Saravanan Narayanan

📋 Daily Intune Admin Checklist 1. Microsoft Intune Admin Center • ✅ Login & Dashboard Check – confirm portal is accessible, no anomalies. • ✅ Service Health – check Microsoft 365 Admin Center → Health → Service health for any Intune advisories/incidents. ⸻ 2. Device Compliance & Health • ✅ Non-Compliant Devices – Devices > Monitor > Compliance status → review causes. • ✅ Device Check-ins – Identify devices not checked in within last 7 days. • ✅ Autopilot Deployment – Monitor Devices > Windows > Windows enrollment > Deployment profiles. ⸻ 3. App Monitoring • ✅ App Deployment Failures – Apps > Monitor > App install status → review failed/pending installs. • ✅ Pending App Approvals – (if Company Portal requests are enabled). ⸻ 4. Configuration Profiles • ✅ Profile Deployment Status – Devices > Configuration profiles > [Profile] → Device status → review failures. • ✅ Script Execution Failures – Devices > Scripts > [Script] → Device status. ⸻ 5. Endpoint Security • ✅ Policy Status – Endpoint Security > Antivirus, Firewall, Disk encryption. • ✅ Threat Detection – Review Microsoft Defender for Endpoint incidents (if integrated). ⸻ 6. User Issues & Support • ✅ Helpdesk Tickets – Review new tickets/issues related to Intune provisioning, compliance, or apps. • ✅ Device Enrollment Failures – Devices > Monitor > Enrollment failures → review. ⸻ 7. Audit & Alerts • ✅ Audit Logs – Tenant admin > Audit logs → review recent admin actions. • ✅ Alerts & Notifications – Check alerts under Microsoft 365 Defender, Azure AD, or Intune. ⸻ 8. Licensing & Users • ✅ License Availability – Review in Microsoft 365 Admin Center. • ✅ User Assignment Issues – Confirm new users have correct Intune licenses and group memberships.

237

6 Comments

Intune common interview questions and answers (L1-L3) 1️⃣ What is Microsoft #Intune? A cloud-based endpoint management solution for devices and apps. 2️⃣ What can Intune manage? Windows, macOS, iOS, Android, and cloud apps. 3️⃣ What is #MDM and #MAM? MDM: Manage device settings | MAM: Manage app data. 4️⃣ How to enroll a Windows device in Intune? Settings > Accounts > Access work or school > Connect. 5️⃣ What is Company Portal? An app users install to enroll and access company resources. 6️⃣ What is Compliance Policy? Rules defining device health, security, and OS version. 7️⃣ What is a Configuration Profile? Pushes device settings like Wi-Fi, VPN, and restrictions. 8️⃣ How to deploy apps via Intune? Use Apps section in Intune portal to assign apps. 9️⃣ What is Autopilot? Simplifies and automates Windows device setup. 1️⃣0️⃣ Difference between Required and Available app deployment? Required: Auto-install | Available: User-initiated via Company Portal. 1️⃣1️⃣ What is Conditional Access in Intune? Control access to apps based on compliance and conditions. 1️⃣2️⃣ How to retire or wipe a device? Devices > Select Device > Retire or Wipe. 1️⃣3️⃣ What is Endpoint Security in Intune? Centralized security policies for device protection. 1️⃣4️⃣ How to monitor device compliance? Via Reports > Device compliance or Devices tab. 1️⃣5️⃣ What is Device Enrollment Manager (DEM)? A role for bulk enrolling multiple devices. 1️⃣6️⃣ What is Intune Data Warehouse? Provides historical data for custom reporting. 1️⃣7️⃣ How to check Intune logs? Via C:\ProgramData\Microsoft\IntuneManagementExtension\Logs 1️⃣8️⃣ What is Co-Management? Manage devices with both SCCM and Intune. 1️⃣9️⃣ What is Enrollment Status Page (ESP)? Displays device setup progress during Autopilot. 2️⃣0️⃣ What is Windows Hello for Business? Passwordless sign-in using PIN, biometric, or security key. 2️⃣1️⃣ What’s a Device Profile? Configuration rules applied to devices for settings and restrictions. 2️⃣2️⃣ What is Role-Based Access Control (RBAC) in Intune? Assign specific permissions to admin roles. 2️⃣3️⃣ How to deploy a PowerShell script? Devices > Scripts > Add Script. 2️⃣4️⃣ What is Endpoint Analytics? Insights into device health and performance. 2️⃣5️⃣ What is App Protection Policy (APP)? Controls corporate data within apps, even on unmanaged devices. 2️⃣6️⃣ What is a Compliance Report? Shows device health and policy status. 2️⃣7️⃣ How to block personal device enrollment? Set platform restrictions in Device enrollment restrictions. 2️⃣8️⃣ How to assign a device to a user? Via Intune portal > Devices > Properties > Primary User. 2️⃣9️⃣ What is Defender for Endpoint integration? Adds advanced threat protection to managed devices. 3️⃣0️⃣ What is Remote Lock? Instantly lock a device remotely via Intune.

