Intune.Training Blog

• 00:00 - Intro
• 01:07 - Intune.HV.Tools Module
  https://github.com/tabs-not-spaces/Intune.HV.Tools
• 03:12 - Installing Intune.HV.Tools
• 04:30 - Initialize-HVTools
• 07:50 - Add-ImageToConfig
• 09:20 - Add-NetworkToConfig
• 10:23 - Add-TenantToConfig
• 13:05 - New-ClientVM
• 19:40 - Hyper-ConvertImage
  https://github.com/tabs-not-spaces/Hyper-ConvertImage
• 25:50 - Launch Microsoft.Graph.Intune in PowerShell 7
• 42:38 - GitHub Repos
• 48:00 - Get-HVToolConfig
• 48:45 - Working together and sharing discussion

Download the module here https://www.powershellgallery.com/packages/Intune.HV.Tools

Project Site https://github.com/tabs-not-spaces/Intune.HV.Tools

• 00:00 - Intro
• 01:00 - Revisiting Autopilot
• 03:46 - Texas System Management User Groups Unite 2020
  https://www.youtube.com/watch?v=U2maWgZNq_w&list=PLLLx6twFrOEyeZwqlXgj6CgFxr_ViPruI
• 04:43 - Getting the Hardware Hash
• 06:03 - Advanced AutoPilot Troubleshooting with Michael Niehaus
  https://youtu.be/ej8C-3xSjMU
• 06:18 - WindowsAutopilotIntune Module
• 16:59 - Endpoint Console
  http://aka.ms/memac
• 25:57 - Azure AD Dynamic Group
• 29:45 - Deployment Profile
• 34:11 - Get Autopilot Profile
• 38:46 - Covert Auotpilot Configuration to JSON
• 47:30 - Windows Autopilot for existing devices
  https://docs.microsoft.com/windows/deployment/windows-autopilot/existing-devices
• 54:26 - Autopilot in action
• 58:00 - Block Personal Device Enrollment
  https://youtu.be/WhywVF8tqfs
• 1:01:01 - Device Enrollment Managers
• 1:07:40 - Wrapping up

• 00:00 - Intro
• 01:08 - Microsoft Defender Security Center discussion
• 07:31 - Live response session demo
• 12:45 - startupfolders command
• 16:20 - getfile/fileinfo command
• 22:22 - Investigate entities on devices using live response
  https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/live-response
• 24:50 - Live response command examples
  https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples
• 25:22 - remediate command
• 31:50 - analyze command
• 35:40 - Timeline
• 37:17 - Security agents discussion
• 42:24 - Wrapping up

Steve and Ben drag Adam trough more security stuff. Adam is thrilled.

Microsoft released a new Web protection feature on securitycenter.microsoft.com which uses the 3rd party Cyren web proxy. This does require an E5 License.

• 00:00 - Intro
• 02:29 - Enable custom network indicators
• 03:19 - Connect to a partner
• 06:24 - Create web content filtering policy
• 08:43 - Create machine group
• 11:26 - Web content filtering with Microsoft Defender ATP now in public preview
  https://techcommunity.microsoft.com/t5/microsoft-defender-atp/web-content-filtering-with-microsoft-defender-atp-now-in-public/ba-p/1132287
• 14:03 - Web content filtering
  https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/web-content-filtering
• 20:53 - Wrap-up

Update: 7th July 2020 Web content filtering is now included with a Microsoft Defender ATP license. https://techcommunity.microsoft.com/t5/microsoft-defender-atp/an-update-on-web-content-filtering/ba-p/1505445

Looks like we might have forgotten to enable network protection which can be done either by policy from the Microsoft Defender ATP security baseline or the endpoint protection configuration profile. You can also do this using PowerShell with the following command: Set-MpPreference -EnableNetworkProtection Enabled https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection https://docs.microsoft.com/mem/intune/protect/security-baseline-settings-defender-atp?pivots=atp-april-2020#microsoft-defender

Nice blog post on this: https://emptydc.com/2020/01/27/block-it/

Prerequisites Before trying out this feature, make sure you have the following:

Windows 10 Enterprise E5 license Access to Microsoft Defender Security Center portal Machines running Windows 10 Anniversary Update (version 1607) or later with the latest MoCAMP update (for Network Protection on Internet Explorer, Edge, Chrome, or Firefox) Machines running Windows 10 May 2019 Update (version 1903) or later (for a better user experience from SmartScreen on Edge). Note that if SmartScreen is not turned on, Network Protection will take over the blocking A valid license with a partner data provider

Microsoft Intune Program Manager Matt Shadbolt joins us to give a deep dive into the new Endpoint Security features in Intune and ConfigMgr Tenant Attach security features.

Matt Shadbolt - Microsoft Program Manger - Microsoft Endpoint Manager - Intune https://twitter.com/ConfigMgrDogs https://techcommunity.microsoft.com/t5/user/viewprofilepage/user-id/180368 https://docs.microsoft.com/en-us/archive/blogs/configmgrdogs/

• 00:00 - Intro
• 00:57 - Matt Shadbolt’s introduction
• 05:46 - Microsoft Endpoint security stack
• 07:27 - Threat & vulnerability management
• 08:50 - Attack surface reduction
• 09:57 - Next generation protection
• 10:35 - Endpoint detection & response
• 11:18 - Auto investigation & remediation
• 11:37 - Microsoft threat experts
• 12:30 - Licensing recap
• 13:46 - Historical roles & friction
• 16:55 - Endpoint security blade
• 33:21 - Demo
• 36:10 - Security baseline
• 41:00 - Security tasks
• 44:18 - Endpoint security policies
• 46:10 - Antivirus
• 47:20 - Tri-State policy options
• 57:00 - Unhealthy endpoints report
• 59:53 - Firewall
• 1:05:36 - Endpoint detection and response
• 1:17:00 - Questions
• 1:33:00 - Unified endpoint security using Microsoft Endpoint Manager
  https://techcommunity.microsoft.com/t5/microsoft-endpoint-manager-blog/unified-endpoint-security-using-microsoft-endpoint-manager/ba-p/1417736
• 1:34:01 - Wrap-up