How to Export and Import Conditional Access Policy's
Back up and restore Entra Conditional Access policies with PowerShell: export to JSON and import again through the Microsoft.Graph and Graph.Beta modules.
Intune - Endpoint Privilege Management
Video on enabling Endpoint Privilege Management in Intune so users run as standard users and only get elevated rights when a rule allows it.
Windows Hello for Business - Cloud Kerberos trust deployment
Deploy Windows Hello for Business cloud Kerberos trust: create the Azure AD Kerberos server object, enable WHfB in Intune and push the cloud trust OMA-URI.
Uninstall Azure AD Connect
Uninstall Azure AD Connect after a full cloud migration: disable the sync scheduler, turn off DirSync with Set-MsolDirSyncEnabled, then remove it.
Autodiscover Ignores Exchange Online? Check the Registry
Outlook asks for Office 365 credentials while the mailbox is still on Exchange on-premises: set ExcludeExplicitO365Endpoint under the Autodiscover key.
Configure team site libraries to sync automatically
Make SharePoint team site libraries sync automatically in OneDrive: copy the library ID, decode it with UnescapeDataString and set TenantAutoMount.
Azure - Company Branding
Add company branding to the Azure AD sign-in experience of your tenant. Video continuation of the Hybrid Join and Intune setup series.
Azure - Universal Print
Set up Universal Print in Azure, install the Universal Print Connector on your print server, register printers and assign them to users and groups.
AutoPilot - Hybrid Azure AD
Autopilot for Hybrid Azure AD Join: install the Intune Connector for AD, create the OU, dynamic group, Autopilot profile and Domain Join profile.
Intune - Applications and Policies
Deploy the Office suite and apply Administrative Templates through Intune to Hybrid Azure AD joined Windows 11 devices from the earlier setup.
Windows 11 - Active Directory - Hybrid Join - Azure AD
Set up Hybrid Azure AD Join for Windows 11 devices in an existing Active Directory and enable automatic MDM enrollment in Intune through Group Policy.