
· By Allester Padovani
How to Deploy Chrome Browser with Microsoft Intune
Deploy Google Chrome browser across your organization using Microsoft Intune
January 9, 2026
· By Allester Padovani
How to Configure BitLocker with Microsoft Intune
Secure your devices with BitLocker encryption using Microsoft Intune
January 8, 2026
· By Allester Padovani
How to Deploy 7-Zip with Microsoft Intune
Deploy 7-Zip file compression tool across your organization using Microsoft Intune
January 7, 2026
· By Allester Padovani
How to Automatic Configure OneDrive with Microsoft Intune
Automatically configure OneDrive profiles with user credentials using Microsoft Intune
January 6, 2026
· By Allester Padovani
How to Deploy Windows Default Apps with Microsoft Intune
Configure default application associations for Windows devices using Microsoft Intune
January 5, 2026
· By Allester Padovani
How to Configure Account in Outlook with Microsoft Intune
Automatically configure Outlook profiles with user credentials using Microsoft Intune
January 2, 2026
· By Allester Padovani
How to Deploy Taskbar and Start Layout with Microsoft Intune
Standardize the Windows 11 Start menu and taskbar across your organization using an XML layout and Intune
January 1, 2026
· By Allester Padovani
How to Deploy Wallpaper with Microsoft Intune
Deliver a custom desktop background to Windows 10/11 devices using a Win32 app and a Settings catalog profile
December 30, 2025
· By Allester Padovani
How to Deploy Advanced IP Scanner with Microsoft Intune
Package and deploy Advanced IP Scanner to Windows 10/11 devices using Intune Win32 app management
December 25, 2025
· By Allester Padovani
How to Send Custom Notifications with Microsoft Intune
Push custom messages to users on managed iOS, iPadOS, and Android devices from the Intune admin center
December 23, 2025
· By Allester Padovani
How to Locate a Device with Microsoft Intune
Use Intune’s remote device action to find a lost or stolen device on supported platforms
December 18, 2025
· By Allester Padovani
How to Deploy Adobe Reader DC with Microsoft Intune
Package and deploy Adobe Reader DC to Windows 10/11 devices using Intune Win32 app management
December 16, 2025
· By Allester Padovani
Step-by-Step Microsoft Intune Autopilot Setup Guide
Get new Windows devices ready for users with Windows Autopilot and Microsoft Intune. No imaging required
December 11, 2025
· By Allester Padovani
How to Configure Chrome Startup Page with Microsoft Intune
Define which pages open when Google Chrome launches on Intune-managed Windows devices
December 9, 2025
· By Allester Padovani
How to Configure Edge Startup Page with Microsoft Intune
Set a consistent start experience for Microsoft Edge on managed Windows devices using Intune
…