Author Archives: ncbrady

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 5 key rotation

Posted on December 17, 2019 by ncbrady

Introduction In this video I show you how key rotation works when a key has been revealed via the helpdesk using Bitlocker Management integrated as a feature in Microsoft Endpoint Configuration Manager version 1910. To see a list of all … Continue reading →

Posted in 1910, key rotation, MBAM | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 4 Enforce encryption

Posted on December 17, 2019 by ncbrady

Introduction In this video I show you how to enforce encryption with no user interaction using Bitlocker Management in Configuration Manager 1910 (and a compliance baseline containing a configuration item with 2 registry keys). Below are the key path and … Continue reading →

Posted in 1910, MBAM | Leave a comment

Microsoft Endpoint Manager Configuration Manager Technical Preview version 1912 released

Posted on December 14, 2019 by ncbrady

Introduction It’s been a busy year for ConfigMgr, and the last release of the year was released, namely  Microsoft Endpoint Manager Configuration Manager Technical Preview version 1912. Yeah, that’s a mouthful. MEMCM TP 1912 🙂 In the screenshot below you … Continue reading →

Posted in 1912 | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 3 customize the portals

Posted on December 14, 2019 by ncbrady

Introduction In this video I show you how to customize the self service portal to suit your organization, and I show you how  you can change what a person see’s in the help desk based on which Active Directory Security … Continue reading →

Posted in 1910, MBAM, self service | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 2, configure portals

Posted on December 10, 2019 by ncbrady

Introduction In this video I show you what you need to know to get the Bitlocker Management (formally MBAM) web site portals working in Microsoft Endpoint Configuration Manager version 1910, please check it out. Install the MBAM portals – https://docs.microsoft.com/en-us/configmgr/protect/deploy-use/bitlocker/setup-websites … Continue reading →

Posted in 1910, MBAM, MBAM, pki | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910

Posted on December 5, 2019 by ncbrady

Introduction I’ve created a video showing you what you need to know to get Bitlocker Management (formally MBAM) integration working in Microsoft Endpoint Configuration Manager version 1910, please check it out. for more info and links to setting up PKI … Continue reading →

Posted in 1910, Key Rotation, Lenovo, MBAM, MBAM helpdesk, MBAM Reporting, MBAM SelfService, P1 Mobile workstation, pki, System Center Configuration Manager (Current Branch) | 3 Comments

Want to learn about the new Bitlocker Management feature in Microsoft Endpoint Manager Configuration Manager ?

Posted on November 13, 2019 by ncbrady

Introduction Microsoft BitLocker Administration and Monitoring (MBAM) is the ability to have a client agent (the MDOP MBAM agent) on your Windows devices to enforce BitLocker encryption including algorithm type, and to store the recovery keys in your database, securely. … Continue reading →

Posted in 1909, 1910, Group Policy, Key Rotation, MBAM helpdesk, MBAM Reporting, MBAM SelfService, pki, PKI | 29 Comments

A quick look at reporting in MBAM integrated within Microsoft Endpoint Manager Configuration Manager

Posted on November 12, 2019 by ncbrady

Introduction Microsoft have been hard at work adding MBAM (Microsoft BitLocker Management and Monitoring) features natively to Microsoft Endpoint Manager Configuration Manager, and those features have been improved since they were first released, with bug fixes and new features added … Continue reading →

Posted in 1911, MBAM helpdesk, MBAM SelfService, Reporting | 2 Comments

Android device management with Microsoft Intune – Part 4. Coming soon and what’s new

Posted on November 8, 2019 by ncbrady

Introduction These are my notes about a session I’ve attended at Microsoft Ignite 2019, you can review the recording for this session here. I’ve split this blog post up into different parts as there is just so much content to … Continue reading →

Posted in Android, Android Enterprise Work Profile, Device Admin | 3 Comments

Android device management with Microsoft Intune – Part 3. Dedicated device management

Posted on November 8, 2019 by ncbrady

Introduction These are my notes about a session I’ve attended at Microsoft Ignite 2019, you can review the recording for this session here. I’ve split this blog post up into different parts as there is just so much content to … Continue reading →

Posted in OEMConfig, Samsung, Samsung KNOX, Zebra | 3 Comments

Android device management with Microsoft Intune – Part 2. Deployment Scenarios

Posted on November 8, 2019 by ncbrady

Introduction These are my notes about a session I’ve attended at Microsoft Ignite 2019, you can review the recording for this session here. I’ve split this blog post up into different parts as there is just so much content to … Continue reading →

Posted in AE Fully Managed, Android Enterprise Work Profile, business only mode, BYOD, Company Owned, COPE, Managed Google Play, Microsoft Launcher, Personally Owned, Samsung KNOX, Zebra StageNow, Zero Touch | 3 Comments

Android device management with Microsoft Intune – Part 1. Partnerships

Posted on November 8, 2019 by ncbrady

Introduction These are my notes about a session I’ve attended at Microsoft Ignite 2019, you can review the recording for this session here. The session was created to allow us to learn more about new Android Enterprise (AE) device management … Continue reading →

Posted in Android, Intune, Partnerships, Samsung, Zebra | 3 Comments

How Microsoft uses Intune internally to manage Windows devices

Posted on November 6, 2019 by ncbrady

Introduction These are my notes about a session I’ve attended at Microsoft Ignite 2019, you can review the recording for this session here. This session was delivered by Seth Malcolm, part of a team of Program Managers responsible for Intune … Continue reading →

Posted in Intune, Windows AutoPilot | Leave a comment

Configuration Manager technical preview version 1911 is released

Posted on November 6, 2019 by ncbrady

Introduction Microsoft is busy with new releases all the time but particularly now as MS-ignite is in full swing. This time it’s Configuration Manager technical preview version 1911 and the first thing to point out is the naming change, it’s … Continue reading →

Posted in 1911, System Center Configuration Manager Technical Preview | Leave a comment

Configuring Surface firmware settings using DFCI in Microsoft Intune

Posted on November 4, 2019 by ncbrady

Introduction I’m lucky enough to be attending Microsoft Ignite in Orlando Florida and this morning I had the opportunity to visit the Surface booths. I’d highly recommend you visit them too to see the lovely new hardware like Surface Pro … Continue reading →

Posted in 1809, DFCI, Intune, Surface Pro X | 1 Comment