Ben Whitmore | MVP

Ben Whitmore | MVP

@byteben.bsky.social

Intune, ConfigMgr and a twist of PowerShell #BlackBeltProblemSolver🥋 @PatchMyPC 💙 Serious proclivity for 🧀

824 followers96 following32 posts

Ben Whitmore | MVP reposted

Michael Escamilla
@michaelescamilla.bsky.social

Certificates are scary, But be sure to join the webinar tomorrow where @byteben.bsky.social and @call4cloud.nl and myself talk about the Intune MDM device certificate and what the Intermediate cert expiring could mean for you. Maybe a little bit of talk about 🧀 too 😋🍴

Patch My PC@patchmypc.com

Everything can look healthy until things get weird. ❌ Scripts failing ❌ Apps not installing ❌ Policies acting inconsistently Some devices never properly renew their #Intune certificate expiry updates, and you may not know which ones yet. We’ll show you how to find them 👉 https://bit.ly/42futzM

bit.lyThe Intune Intermediate cert is expiring: what does this mean for youData is nice. Information is better. With Intune, you've got a mountain of cell values that are only instructive with a ton of time and exports. Join Patch My PC February 25 at 9am MST for a webinar about Why Intune Reporting Feels Hard.
Ben Whitmore | MVP
@byteben.bsky.social

Tired of your PowerShell scripts crashing when pulling Intune reports? 😩 Learn how to handle Microsoft Graph rate limits like a pro. 🛑 Understand global vs Intune limits 🚦 Respect Retry-After ⏱️ Use exponential backoff 👉 msendpointmgr.com/2025/11/08/g... #PowerShell #Intune #GraphAPI

msendpointmgr.comA beginners guide to Microsoft Graph API rate limiting in Intune - MSEndpointMgrLearn how to handle HTTP 429 rate limiting when working with Microsoft Graph API. Understand Retry-After, throttling limits, and exponential backoff for resilient PowerShell automation.

Ben Whitmore | MVP reposted

Merill Fernando 💚
@merill.net

🚀 Tired of Microsoft Graph PowerShell module headaches? 🤯 Say goodbye to dependency conflicts & endless auth prompts! 👋 I built Uninstall-Graph to completely remove all MS Graph PowerShell modules, giving you a clean slate. 🧼✨ Get it now: uninstall-graph.meri...

Ben Whitmore | MVP reposted

Patch My PC
@patchmypc.com

Struggling with app updates? We’ve got you covered! Join our upcoming webinar to master supersedence & dependencies in #ConfigMgr, #WSUS, and #Intune so your updates run smoothly every time! Let’s make patching easier 💪 Reserve your spot ⬇️ #PatchMyPC patchmypc.com/supersedence...

patchmypc.comConfiguring Supersedence and Dependencies in ConfigMgr, WSUS and Intune Webinar | Patch My PCJoin us on March 26 to dive into supersedence and dependencies in ConfigMgr, WSUS, and Intune. Gain practical insights on configuring app updates, managing dependencies, and optimizing deployments for...
Ben Whitmore | MVP
@byteben.bsky.social

I just published a deep dive on OAuth flows, from coding it yourself vs. using the Graph SDK. Do you know why PKCE is crucial? 🔐 #Intune admins, sometimes understanding stuff means playing with code you don't have to right? msendpointmgr.com/2025/02/23/u... #EntraID #MicrosoftGraph

msendpointmgr.comUnderstanding OAuth: Coding the authentication flow yourself vs using an SDK - MSEndpointMgrDive into Microsoft Graph authentication with PowerShell. In this blog we explore OAuth flows, PKCE security, and token handling. Learn how to build a secure auth flow from scratch and why the SDK mig...
Ben Whitmore | MVP
@byteben.bsky.social

🔍 New Blog: "Diving into the Microsoft Entra PowerShell Module" Learn why #Intune admins might choose to skip it entirely. #Intune #Entra #MicrosoftGraph msendpointmgr.com/2025/02/15/a...

msendpointmgr.comA Mini Dive into the Microsoft Entra PowerShell Module: An Intune Administrator's Perspective - MSEndpointMgrIn this post, we'll analyse the Entra PowerShell module's authentication implementation and discuss whether it's necessary for your Intune automation needs if you're already using the Microsoft.Graph....
Ben Whitmore | MVP
@byteben.bsky.social

