Building a custom Windows Update Report p1: Parsing HTML via PowerShell on modern systems (no IE)

Wow, it's been a while! A customer of mine recently wanted a detailed report that should include info such as how many weeks is the Windows on the machine behind the latest available Security Update. We've found to a way to combine Intune Data Warehouse and PowerBI to pull data that allows to identify the...

A case of OneDrive Personal Vault not coming up (0x8031000a, MDM, GPO and BitLocker)

Today I wanted to enable the Personal Vault feature on my Home PC. While following the wizard I got an error 0x8031000a "Your organization requires your device to join the domain before you can use the Personal Vault". What does this have to do with MDM. GPO and BitLocker troubleshooting? Here's some quick Friday entertainment!...

Clean up references to your custom domain name from an Azure AD test tenant

Today I needed to move my custom domain name from an old (and messy) AAD test tenant to a (sparkling) new one. Problem is, you can't simply delete the old custom name, since your user's UPNs and Email addresses are using it (AAD actually presents a nice screen, showing all the dependencies, but I am...

Viewing the encrypted Apple profiles in Workspace ONE UEM console

Apple has an option to encrypt the MDM profile payloads (both iOS and macOS). But then when you try to view the profile XML in the console (ex. migrating payloads between UAT and Production environments, working with custom profiles) - they are encrypted! Turns out, there is a way to view the XML w/o having...

Integrating Workspace ONE reporting with PowerBI

Last week one of my customers asked if Workspace ONE data could be used in PowerBI. Since Workspace ONE Intelligence Reports are included in every WS1 edition and are accessible via API - this is the easiest way to expose data to external systems. But how exactly? Even though I've never used PowerBI before, after...

Adding FIDO2 + Windows Hello fingerprint auth to Workspace ONE

This will be a short "recipe" type of post on how to showcase a new feature that was introduced in latest Workspace ONE Access SaaS release (sorry, no news for on prem now): FIDO2 auth. The video shows Yubikey, which I don't have, so I will be using Windows Hello (which in turn will use...

App version management in Android Enterprise – Managed Play Closed Tracks and their nuances

If you think my titles are wordy, check the official title of good old Robinson Crusoe! Anyway, today we will look at two important things: Using Managed Google Play feature called Closed Tracks to control app versions and update cycles in two scenarios:Multiple "deployment rings" for different device groupsDeveloper having customers with different update cyclesImportant...

Enroll a Fully Managed non-GMS Android device using ADB

When dealing with non-GMS Android devices (specialized rugged devices, devices in China) one big challenge is actually enrolling them, since the code that enrolls a Fully Managed device is not part of AOSP. As I mentioned in my post about China, only a few vendors took care of this. In this post we you will...

iOS 14.2 Xamarin bug – using Workspace ONE Intelligence Automations to improve user experience

There is currently an issue (confirmed by Microsoft) with Xamarin-based apps built for iOS 14.2 - they crash when deployed via MDM (but do not crash if installed manually from store) and only on the newer devices (iPhone XR etc). In this post I will show a solution that we came up with together with...

Android 11 COPE and the end of Internal apps

We know about the changes to Android 11 COPE, and how they affect the EMMs. One aspect that was slightly overlooked though, is what happens to Internal apps, which many organizations are still employing. We have recently released a KB, which caused a bit of panic between customers and colleagues. Let’s dive deeper and see...