Your go-to resource for Microsoft Intune best practices, tips, and tricks
Use Intune Proactive Remediation to detect low free space and prompt users to clean Recycle Bin and Downloads so Windows 11 feature updates can com...
Stop new or re-imaged devices from upgrading to a newer feature update before Windows Update for Business takes over by pinning them to Windows 11 ...
Block or restrict the device code authentication flow with Conditional Access in Microsoft Entra ID to reduce the risk of device code phishing and ...
Use Config Refresh so devices reapply Intune policy locally at a configurable interval, detect drift, and revert settings without waiting for the n...
Enable automatic sign-in to Microsoft cloud services in Google Chrome using Entra ID and Intune Administrative Templates. No Windows Accounts add-o...
Keep Windows devices from sleeping or locking using a Settings catalog power policy in Microsoft Intune for kiosks, POS, and shared workstations
Use Microsoft Defender for Endpoint web content filtering to monitor and block web traffic on devices outside your corporate network, with SmartScr...
Use Microsoft Intune Proactive Remediation to detect and remove stale Windows user profiles so disk space stays available and logins do not fail
Control update rings, feature updates, and quality updates for Windows 10 and 11 using Windows Update for Business policies in Microsoft Intune
Hide the OneDrive Personal entry in Windows Explorer using a PowerShell script or Proactive Remediation deployed via Microsoft Intune
Clear Microsoft Teams cache across devices using a PowerShell script deployed via Intune to fix loading or boot-loop issues
Use Proactive Remediation to detect and remove unwanted desktop shortcuts on Windows devices on a schedule
Deploy and update desktop shortcuts for apps, sites, or web apps using a PowerShell script packaged as a Win32 app in Intune
Package installers as .intunewin with the Win32 Content Prep Tool, then add them as Win32 apps in Intune for deployment
Hide the taskbar widgets button and Teams Chat icon using a Settings catalog profile so the Windows 11 taskbar fits corporate standards
Turn on OneDrive sync admin reports via an Intune configuration profile so you can see sync status and health in the Microsoft 365 admin center
Turn on Windows Hello for Business (PIN and biometrics) using a PowerShell script deployed via Intune
Turn off Windows automatic network printer discovery using a PowerShell script deployed via Intune
Choose ADE, manual enrollment, or user enrollment depending on device ownership and Apple Business Manager
Enforce compliance rules, FileVault encryption, firewall, and Gatekeeper on enrolled Macs. Then monitor status and pair with Conditional Access
Get Windows devices ready for the 2026 Secure Boot certificate expiration by enabling certificate updates in Intune and monitoring rollout across y...
Configure Automated Device Enrollment so new Macs get a managed local admin account with a random password stored in Intune
Use a Settings catalog profile to allow or block cellular data on Windows devices. Control costs and steer traffic to Wi‑Fi
A clear, user-friendly walkthrough for installing Company Portal, enrolling your Mac, and passing required compliance checks.
Replace your expiring APNs certificate so iOS, iPadOS, and macOS management continues without interruption
Obtain and upload the APNs certificate so Intune can manage iOS, iPadOS, and macOS devices
Deploy Word, Excel, PowerPoint, and other Microsoft 365 apps to Intune-managed Macs from the cloud
Reset Windows devices to a clean, managed state on-site without a full wipe. Ideal for handover and repurposing
Require two Windows Hello for Business factors at device unlock using a Custom OMA-URI profile in Intune
Suppress the Chrome Privacy Sandbox / ad privacy prompt on managed devices using imported ADMX and an Intune configuration profile
Enforce how long users must keep a password before changing it using a Settings Catalog profile
Control camera access on managed Windows devices using a Settings Catalog profile
Control the Windows 11 Widgets panel on managed devices using a Settings Catalog profile
Set one-time or recurring reboot schedules on managed Windows devices using a Settings Catalog profile
Control Windows Fast Startup on managed devices using a PowerShell script deployed via Intune
Enforce how Windows uses built-in and external displays using a Settings Catalog profile
Understand and set up the newer Autopilot flow that enrolls Windows devices without hardware hash registration
Package HP Support Assistant as a Win32 app and deploy it to managed Windows devices via Intune
Configure Windows Connection Manager policies in Intune to control how devices manage multiple network connections, reducing security risks and imp...
