Migrate On-Prem Active Directory to Entra ID with Intune
Move from on-premises AD to Entra ID with Intune: an Autopilot profile and dynamic device group, GPO import via Group Policy analytics, apps and hashes.
Blog / Category
Entra ID & Intune
Entra ID, Intune, Autopilot and Conditional Access, mostly for small and mid-sized businesses moving away from on-prem.
16 posts
Connect On-Prem Active Directory to Entra ID (Cloud Sync)
Connect on-premises AD to Microsoft Entra ID with Cloud Sync: custom domain, provisioning agent, scoping filters, group licensing, SSPR and Seamless SSO.
How to Export and Import Conditional Access Policy's
Back up and restore Entra Conditional Access policies with PowerShell: export to JSON and import again through the Microsoft.Graph and Graph.Beta modules.
IntuneWinAppUtil: Package and Deploy a Win32 App in Intune
Turn a custom .exe or .msi into an .intunewin file with IntuneWinAppUtil, then deploy it as a Win32 app in Intune with install, uninstall and detection rules.
Implementing LAPS in Microsoft Entra and Intune
Enable Windows LAPS in Microsoft Entra, create the Intune account protection policy, turn on the built-in Administrator and read the password in Intune.
Intune - Endpoint Privilege Management
Video on enabling Endpoint Privilege Management in Intune so users run as standard users and only get elevated rights when a rule allows it.
Windows Hello for Business - Cloud Kerberos trust deployment
Deploy Windows Hello for Business cloud Kerberos trust: create the Azure AD Kerberos server object, enable WHfB in Intune and push the cloud trust OMA-URI.
Autodiscover Ignores Exchange Online? Check the Registry
Outlook asks for Office 365 credentials while the mailbox is still on Exchange on-premises: set ExcludeExplicitO365Endpoint under the Autodiscover key.
Configure team site libraries to sync automatically
Make SharePoint team site libraries sync automatically in OneDrive: copy the library ID, decode it with UnescapeDataString and set TenantAutoMount.
AAD Connect / Cloud Sync with Existing Cloud Users
Avoid duplicate users when linking an existing Office 365 tenant to AD Connect: scripts to match users, sync proxyAddresses and set ImmutableIDs.
Azure - Migrate Group Policy's to Intune!
Video on migrating Group Policies from Active Directory to Microsoft Intune, covering the approach and best practices for cloud policy management.
Azure - Company Branding
Add company branding to the Azure AD sign-in experience of your tenant. Video continuation of the Hybrid Join and Intune setup series.
Azure - Universal Print
Set up Universal Print in Azure, install the Universal Print Connector on your print server, register printers and assign them to users and groups.
Fix Error 8018000a: This Device Is Already Enrolled
Entra (Azure AD) join fails with 8018000a, device already enrolled: a PowerShell script removes the stale enrollment, then you delete the old device.
AutoPilot - Hybrid Azure AD
Autopilot for Hybrid Azure AD Join: install the Intune Connector for AD, create the OU, dynamic group, Autopilot profile and Domain Join profile.
Intune - Applications and Policies
Deploy the Office suite and apply Administrative Templates through Intune to Hybrid Azure AD joined Windows 11 devices from the earlier setup.