Managing and enforcing security policies for devices and apps to protect organizational data through Intune
563 questions with Microsoft Security | Intune | Security tags
Tenant lockout via Conditional Access policy - all admins blocked - request Data Protection Team - Case 2608241420002425
Our production tenant has been fully locked out for 3+ days by an accidental from a employee including our BTG account. Conditional Access change (Block / All users / All apps / All locations). All Global Administrators and the break-glass account are…
Microsoft Security | Intune | Security
Intune Firewall Default Outbound Block Cuts Connectivity Before Firewall Rules Apply
I am deploying two Intune Firewall policies: A Firewall Configuration policy A Firewall Rules policy In the Firewall Configuration policy, I have configured the Default Outbound Action as Block, with the intention of allowing only the required…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
Bitlocker Drive locked - error shows - The password failed to unlock the volume D
As we confirmed that the BitLocker recovery key is successfully escrowed in Entra ID/Intune and that the Recovery Key ID stored in Entra matches the Recovery Password protector ID on the encrypted D: drive. also verified the BitLocker protectors on the…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
AllowInstanceIDs registry key not unblocking USB until manual device uninstall
Hi everyone, I am building a batch script to manage USB storage policy via Device Installation Restrictions in the registry under HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions. The global block works fine, but when I attempt to…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
USB Access Policy – Blocking Baseline and SID Rule Issue
I would like to implement a baseline policy where all USB devices are blocked by default, while allowing access only to specific approved USB devices for designated users. However, when I try to configure this using SID-based rules, it doesn’t behave as…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
HP Wolf Security
I am having a terrible time removing HP Wolf Security from 4 of the endpoints I manage, it either repairs or will not remove in the first place. I need defender to be primary and I need to get these computers from showing as non-compliant. Please help.
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
Unable to edit ASR rules created in Intune - (Block use of copied or impersonated system tools, Block rebooting machine in Safe Mode)
Unable to edit ASR rules created in Intune - (Block use of copied or impersonated system tools, Block rebooting machine in Safe Mode)
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
AI answer
Hacked microsoft account (email, phone number and password changed)
I lost my account this morning, the email was changed to ******@ishowfirstmail.com. (I can send the whole email if needed) and then removed my own email from security information. I tried filling out those forms for account recovery but they say that i…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
AI answer
Bitlocker Key does not work. I checked the details stored with Microsoft and used that to unlock but get an error message
Bitlocker Key does not work. I checked the details stored with Microsoft and used that to unlock but get an error message stating the code is not valid. I have also removed the Laptop from the Register but still not able unlock. I raseid a ticket sever…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
AI answer
Windows Security Key Login with Multiple Accounts on Key
We are currently implementing security key logins for Windows 11 using YubiKey FIDO keys on our AutoPilot deployed AzureAD only joined devices. So far the implementation is working well for the majority of our users. Our administrators have separate…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
Windows for business | Windows Client for IT Pros | User experience | Other
WDAC / App Control for Business filepath rules not honored on Windows Server 2019 (SPF .p7b) — same policy works on Server 2022 (MPF .cip)
Good afternoon, I would like to open this thread to discuss a specific behavior we are observing with the legacy WDAC — now App Control for Business — when deploying policies to Windows Server 2019. Scenario We are currently rolling out App Control for…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
ASR - Excel Memory Issue
Dear All, We have both MDM and MDE enrolled devices. policies are applied from ASR, some how we got the below error and we removed app & browser isolation, made ASR reduction rule in audit mode and excluded office files. We have only application…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
I ain't get codes to my email to change my number
Everything i try to change my number i ain't get any codes sent to my email to verify it's me
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
AI answer
Understanding the Security Trade‑offs Between Edge MAM and Secure Browsers
We are currently evaluating BYOD desktop access models and trying to clearly understand the security boundaries between policy‑based controls (Conditional Access, device posture, and DLP using Edge MAM) and browser‑level isolation approaches (secure…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
LSA protection and attack surface rules
Hi, We are implemting defender ssecurity. After putting ASR in audit we start to follow the recommandations. After son time we see the ASR rule "Block credential stealing from the Windows local security authority subsystem (lsass.exe)" is…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
Cant remove work or school account from personal PC
recently left an organization and my ID there was disabled. When employed there, I used my personal PC for work as well as my own stuff. Now I get frequent requests to log in to my Work or School Account. How do I remove the Work account from my personal…
Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
Windows for business | Windows Client for IT Pros | User experience | Other
Advanced Hunting missing
Hi We have Microsoft 365 Premium licenses which include Defender for Business. I am trying to use Advanced Hunting but that link missing from the Security Portal. What am I missing?
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
Possible to block just Screen Recording but not Screenshots?
Previously, when enabling the blocking of screen capturing for iOS devices, and then setting a group to exclude that. Users in the group to be included could not screen capture or screen record. While users in the exclude group, could screen capture, but…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
Microsoft Security | Intune | Microsoft Intune iOS
Managing iOS devices using Microsoft Intune
2 Bitlocker Policies
Hi all I have 2 active bitlocker policies Is it possible to remove one policy without losing Encryption Keys?
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune
Smime certificate impossible to use it on outlook 2021
Hello, i am having a problem when I need to configure the smime certificate on a PC with outlook classic 2021. I have installed the CA on 4 computers with outlook 2021 e 2019 with no issue but on this one after imported from outlook it does not appear to…
Microsoft Security | Intune | Security
Managing and enforcing security policies for devices and apps to protect organizational data through Intune