205

1 Comment

🕹️ Full Control Over Devices. Zero Guesswork With Users. SCCM (System Center Configuration Manager) is Microsoft’s enterprise-grade platform for centralized IT management. It enables organizations to deploy, manage, and secure devices and applications across their network — all from a single console. 🔧 Key Capabilities with SCCM: ✅ Software Deployment I can push or uninstall any app across the entire organization — silently, remotely, and within minutes. No user interruption. No walkarounds. Just policy-based automation. ✅ Operating System Deployment (OSD) Need to format a laptop, push a clean image, or roll out Windows 11 across 100+ machines It’s all done through PXE boot, task sequences, and zero-touch imaging — even while I’m sipping coffee ☕. ✅ Patch Management Whether it’s Microsoft updates or third-party apps, SCCM keeps all machines up-to-date — securely and automatically. No need to rely on users clicking "Install now." ✅ Remote Support & Control Forget RDP or third-party tools. With SCCM’s built-in remote tools, I can take control of any user machine instantly to troubleshoot. ✅ Compliance & Security Baselines From firewall settings to BitLocker enforcement — every security config is deployed and monitored. Non-compliant machines are detected and fixed automatically. ✅ Hardware & Software Inventory I know exactly what every user is running — from RAM size and CPU to installed software versions. Need a report for audits? A few clicks and I’ve got it. ✅ Role-Based Access SCCM allows me to delegate specific rights to junior admins or other teams — securely and in a controlled way. ✅ Task Scheduling & Automation From cleaning temp files to enforcing power settings — I can automate routine maintenance tasks on a schedule across all endpoints, reducing manual overhead. ✅ Integration with Active Directory & Intune SCCM integrates natively with AD and Intune, allowing hybrid environments where on-prem and cloud-managed devices work together seamlessly. ✅ Custom Reporting With built-in reporting powered by SQL Server, I can generate detailed dashboards on patch compliance, app usage, device health, and more — tailored to any department or audit requirement. --- 🔐 SCCM isn’t just about pushing updates, it’s about owning the IT environment and ensuring everything works exactly the way it should

53

3 Comments

Azure AD Technical Interview Questions 1. What happens when a user is deleted from Azure AD and then restored within 30 days? What attributes or permissions might not be fully restored? 2. How does Azure AD Conditional Access differ from Intune App Protection Policies, and what happens if both are applied to a user and app simultaneously? 3. If you have two policies: one that blocks legacy authentication and another that allows it for specific users, how does Azure AD evaluate these? Which one takes precedence and why? 4. You disable a user in Azure AD, but they can still access Microsoft 365 services for a while. Explain why this might happen and how to immediately revoke access. 5. Can a single Azure AD tenant have users with the same UPN? If not, how would you allow similar usernames in multi-geo or multi-domain scenarios? 6. How does Azure AD handle group membership evaluation for a dynamic group where the rule references a user attribute that was recently changed? When will the membership reflect this? 7. How do you differentiate between a guest user and a member user in Azure AD using PowerShell or Graph API, and why does it matter in Conditional Access? 8. What are some scenarios where a user might appear in Azure AD but fail to authenticate via SSO, even though synchronization looks healthy? 9. If a user is assigned licenses via a group in Azure AD, what happens if you remove the user from the group but then re-add them? Do all license settings revert automatically? 10. Explain how Azure AD authentication works behind the scenes when a user accesses an application federated with a third-party identity provider (e.g., SAML or OIDC). How does token issuance flow differ? #AzureAD #IdentityManagement #AzureSecurity #Microsoft365 #ConditionalAccess #IAM #CloudSecurity #L2Interview #AzureExperts #CyberSecurity #TechInterview #TrickyQuestions #CloudComputing #LinkedInLearning #ITPros #MicrosoftAzure #AzureADInterview

