Ben Whitmore

Secret Agent 🍸 @PatchMyPC | Microsoft MVP | MCT | Speaker | Certified Enterprise Administrator Expert @MSEndpointMgr #SavedByGrace #EatsCheeseMostly

[Ben Whitmore @byteben]

New Blog Post: "SSO to domain resources from Azure AD Joined Devices – The MEGA Series" - Part 1 is published😍#MEMPowered #MSIntune #AzureAD #SSO #AOVPN #RRAS #NPS #NDES #SCEP https://t.co/0Rba002UWw

[Patch My PC @PatchMyPC]

Moving to #MSIntune doesn’t have to mean starting over.

Microsoft MVP @byteben shows how you can migrate apps from #ConfigMgr to #Intune without rebuilding years of packaging work.

Watch this 30-second clip and dive in to learn more 👉 https://t.co/06htgfsMVp

#PatchMyPC

[Ben Whitmore @byteben]

What's actually in the Microsoft Enterprise App Management catalog? 🔍

Get-EAMCatalog.ps1 pulls it all back from Microsoft Graph: 1,589 variants with versions, MSI/EXE, detection rules, and an HTML report 👇

https://t.co/vixyOjLsQ6

#MSIntune #MicrosoftGraph @MSEndpointMgr

[Jose | MVP @schenardie]

I ended up on Apple's Acknowledgements page 🍏

Apple finally added more verification methods for Apple Business Manager, and I may have helped a little.

Here's what changed and how it happened 👇
https://t.co/1r12IPfy9f

#MacAdmins #ABM #Apple

[@rnabmitra @rnabmitra]

Create Deployment Plans for your #Windows Apps Assignment with #MSIntune. Rolling out now in your tenants
✅ Rings
✅Templates
✅Pause/Resume
✅Schedule
https://t.co/vJ5BSa5DMW

[Ben Whitmore @byteben]

@skatterbrainzz

[Nathan McNulty @NathanMcNulty]

I rarely share about my company, but it's such an amazing place to work

If you live and love Purview and AI Governance (and don't mind working with me...), we might have a role for you ;)

https://t.co/fz17Su6vfO

32 hour weeks, great benefits, but most of all, amazing people :)

[Mattias Melkersen {MVP} @MMelkersen]

Working with Microsoft EPM? I created a tool that will allow you to much easier build cool rules with certificates+internal name and have a better overview of ruleset and much more.
https://t.co/x1IRnsNodS

#MSIntune #MicrosoftEPM #MSEndpointMgr

[Rudy Ooms @Mister_MDM]

Microsoft has officially released Remote Help for Windows with unattended support and remote sign-in. But there’s an important deployment detail: it requires two additional components on the device:

🔹 Remote Desktop Services Infrastructure Agent
🔹 Remote Desktop Agent Boot Loader

These components provide the underlying connectivity that allows a support engineer to authenticate at the Windows sign-in screen and work in a separate session.

The good news for @PatchMyPC customers? Both required agents are already available in our application catalog, making it easier to package, deploy, and keep them updated through Intune or Configuration Manager.

Want to understand what happens behind the scenes, from the Intune Management Extension and temporary registration tokens to helper access and automatic cleanup?

Read the full technical deep dive:https://t.co/Vs6GZETfAx

#PatchMyPC #RemoteHelp #Intune #MSIntune

[Ben Whitmore @byteben]

@CyberCakeX @MVPAward @BelaLior Well deserved, fan of your work 👏

[Rudy Ooms @Mister_MDM]

Remote Help Unattended Support is here!!

Back in March, I already noticed something new showing up in the Intune Management Extension: **Windows Remote Help Unattended**.

That one name sent me down the rabbit hole. At the time, the backend still returned `FeatureNotEnabled`. We could see how Microsoft was building it, but we couldn’t complete the full flow ourselves.

Fast-forward almost five months. Microsoft has now officially announced **Remote Help on Windows: Unattended Support with Remote Sign-In**.

