Intune on JanBakker.tech

Lock or sign-out when Yubikey is removed from the device

Tue, 21 Jul 2026 13:53:20 +0000

I didn’t know there was already a solution for this, and maybe you are looking for it too. I learned about this from the Blue Security Podcast.

Meet: YubiKey Locker | Yubico

With YubiKey Locker, implement a protocol-agnostic security key removal policy that seamlessly integrates across various operating systems. This is important in meeting existing smart card customer security requirements (e.g. policies for smart card removal behavior), but also enables the forward-looking customer to bridge to modern protocols like FIDO2 passkeys, while staying compliant with their existing security policies. Moreover, the capability developed by Sciber enhances overall security posture for all organizations by locking the workstation or logging off the user when a YubiKey is not present, so it’s a great capability not only for those sunsetting legacy methods or form factors.

Admin control for SSO prompts in Windows; finally, an off switch!

Thu, 16 Jul 2026 07:15:29 +0000

If you’ve been paying attention to the EEA sign-in changes over the past while, you’ll know Microsoft started prompting users before reusing their Windows credentials to sign in to other Microsoft apps and services. Good for user choice, less great if you’re an admin who just spent years getting SSO working and now watches it ask permission every time.

Block users from viewing their BitLocker keys

Tue, 16 Aug 2022 10:29:09 +0000

This post is mainly focused on a new tenant setting, where you can prevent your end-users from viewing their Bitlocker keys. By design, your users can see Bitlocker keys from devices they own from the MyAccount portal. My Account (microsoft.com)

For some (large) enterprise organizations, this is an unwanted feature.

Download Intune PowerShell scripts with Graph Explorer

Tue, 05 Apr 2022 14:14:46 +0000

This quick post will show an easy method to fetch your PowerShell scripts after you have uploaded them using the Intune management portal. Unfortunately, the portal does not provide a UI to download the script content as soon as you hit that save button.

Microsoft 365 self-service using Power Apps

Wed, 12 Jan 2022 15:12:05 +0000

This article was originally posted on the Microsoft 365 PnP Blog.

I was inspired by this post from Loryan Strant, that used Microsoft Forms to add users to an Azure AD group so that they were upgraded to Windows 11. With that in mind, I created a mock-up and posted it on Twitter.

Food for thought - Bring Your Own Disaster.

Mon, 28 Sep 2020 14:41:49 +0000

Today a slightly different blog post. It’s a common discussion that I face almost daily. Clients that embrace the “anywhere, anytime, any device” approach, and want to take control over their data. And that’s not as easy as it sounds.

Set additional clocks to Windows 10 using Intune

Mon, 01 Jun 2020 06:38:14 +0000

When you work for an international company, or you have to deliver support in other timezones, you might find yourself Googling for time in different timezones from time to time. At least I did.

Then I start looking for a way to make this easier and I was thinking to use BGInfo do reflect the time on my background. When struggling with this for 2 hours, I accidentally stumbled upon this setting, where you can display 2 additional clocks:

Install Windows Package Manager (winget) using Intune

Sat, 23 May 2020 10:47:27 +0000

Microsoft released a preview of the Windows Package Manager. I’m not going into detail about the product itself, because there are a lot of (better) alternatives for this already in the market. Today, we focus on how to get this tool installed on your endpoints, so you can use it for your software distribution. In this approach I use the APPX package. Normally I would use the Business Store for this, that version does not (yet) contain the winget feature.

Manage Teams custom backgrounds using Intune

Thu, 16 Apr 2020 20:10:44 +0000

Update! I got some feedback on this blog. Seems that if your users are not members of the local administrator group, install will faill with error: 0x80070001. I’ve updated the article to solve this problem. I replaced the cmd files for Powershell scripts and did some minor changes to the detection and uninstall scripts. This should now work for users without admin permissions.