209

17 Comments

Intune (L1-L3) 1️⃣ What is Microsoft Intune? A cloud-based endpoint management solution for devices and apps. 2️⃣ What can Intune manage? Windows, macOS, iOS, Android, and cloud apps. 3️⃣ What is MDM and MAM? MDM: Manage device settings | MAM: Manage app data. 4️⃣ How to enroll a Windows device in Intune? Settings > Accounts > Access work or school > Connect. 5️⃣ What is Company Portal? An app users install to enroll and access company resources. 6️⃣ What is Compliance Policy? Rules defining device health, security, and OS version. 7️⃣ What is a Configuration Profile? Pushes device settings like Wi-Fi, VPN, and restrictions. 8️⃣ How to deploy apps via Intune? Use Apps section in Intune portal to assign apps. 9️⃣ What is Autopilot? Simplifies and automates Windows device setup. 1️⃣0️⃣ Difference between Required and Available app deployment? Required: Auto-install | Available: User-initiated via Company Portal. 1️⃣1️⃣ What is Conditional Access in Intune? Control access to apps based on compliance and conditions. 1️⃣2️⃣ How to retire or wipe a device? Devices > Select Device > Retire or Wipe. 1️⃣3️⃣ What is Endpoint Security in Intune? Centralized security policies for device protection. 1️⃣4️⃣ How to monitor device compliance? Via Reports > Device compliance or Devices tab. 1️⃣5️⃣ What is Device Enrollment Manager (DEM)? A role for bulk enrolling multiple devices. 1️⃣6️⃣ What is Intune Data Warehouse? Provides historical data for custom reporting. 1️⃣7️⃣ How to check Intune logs? Via C:\ProgramData\Microsoft\IntuneManagementExtension\Logs 1️⃣8️⃣ What is Co-Management? Manage devices with both SCCM and Intune. 1️⃣9️⃣ What is Enrollment Status Page (ESP)? Displays device setup progress during Autopilot. 2️⃣0️⃣ What is Windows Hello for Business? Passwordless sign-in using PIN, biometric, or security key. 2️⃣1️⃣ What’s a Device Profile? Configuration rules applied to devices for settings and restrictions. 2️⃣2️⃣ What is Role-Based Access Control (RBAC) in Intune? Assign specific permissions to admin roles. 2️⃣3️⃣ How to deploy a PowerShell script? Devices > Scripts > Add Script. 2️⃣4️⃣ What is Endpoint Analytics? Insights into device health and performance. 2️⃣5️⃣ What is App Protection Policy (APP)? Controls corporate data within apps, even on unmanaged devices. 2️⃣6️⃣ What is a Compliance Report? Shows device health and policy status. 2️⃣7️⃣ How to block personal device enrollment? Set platform restrictions in Device enrollment restrictions. 2️⃣8️⃣ How to assign a device to a user? Via Intune portal > Devices > Properties > Primary User. 2️⃣9️⃣ What is Defender for Endpoint integration? Adds advanced threat protection to managed devices. 3️⃣0️⃣ What is Remote Lock? Instantly lock a device remotely via Intune.

136

1 Comment

Daily Intune Admin Checklist 1. Microsoft Intune Admin Center ✅ Login and Dashboard Check Ensure you can access Intune Admin Center and review the overall status. ✅ Service Health Check Microsoft 365 Admin Center → Health → Service health for Intune-related issues or advisories. 2. Device Compliance & Health ✅ Non-Compliant Devices Go to Devices > Monitor > Compliance status. Review non-compliant devices and reasons. ✅ Device Check-ins Identify devices that haven’t checked in recently (e.g., past 7 days). ✅ Autopilot Deployment Status Monitor Devices > Windows > Windows enrollment > Deployment profiles. 3. App Monitoring ✅ App Deployment Failures Go to Apps > Monitor > App install status. Review any failed or pending deployments. ✅ Pending App Approvals (if using Company Portal) Check for any user requests pending approval. 4. Configuration Profiles ✅ Profile Deployment Status Go to Devices > Configuration profiles > [Profile] > Device status and review failed deployments. ✅ Script Execution Failures Monitor Devices > Scripts > [Script Name] > Device status. 5. Endpoint Security ✅ Policy Status Check Endpoint Security > Antivirus / Firewall / Disk encryption policies. ✅ Threat Detection Use Microsoft Defender for Endpoint (if integrated) to monitor threats or incidents. 6. User Issues & Support ✅ Review Helpdesk Tickets Coordinate with the support/helpdesk team for any new issues related to device provisioning, compliance, or app deployments. ✅ Device Enrollment Failures Go to Devices > Monitor > Enrollment failures and review. 7. Audit & Alerts ✅ Audit Logs Review Tenant admin > Audit logs for recent changes made by admins. ✅ Alerts & Notifications Check for any Alerts under Microsoft 365 Defender, Azure AD, or Intune alerts if configured. 8. Licensing & Users ✅ License Availability Check license availability in Microsoft 365 Admin Center. ✅ User Assignment Issues Make sure new users are assigned proper Intune licenses and groups.

