Your go-to resource for Microsoft Intune best practices, tips, and tricks
Some organizations prefer to hide the Microsoft Store app from users to reduce unsanctioned installs and keep PCs consistent. You can do that with ...
To reduce risk and keep browsers consistent, many organizations restrict which Chrome extensions users can install. Microsoft Intune’s Settings C...
If your organization uses Microsoft Edge on Windows, you can push specific extensions to devices so every user has the same add-ons without manual ...
Many organizations standardize on Google Chrome and want specific extensions installed on every managed device. Microsoft Intune can force-install ...
Windows 11 includes a built-in Teams experience in the taskbar that is aimed at consumer and personal accounts. On managed business devices, many o...
Rolling out Zoom on company Windows PCs is straightforward when you use Microsoft Intune. This walkthrough covers getting the right installer from ...
OneDrive can sync SharePoint document libraries to Windows devices. Microsoft Intune can push a list of team site libraries to sync automatically u...
Many organizations use a dedicated local administrator account on each Windows device for support and break-fix. Intune doesn’t include a single ...
User Account Control (UAC) in Windows prompts users when an app or action needs administrator rights, helping block unauthorized changes. You can e...
Homegroup was a Windows feature for sharing files and printers on a small network. Microsoft deprecated Homegroup in Windows 10 version 1803 and re...
Removable storage (USB drives, external disks, memory cards) can be used to copy data off devices or introduce malware. Many organizations restrict...
Intune doesn’t include a native “deploy wallpaper” setting. You can still push a corporate desktop background by (1) copying the image to the...
Windows 11 uses a centered taskbar by default. Many organizations prefer the classic left-aligned layout for consistency with Windows 10 or user pr...
Shared or weak local administrator passwords across devices increase risk: if one machine is compromised, the same password can be reused elsewhere...
TeamViewer QuickSupport (QS) is a portable executable that users run when they need remote support. Placing it on the Public Desktop gives every us...
Windows ships with many built-in (provisioned) apps that some organizations don’t want on corporate devices. Removing them manually on each PC is...
Google Chrome is widely used in enterprises. Delivering it through Microsoft Intune as a Line-of-business (LOB) app lets you push the official Chro...
Full-disk encryption helps protect data if a device is lost or stolen. Microsoft Intune can enforce BitLocker on Windows 10/11 devices from a singl...
7-Zip is a widely used file archiver that supports many formats. Delivering it through Microsoft Intune as a Win32 app gives you centralized deploy...
Having users sign into OneDrive manually on every new device adds friction and can delay access to files. Microsoft Intune can silently sign users ...
Controlling which app opens for file types and protocols (e.g. .htm, mailto, https) keeps the experience consistent and reduces support calls. Micr...
Manually creating Outlook profiles on every device is time-consuming and error-prone. Microsoft Intune can automatically provision the Outlook mail...
Keeping the same Start menu and taskbar layout on every Windows 11 device helps with training and support. Microsoft Intune can apply a single layo...
Intune doesn’t include a dedicated “deploy wallpaper” setting. You can still push a corporate desktop background by (1) copying the image to ...
Advanced IP Scanner is a free, widely used tool for scanning local networks and discovering devices. Deploying it manually on many PCs is tedious. ...
Microsoft Intune lets you send custom push notifications to users on managed iOS, iPadOS, and Android devices. The message is delivered through the...
When a managed device goes missing, you need a way to see where it is. Microsoft Intune offers a Locate device remote action so you can request the...
Adobe Reader DC is widely used for viewing, filling, and signing PDFs. Rolling it out and keeping it updated on many PCs can be time-consuming if d...
Windows Autopilot lets you take new or reset Windows devices from out-of-box to fully configured and managed—without building or maintaining cust...
Many organizations use Google Chrome alongside or instead of Microsoft Edge. To keep the experience consistent and direct users to the right resour...
Controlling what users see when they open Microsoft Edge helps standardize the experience across your organization and can steer them toward intern...