Deploy Intune App Protection Policies based on Management State

Microsoft Intune is always evolving, and with the latest round of updates they have added a feature to target Intune App Protection Policies based on the device's management state. Since Intune App Protection Policies are identity-driven, it was common for someone with a mix of managed and unmanaged devices to receive the same App Protection Policies - whereas an organization may want to be a little less strict with policies that target managed devices versus unmanaged devices. For example, my company wants to force company data to be saved to OneDrive or SharePoint instead of saving to the local storage.…

Read More

Remove Windows 10 Provisioned Apps with Intune

Since the days of Windows 8, IT Pros have had to find a way to remove the built-in or "provisioned apps" that ship with Windows. Doing a quick search on the web will provide plenty of ways on how to achieve this during OSD, or even through servicing your Windows image, but today I am going to walk you through removing the apps by deploying a script through Microsoft Intune. NOTE - Although this post covers deploying a script through Intune, you can easily deploy it using other means like ConfigMgr, GPO, or a Scheduled Task. The trick is that…

Read More