49

Intune (L1-L3) 1️⃣ What is Microsoft Intune? A cloud-based endpoint management solution for devices and apps. 2️⃣ What can Intune manage? Windows, macOS, iOS, Android, and cloud apps. 3️⃣ What is MDM and MAM? MDM: Manage device settings | MAM: Manage app data. 4️⃣ How to enroll a Windows device in Intune? Settings > Accounts > Access work or school > Connect. 5️⃣ What is Company Portal? An app users install to enroll and access company resources. 6️⃣ What is Compliance Policy? Rules defining device health, security, and OS version. 7️⃣ What is a Configuration Profile? Pushes device settings like Wi-Fi, VPN, and restrictions. 8️⃣ How to deploy apps via Intune? Use Apps section in Intune portal to assign apps. 9️⃣ What is Autopilot? Simplifies and automates Windows device setup. 1️⃣0️⃣ Difference between Required and Available app deployment? Required: Auto-install | Available: User-initiated via Company Portal. 1️⃣1️⃣ What is Conditional Access in Intune? Control access to apps based on compliance and conditions. 1️⃣2️⃣ How to retire or wipe a device? Devices > Select Device > Retire or Wipe. 1️⃣3️⃣ What is Endpoint Security in Intune? Centralized security policies for device protection. 1️⃣4️⃣ How to monitor device compliance? Via Reports > Device compliance or Devices tab. 1️⃣5️⃣ What is Device Enrollment Manager (DEM)? A role for bulk enrolling multiple devices. 1️⃣6️⃣ What is Intune Data Warehouse? Provides historical data for custom reporting. 1️⃣7️⃣ How to check Intune logs? Via C:\ProgramData\Microsoft\IntuneManagementExtension\Logs 1️⃣8️⃣ What is Co-Management? Manage devices with both SCCM and Intune. 1️⃣9️⃣ What is Enrollment Status Page (ESP)? Displays device setup progress during Autopilot. 2️⃣0️⃣ What is Windows Hello for Business? Passwordless sign-in using PIN, biometric, or security key. 2️⃣1️⃣ What’s a Device Profile? Configuration rules applied to devices for settings and restrictions. 2️⃣2️⃣ What is Role-Based Access Control (RBAC) in Intune? Assign specific permissions to admin roles. 2️⃣3️⃣ How to deploy a PowerShell script? Devices > Scripts > Add Script. 2️⃣4️⃣ What is Endpoint Analytics? Insights into device health and performance. 2️⃣5️⃣ What is App Protection Policy (APP)? Controls corporate data within apps, even on unmanaged devices. 2️⃣6️⃣ What is a Compliance Report? Shows device health and policy status. 2️⃣7️⃣ How to block personal device enrollment? Set platform restrictions in Device enrollment restrictions. 2️⃣8️⃣ How to assign a device to a user? Via Intune portal > Devices > Properties > Primary User. 2️⃣9️⃣ What is Defender for Endpoint integration? Adds advanced threat protection to managed devices. 3️⃣0️⃣ What is Remote Lock? Instantly lock a device remotely via Intune.