Set how long Windows can be idle before the screen locks using a Settings Catalog profile
Restrict access to Control Panel and Windows Settings on managed devices using a Settings Catalog profile
Block personal OneDrive sync and remove the extra OneDrive icon from Windows Explorer using a Settings Catalog profile
Block desktop notifications in Microsoft Edge on managed Windows devices using a Settings Catalog profile
Block desktop notifications in Google Chrome on managed Windows devices using a Settings Catalog profile
Push a standard set of bookmarks to Chrome on managed Windows devices using a Settings Catalog profile and a JSON bookmark list
Use update rings, optional reporting, and restart notifications to control when and how Windows updates install on managed devices
Control Chrome update behavior across your fleet using imported ADMX templates and an Intune configuration profile
Use a Settings Catalog profile to provision Outlook with the user’s primary SMTP address so mail opens without manual setup
Push a WiFi (WLAN) configuration profile to Windows devices so they connect to your network automatically
Push desktop shortcuts to the public desktop using a Win32 app and PowerShell
Let users run as standard user and elevate only approved apps with Intune EPM
Push a custom lock screen image to Windows devices using a Win32 app and a Settings Catalog profile
Restrict USB drives and other removable storage on Windows devices using Intune device restrictions
Add a non-admin account that can enroll many devices in Intune
Apply your organization’s branding and support details to the Company Portal
Options for enrolling personal and organization-owned Windows devices in Intune
Run PowerShell scripts on managed Windows devices using Intune Scripts
Add and deploy the Microsoft 365 Apps suite (Office) to managed Windows devices from the Intune admin center
Control discoverability, advertising, encryption, and more for Bluetooth on managed Windows devices
Turn off Bluetooth on managed Windows devices using Intune Settings Catalog
Push Universal Print cloud printers to Windows devices using Intune Printer Provisioning
Turn off the Microsoft Store app for end users while keeping Intune-based Store app deployment
Control and restrict Chrome extension installations across your organization using Microsoft Intune
Deploy Microsoft Edge extensions automatically across your organization using Microsoft Intune
Deploy Chrome extensions automatically across your organization using Microsoft Intune
Disable the built-in Teams chat app on Windows 11 devices using Microsoft Intune
Deploy Zoom Desktop Client across your organization using Microsoft Intune
Deploy SharePoint site libraries automatically using Microsoft Intune with remediation scripts
Create local administrator accounts on Windows devices using Microsoft Intune
Configure User Account Control settings to enhance security using Microsoft Intune
Secure your network by preventing computers from joining Homegroups using Microsoft Intune
Block removable storage devices and USB ports to enhance security using Microsoft Intune
Deploy custom desktop backgrounds across your organization using Microsoft Intune
Customize Windows 11 taskbar alignment using PowerShell scripts and Microsoft Intune
Secure local administrator passwords with Local Administrator Password Solution (LAPS) using Microsoft Intune
Deploy TeamViewer QuickSupport to desktop using Microsoft Intune
Remove unwanted preinstalled Windows apps using PowerShell scripts and Microsoft Intune
Deploy Google Chrome browser across your organization using Microsoft Intune
Secure your devices with BitLocker encryption using Microsoft Intune
Deploy 7-Zip file compression tool across your organization using Microsoft Intune
Automatically configure OneDrive profiles with user credentials using Microsoft Intune
Configure default application associations for Windows devices using Microsoft Intune
Automatically configure Outlook profiles with user credentials using Microsoft Intune
Standardize the Windows 11 Start menu and taskbar across your organization using an XML layout and Intune
Deliver a custom desktop background to Windows 10/11 devices using a Win32 app and a Settings catalog profile
Package and deploy Advanced IP Scanner to Windows 10/11 devices using Intune Win32 app management
Push custom messages to users on managed iOS, iPadOS, and Android devices from the Intune admin center
Use Intune’s remote device action to find a lost or stolen device on supported platforms
Package and deploy Adobe Reader DC to Windows 10/11 devices using Intune Win32 app management
Get new Windows devices ready for users with Windows Autopilot and Microsoft Intune. No imaging required
Define which pages open when Google Chrome launches on Intune-managed Windows devices
Set a consistent start experience for Microsoft Edge on managed Windows devices using Intune