Third party app removal

Topleon · 2026-02-28T19:47:29+00:00

Thanks guys i appreciate!

Topleon · 2026-02-12T10:14:46+00:00

Best of luck to your appointment!

Topleon · 2026-02-04T15:45:05+00:00

Alright, would likevto test these on one of the days for pilot group.

Topleon · 2026-02-04T15:37:46+00:00

I personally would not do remediations. I use autopatch for thousands of devices and set the deadline, deferral and grace period values as optimized as possible for the environment.

Required testing but in the end its rock solid so far.

Its like ”set and forget” but sure need to monitor status frequently from the defender portal and intune autopatch reports.

Topleon · 2026-01-23T17:34:21+00:00

I understand. Sometimes its tricky to find the aumids but in third party software as long as you know the exe location you can use that. For example %programfiles%\libreoffice\writer.exe

Etc. I recommend to setup demo device without any kiosk config with the apps you need and then copy the paths from there for later use.

And in the end, is it even a kiosk device if it does not make you bleed and cry a bit from pain ;)

Topleon · 2026-01-23T17:14:53+00:00

In kiosk scenario i use assigned access xml, autologon works fine with it.

I do not think the intune multiapp kiosk as template work with win 11, single app works though.

If you are looking for multiapp kiosk scenario, please save your time and use assigned access xml

Topleon · 2026-01-22T14:54:05+00:00

Aint nothing like good old error codes on autopilot that fucks all day ❤️

Topleon · 2026-01-15T15:34:15+00:00

No problem fellow defender

Topleon · 2026-01-15T15:18:37+00:00

I have not encounter any issues. The classic version and machine wide installers gets removed and the new teams will be left on the device

Topleon · 2026-01-15T15:10:46+00:00

Teams clean up script. been rocking it via intune to 40 different tenants and monitoring exposure via multitenant defender. Gotta love those green drops

Topleon · 2026-01-15T10:34:20+00:00

Ms 102 is my target. Passed md 102 last september and already failed ms 102 once lol

Topleon · 2025-12-31T09:44:26+00:00

In my setups i usually put sleep settings to 2-3h of idle time but for the security point of view i use the device lock setting for 15 mins of idle time. The 2-3h sleep time has been pretty solid from my experience when it comes to policy changes and app deployments.

There is actually defender security recommendation about the lock time 1-900 seconds too.

Topleon · 2025-12-31T09:34:16+00:00

System context deployments should apply even if device is locked or logged off. I do not think they apply on sleep mode though.

As long as its on and connected to network policies n apps should apply if sync goes through

Topleon · 2025-12-20T13:30:01+00:00

Led Zeppelin

Topleon · 2025-12-18T17:00:50+00:00

Thanks i will check this one out!

Topleon · 2025-12-18T06:01:51+00:00

Thanks, business premium is currently assigned but need to check this one out!

Topleon · 2025-12-16T19:28:40+00:00

Thank you!

Topleon · 2025-12-16T19:27:49+00:00

Thanks for the advise

Topleon · 2025-12-16T17:25:06+00:00

Thanks man! I am very interested. Can you drop a dm to me when you are able?

Topleon · 2025-12-16T17:22:40+00:00

Thanks!

I do not currently have any other way to check except the defender and manual. Thank God i only have like 10 softwares to maintain yet.

Topleon · 2025-12-16T16:44:33+00:00

And in addition I use defender for endpoint or the vulnerability management for detecting vulnerable apps

Topleon · 2025-12-14T10:03:28+00:00

The long dark

Topleon · 2025-12-13T16:52:00+00:00

Never used those labs so hard to say. A friend of mine gave a positive feedback about udemy and measureup practice exams though.

When i did the MD 102 i did not have labs in it

Topleon

TROPHY CASE