And looking at the first setup steps and requirements, our original investigation was pretty damn close.

Microsoft requires the Azure Virtual Desktop Agent and Bootloader. Remote Desktop must be enabled. The helper connects through the Windows sign-in screen and works in a separate Windows session while the user’s session remains locked.

That is almost exactly what the IME code was telling us back in March.
The AVD plumbing wasn’t just a coincidence. The registration token wasn’t just some leftover code. And the helper being temporarily added to Remote Desktop Users was the clue that tied the whole thing together.

It’s always nice when months of staring at decompiled code eventually turn into an official Microsoft announcement 😄

Original investigation:
https://t.co/Vs6GZETfAx

#Intune #MSIntune #RemoteHelp

[Nathan McNulty @NathanMcNulty]

If you haven't seen the process for deploying Remote Help yet, this thread is for you

Not because it's hard, but because it is even more unhinged than Global Secure Access setup

I honestly can't believe this shipped, and trust me, it only gets worse the more you look at it

[Ben Whitmore @byteben]

@alkhacnar This blog serves purely as a guide for those wanting to understand the mechanics of how the Graph calls work - it’s not intended as a replacement for @NickolajA automation solution.

[Ben Whitmore @byteben]

The "Ultimate" Guide to Creating Win32 Apps in Intune with PowerShell & Microsoft Graph

I pulled apart the full flow...app creation, content versioning, SAS upload, commit, detection, requirements + IME processing.

https://t.co/pqP3YKvdI4

#Intune #PowerShell #MicrosoftGraph

[Merill Fernando @merill]

I just sent out this week's https://t.co/nJ1S3WZqgY

Featuring @byteben, @DanielatOCN, @darrenjrobinson, @planedrop, @m0bilej0n, @JulianRasmussen, @doolanke, @NateHutch365, @rahulj1906, @rucam365, @LazyAdmin, @getrubix, @12Knocksinna

and more!

[Ben Whitmore @byteben]

So, I’m late to the game because I don’t update the PowerShell modules in my lab frequently enough.

WAM and the Graph SDK - things you should know if you automate.

#MSIntune #MSGraph

https://t.co/zhK8r3JgwR

[Ben Whitmore @byteben]

Had some time in the lab today and played with Intune filters. I like naming conventions, a lot, and wondered if I could automate the creation of filters based on Windows Build/SKU…turns out you can!

https://t.co/kDjMMzIzCS

#MSIntune #Graph #Automation

[Ben Whitmore @byteben]

@skatterbrainzz lol

[Ben Whitmore @byteben]

I took a deep-dive on WinGet and asked myself a question. Everyone consciously managing apps in Intune has asked themselves the same one. Is it Enterprise ready?

Do I have a bias in this game? Yes. Have I tried to remain impartial and cite my claims? Yes

https://t.co/2OgD0gyAhk

[Ben Whitmore @byteben]

@IntuneSuppTeam For anyone following. Microsoft have now made MAA apply to app-auth workflows too but you can add service principal exclusions on the access policy. This rollout was not great / customers were impacted and Microsoft silence left everyone head scratching.

[Ben Whitmore @byteben]

@IntuneSuppTeam calling the kool kids. Docs say we can exclude enterprise apps from MAA policies. Nothing in the admin centre or Graph to do this - what’s the gap? MAA never used to impact app-auth flows…does this doc officially mean it now does? Thanks

https://t.co/70RnjYGYDl

[Ben Whitmore @byteben]

@IntuneSuppTeam

[Patch My PC @PatchMyPC]

Microsoft keeps adding new inventory capabilities to #Intune.

But can Microsoft App Inventory actually become a reliable source of truth, or is it just another dashboard? 👀

Join @byteben and @Mister_MDM this Wednesday as they break it all down.

📅 June 24th
👉 https://t.co/LvjFrI4sH7

#MSIntune #PatchManagement #ITCommunity #PatchMyPC