39

Intune (L1-L3) 1️⃣ What is Microsoft Intune? A cloud-based endpoint management solution for devices and apps. 2️⃣ What can Intune manage? Windows, macOS, iOS, Android, and cloud apps. 3️⃣ What is MDM and MAM? MDM: Manage device settings | MAM: Manage app data. 4️⃣ How to enroll a Windows device in Intune? Settings > Accounts > Access work or school > Connect. 5️⃣ What is Company Portal? An app users install to enroll and access company resources. 6️⃣ What is Compliance Policy? Rules defining device health, security, and OS version. 7️⃣ What is a Configuration Profile? Pushes device settings like Wi-Fi, VPN, and restrictions. 8️⃣ How to deploy apps via Intune? Use Apps section in Intune portal to assign apps. 9️⃣ What is Autopilot? Simplifies and automates Windows device setup. 1️⃣0️⃣ Difference between Required and Available app deployment? Required: Auto-install | Available: User-initiated via Company Portal. 1️⃣1️⃣ What is Conditional Access in Intune? Control access to apps based on compliance and conditions. 1️⃣2️⃣ How to retire or wipe a device? Devices > Select Device > Retire or Wipe. 1️⃣3️⃣ What is Endpoint Security in Intune? Centralized security policies for device protection. 1️⃣4️⃣ How to monitor device compliance? Via Reports > Device compliance or Devices tab. 1️⃣5️⃣ What is Device Enrollment Manager (DEM)? A role for bulk enrolling multiple devices. 1️⃣6️⃣ What is Intune Data Warehouse? Provides historical data for custom reporting. 1️⃣7️⃣ How to check Intune logs? Via C:\ProgramData\Microsoft\IntuneManagementExtension\Logs 1️⃣8️⃣ What is Co-Management? Manage devices with both SCCM and Intune. 1️⃣9️⃣ What is Enrollment Status Page (ESP)? Displays device setup progress during Autopilot. 2️⃣0️⃣ What is Windows Hello for Business? Passwordless sign-in using PIN, biometric, or security key. 2️⃣1️⃣ What’s a Device Profile? Configuration rules applied to devices for settings and restrictions. 2️⃣2️⃣ What is Role-Based Access Control (RBAC) in Intune? Assign specific permissions to admin roles. 2️⃣3️⃣ How to deploy a PowerShell script? Devices > Scripts > Add Script. 2️⃣4️⃣ What is Endpoint Analytics? Insights into device health and performance. 2️⃣5️⃣ What is App Protection Policy (APP)? Controls corporate data within apps, even on unmanaged devices. 2️⃣6️⃣ What is a Compliance Report? Shows device health and policy status. 2️⃣7️⃣ How to block personal device enrollment? Set platform restrictions in Device enrollment restrictions. 2️⃣8️⃣ How to assign a device to a user? Via Intune portal > Devices > Properties > Primary User. 2️⃣9️⃣ What is Defender for Endpoint integration? Adds advanced threat protection to managed devices. 3️⃣0️⃣ What is Remote Lock? Instantly lock a device remotely via Intune. Hashtags: #MicrosoftIntune #EndpointManagement #DeviceCompliance #CloudSecurity #MDM #Autopilot #MobileDeviceManagement #CloudInfra #ITSupport #ModernWorkplace

163

12 Comments

🔗 How Azure AD Connect Works — A Step-by-Step Breakdown Azure AD Connect is the bridge between your on-premises Active Directory and Microsoft’s cloud services like Office 365, Teams, and Intune. Here's how it functions: 🖥️ 1. Installation Azure AD Connect is installed on a Windows Server that has: Access to your on-prem Active Directory (AD DS) Internet connectivity to reach Azure AD 🔄 2. Synchronization Options Sync Type - Description a. Directory Sync - Syncs users, groups, contacts, and password hashes from AD to Azure AD. b. Password Hash Sync (PHS) - Enables seamless sign-in by syncing password hashes c. Pass-through Authentication (PTA) - Authenticates users directly against on-prem AD — no password hashes stored in cloud d. Federation (AD FS) - Uses AD FS for authentication — less common today ⏱️ 3. Sync Schedule Runs every 30 minutes by default Can be triggered manually using: Start-ADSyncSyncCycle -PolicyType Delta 🔐 4. Sign-In Experience Method Description Cloud-only Users authenticate directly with Azure AD Hybrid Identity Users sign in with their on-prem AD credentials across cloud apps ✅ Key Benefits 1. Single Sign-On (SSO): Unified access to cloud and on-prem apps 2. Hybrid Support: Ideal for organizations transitioning to the cloud 3. Centralized Identity Management: Manage users from local AD while extending to Azure 🖼️ Visual Overview +------------------------+ +------------------------+ | On-Prem Active Directory| --> | Azure Active Directory | | (Users, Groups, PWs) | | (Office 365, Teams, etc.) | +------------------------+ +------------------------+ ^ | Azure AD Connect (Server) +------------------------+

70