Deep Dive: Microsoft Graph SDK Authentication Methods 🔑 Client secrets vs certificates 🏛️ Azure Key Vault 🤖 Automation with PowerShell 🌐 Cross-tenant & multi-cloud tips 🧀 Avoiding security "Swiss cheese" msendpointmgr.com/2025/01/12/d... #MicrosoftGraph #Intune #Automation

msendpointmgr.comDeep Diving Microsoft Graph SDK Authentication Methods - MSEndpointMgrLearn how to authenticate to Microsoft Graph using the Microsoft Graph SDK for secure automation workflows.
Ben Whitmore | MVP
@byteben.bsky.social

This is cool! 🎉 Did you know Microsoft Graph exposes Base64-encoded device data via the alternativeSecurityIds property? You can decode it to compute and verify a device's public key for secure validation. 🔐 #MicrosoftGraph #EntraID

Ben Whitmore | MVP
@byteben.bsky.social

🚀 Post Updated! Are you looking for a detailed and systematic examination of cert attributes, extensions, and associated metadata to validate the authenticity of your Entra/Intune devices? 🔐 #Intune #EntraID msendpointmgr.com/2024/10/12/u...

msendpointmgr.comUnpacking the Microsoft Intune MDM and Entra ID Certificate - MSEndpointMgrIn this post we take a small deep-dive into the Intune MDM certificate and talk about OID's and how they can be leveraged to elevate your trust in the device identity.
Ben Whitmore | MVP
@byteben.bsky.social

🎄 Feeling festive? 🎅 Dive into our latest video @msendpointmgr.bsky.social with @mardahl.bsky.social and I where we unwrap the magic of the Graph SDK auth for Intune automation! 🔑 Authenticate securely. 📜 Use app registrations, delegated permissions, & cert-based auth. youtu.be/ExGEvkYz45M?...

youtu.beSimplifying Intune Automation with Microsoft Graph SDK: Exploring Authentication OptionsYouTube video by MSEndpointMgr - Jungling the Cloud
Ben Whitmore | MVP
@byteben.bsky.social

Warning - click bait heading here at its finest but also worth considering if you use Sentinel and Intune. "Fine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector" - MSEndpointMgr msendpointmgr.com/2024/12/24/f...

msendpointmgr.comFine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector - MSEndpointMgrLearn how to fine-tune your data collection for Azure Sentinel when using Intune while carefully weighing the impact on security and compliance.
Ben Whitmore | MVP
@byteben.bsky.social

Playing with timestamping today. It’s always been a thing of the dark arts but now it’s much clearer to me. It’s also useful to know which URLs are being used during your cryptographic operations.

Ben Whitmore | MVP
@byteben.bsky.social

Blogs are queuing up. We dive into the Intune StatelessIWService soon to understand how the Company Portal impersonates the logged on user to populate stuff like app statuses and user device information. #MSIntune

Ben Whitmore | MVP
@byteben.bsky.social

Come join us and learn all you need to know about the Company Portal - with a look at the Company Portal UI, nuances of co-management and a dash of packet inspection and bridges to our favourite MDM agents #MSIntune

Patch My PC@patchmypc.com

What's your confidence level when using the Company Portal? Join us in our upcoming webinar on Nov. 20th 📆 where we'll unravel its mysteries and help clarify how it functions from install to the logs under the hood. Register 👇 We'll see you there! #PatchMyPC patchmypc.com/intune-compa...

patchmypc.comIntune Company Portal Demystified Webinar | Patch My PCJoin us November 20 in unravelling the mysteries of the Company Portal from start to finish and help clarify how it functions, from installation to logs.

Ben Whitmore | MVP reposted

Patch My PC
@patchmypc.com

We're excited to introduce ourselves to Bluesky! 👋 We develop a third-party patch and application management solution for Microsoft #ConfigMgr and #MSIntune. We exist to improve lives through customer-obsessed innovation. Learn more about us here 👉 patchmypc.com #PatchMyPC

Ben Whitmore | MVP
@byteben.bsky.social

Interesting. When the Intune MDM certificate is saved to the SYSTEM profile during certain enrolment scenarios, it is exported, without the private key, to the enrolling users profile too 🧐 Blog coming… #DiggingTooDeep

You are up to date.