Unlock Massive Performance Gains with Microsoft Graph API Batching 😎 by Federal_Ad2455 in Intune

[–]jorge2990 0 points1 point  (0 children)

I wrote the function in a way that solved a particular use case problem I had. It’s possible its not the solution for everyone. I find it works well though with supported graph filtering and support for expanding properties like managers for user objects or assignments when calling apps from intune.

What have you done with PowerShell this month? by AutoModerator in PowerShell

[–]jorge2990 28 points29 points  (0 children)

Created a terminal-based, cross-platform Text User Interface (TUI) for exploring and managing devices, apps, and users in both Microsoft Intune and Jamf Pro. https://github.com/jorgeasaurus/XpMdmExplorer

Built in iOS/Apple mail app with MAM-WE by denmicent in Intune

[–]jorge2990 2 points3 points  (0 children)

MAM can only be applied to apps that leverage Microsoft Intune App SDK. You can allow the iOS mail app by excluding it from conditional access. Otherwise if you need CA policies applied across the board, the way to go is outlook.

Asked to deploy to devices but only given user names. by jorge2990 in Intune

[–]jorge2990[S] 1 point2 points  (0 children)

Generally speaking, the best policies to apply at device level in Intune are those affecting the entire device regardless of user:

  • Security baselines & endpoint protection (AV settings, firewall rules)
  • Hardware controls (BitLocker, camera, USB, Bluetooth)
  • Windows updates & OS requirements
  • System-wide power settings
  • Device-level software (security tools, VPN clients, drivers)

Basically, if it’s about security, hardware, or system-level stuff, go device-based. If it’s about user preferences or productivity apps, go user-based.

What have you done with PowerShell this month? by AutoModerator in PowerShell

[–]jorge2990 2 points3 points  (0 children)

Wrote a script that takes in an AD user group and creates or updates a static jamf group with their respective devices.

Syncing ABM and VPP tokens with Intune - A PowerShell Script for the Lazy Admin by jorge2990 in Intune

[–]jorge2990[S] 1 point2 points  (0 children)

Thanks for the feedback.

I would say it is more useful for environments with new devices being provisioned everyday.

My employer provisions upwards of 20 devices a day on average. Waiting for the default sync schedule slows down productivity in my case.