How to enable Windows devices to reset the Pin with Azure federated Domains

In today’s fast-paced work environment, seamless and secure access to Windows devices is paramount. Azure Joined Devices, combined with the Hello for Business Pin, provides a streamlined authentication process that helps users quickly access their Windows devices. However, there is a crucial detail that many organisations tend to overlook, especially when they have federated their

Exporting VMware Workspace ONE Baselines Configurations via API

To keep your Windows Desktop devices configured to best practices you can use Baselines. Workspace ONE UEM curates industry-recommended settings into one Baseline configuration to simplify securing your devices. Baselines reduce the time it takes to set up and configure Windows devices. Baselines can be found in “Resources”, “Profiles & Baselines” and “Baselines”: If you

Manage local administrators/groups with CSP

Managing local groups with Workspace ONE is not that complicated. There is a CSP you can use for it. See here. To use the CSP you need to create an XML for the group configuration. This will look like this: As you can see, in the “accessgroup desc” the target group is selected. For every

Windows Update for Business Updated

When talking about Windows Update it’s often a pain point, for administrator to configure and for users to experience.Over the years multiples OSes came out and a layer of settings has been added, replaced and even interacted with each other.Adding to that, Windows changed from Group Policy management to Configuration Service Provider (API) management which

Improve Windows Update reporting

In the last year, I create a PowerShell script that improved the overall admin experience of Windows Update for Business. You can find the post here. Now, I worked on improving the report functionality. For this I added several registry keys to track and provide the right installation status. Under the WindowsUpdate key, there are

KB – Windows Proxy configuration

Workspace ONE and Windows management are always complicated when using a proxy. To avoid further misunderstandings I tested all five different scenarios and here are the results: INET WINHTTP BITS INET+WINHTTP INET+BITS WINHTTP+BITS HUB start yes yes Yes yes yes Yes HUB works yes no no yes restart required Manual Enrollment yes No – *Works

KB – Enterprise Wipe doesn’t remove all apps

Issue When executing an Enterprise Wipe there are one or more apps left on the device. Root Cause There two reasons why an app was not uninstalled during an Enterprise Wipe: App has an auto update functionality and has changed the version or installer code changed with the automated update instllation An app gets not

Horizon Golden Master – Best practice

  • Posted on
  • Posted in Horizon
In current virtual desktop environments the direction went since a couple of month more and more in the direction of non-persistent systems. That mean, you get every time a blank Windows 10 machine for instance. Why that is the way to go? If you deploy a Windows machine including the applications and profile data you

KB – Device status: discovered

We all know the different device status like “Enrolled”, “Unenrolled”, “Enrollment in Progress”….But ever heard of “Discovered”? After some investigations and help from Sergiu Constantin, we were able to reproduce the status and found the root cause. Basically the discovered status means, that the device was connected to UEM but now the device is blocked.
BCF Shop Theme By aThemeArt.
BACK TO TOP