Powershell

Great tool to change MECM content path locations

Posted on 21/02/202421/02/2024 by Remy Kuster

Just a tip for a really useful tool. Our storage department was planning a storage migration so the content share used for applications, packages, etc in MECM (SCCM) changed. We already used a cname to point to the content share for a lot of objects but not for all of them. So I was looking for a tool to change content paths to the correct cname share in MECM.

This tool does the job! I can really recommend it!

Assign Intune device category based on users department property

Posted on 14/02/202405/04/2024 by Remy Kuster

macOS devices enrolled via Apple Business Manager don’t have the option to be enrolled to Intune with a group tag like Windows devices. With a group tag you can create a dynamic device group and then auto assign a scope tag to those devices. So it would be nice to think of something so macOS devices also could be added to a dynamic group and then auto assign a scope tag to those devices. In order to achieve this I created a PowerShell script with Intune Graph to auto assign a (department) category to the macOS Intune managed devices based on the users department property. You can read my post to find out how you can achieve this.

Deploy Microsoft Project and Visio (Click-to-run)

Posted on 05/02/202405/02/2024 by Remy Kuster

I got a request at work if I could create the deployment of the latest versions (Click-to-run) of Microsoft Visio and Project and set the Monthly update channel. The deployment of the applications should be made available in the Company Portal for users that are a member of the Entra ID synced Active Directory group to which the Visio and or Project Online plan licenses are assigned to.
We still run a 32 bits MS365 Apps on devices so got a mix of 32 bits and 64 bits MS 365 apps. The deployment should automatically detect the MS 365 apps architecture and then install the correct 32 or 64 bits version of Project and / or Visio. In this post I will show you how I did this. I will also provide all the sources and scripts you need to accomplish this.

Change Intune device category with PowerShell and MS Graph Intune module

Posted on 23/01/202423/01/2024 by Remy Kuster

I tried to find a way to be able to change the category assigned to an Intune device without having to use the Intune portal. I found a lot of information about it and even working scripts. But these scripts didn’t do exactly what I wanted. So I used some scripts and information about PowerShell and the MS Graph Intune module and merged them into my script. Some results I wanted to accomplish were to change an Intune device category by using the device name and the category name not the device ID or category ID. I also build in some checks. I wrote this post about it and I hope you find it useful.

Fix 7-zip vulnerability help file

Posted on 20/04/202220/04/2022 by Remy Kuster

A vulnerability was found in 7-Zip 21.07 that can be exploited through the 7-Zip Help file. This post will show how to remediate this vulnerability by deleting the 7-zip.chm file. In this post I will show you 2 ways you can accomplish this:
With a MECM (SCCM) configuration item deployment and with Intune script. In this post I will remediate the 7-zip (all versions) 64 bits version with MECM, and only the 21.07 (32 and 64 bits) version with Intune.

Set custom Teams backgrounds with Powershell

Posted on 07/02/202115/05/2021 by Remy Kuster

I got a request at work that it would be nice if users already have got some of the companies custom teams background that they can select as their background in a meeting. They wouldn’t have to upload the images themselves but they would already be in teams to select. It also should be easy to add new custom backgrounds if needed. So I made a powershell script with a colleague of mine that would do this. In this post I will show you how this script works and you can use it yourself.

Check if a device is NOT a member of a specific group

Posted on 06/07/202006/04/2021 by Remy Kuster

With this PowerShell script you can check if a device is NOT a member of a specific group. A colleague and I created this script because our AD computers should be a member of 1 out of 3 AD groups. If the device is not member of one of these groups certain group policy’s wont be loaded and some thing won’t work properly. With the results of this script we know that devices have to be added to a AD group to function properly.

PowerShell Active Directory Module on Windows 10

Posted on 16/12/201903/03/2023 by Remy Kuster

The PowerShell active directory module allows you to do the following things:

Manage and automate standard domain-related tasks
Check domain user Active Directory attributes and group memberships on the users workstation, if installed on users workstation (described in this post)