Carl Barrett

New video exploring a crucial access feature, Continuous Access Evaluation, which helps revoke resource access based on critical user events. youtu.be/m3309aUKET8 00:00 - Introduction 00:17 - Token refresher 01:20 - Access Token 03:51 - Continuous Access Evaluation 04:35 - Critical user events 05:35 - Services supported 06:09 - CAE capable clients 06:39 - Checking if CAE is being used 07:32 - Demo part 1 07:52 - Requirement summary 08:20 - Revocation events and SLA 09:29 - Demo part 2 10:17 - 401 and claims challenge 13:22 - Longer lived tokens 14:52 - CA location awareness 18:14 - Split path warning with strict enforcement 18:28 - Demo part 3 19:22 - Strict enforcement CA option 20:24 - Split-path architecture 24:04 - Entra safety for split path 26:27 - Summary 27:32 - Close #microsoft #security #entra #azuread #azure #entraID

I’m also surfing technology waves and seeking out the best, edible, cheese at bsky.app/profile/bytebe…

If you like me here, you might also like me at BlueSky. Same content, just more focused and less fuss. Follow me here for content about #MSIntune, #Windows and more👉bsky.app/profile/pvande…

Time to move, see you all here bsky.app/profile/cbarre…

I'm using Bluesky these days too, follow me if you're too: bsky.app/profile/nickol…

This is my v1, I'll add options to directly follow from the site itself but first ✅ LET'S FILL IT UP! → Add your Bluesky profile today and let others find you. 🙏 Please repost to let everyone know!

I am just putting this out there: microsoftedge.microsoft.com/addons/detail/…

@Kostastsale For anyone curious, you can achieve the same in Intune by taking the xml, encoding it to Base64, and throwing it into the the Default Associations Configuration policy. It's also a rare CSP that will take precedence over GPO whether you like it or not. #defaultassociationsconfiguration" target="_blank" rel="nofollow noopener">learn.microsoft.com/en-gb/windows/…

Apps occasionally refuse to uninstall because the IME insists the device is stuck in the Enrollment Status Page (ESP) Account Setup phase. Let's explore why devices get stuck and how the IME reads - and sometimes misreads - the ESP progress. pmpc.link/extension-espp…

Buckle up! Standalone MCC can be useful in many scenarios - I've been testing on Windows and Linux here for a while but from Oct 30 you can all have a go!

I am happy to announce that #IntuneDebugToolkit is now part of Winget. This makes debugging so easy in OOBE and much more! #MSIntune #Windows #MSEndpointMgr

Its been a while, brushed off the cobwebs and...tada! "Unpacking the Microsoft Intune MDM Certificate" - MSEndpointMgr #MSIntune #Intune @MSEndpointMgr msendpointmgr.com/2024/10/12/unp…

Windows RDP Event Logs: Part-1 systemweakness.com/windows-rdp-ev…

Make sure you're using the May 2024 #ADK for #Windows11 24H2. The download has been available since release at aka.ms/adk, but its not updated in #winget yet

😍🤩👇

You can start enrolling (if you dare) #Windows11 24H2 with #MSIntune feature update ring or #ConfigMgr Windows Servicing to your test devices. I'm surprised that #MSIntune has day 1 support for the new OS version! ❤️🙏Must be the 1st time! 😀 @ariaupdated

Kernel Mode vs User Mode explained by a retired Windows developer!

🚨Intune Settings Rundown 2409! Get your new #Intune settings info here! This month features: MacOS 15 & iOS 18 Support, Personal Data Encryption, Windows Sandbox, Delivery Optimization and Edge! skiptotheendpoint.co.uk/settings-rundo…

@IntuneSuppTeam Thanks, opened a support ticket. Will post back any findings 👍

@CarlBarrettUK Hi, Carl! We had a look at our escalation queue and recent service incidents, and no current issues currently flagged on our end around this behavior. If you're able to repro, could you share any relevant info under ESP logs and current impacted version(s) of Windows? Thanks! ^MS

@IntuneSuppTeam any reports of Device ESP not honouring the block list during Pre-Provisioning today please? Thank you