Author | Lightnews

Ben Whitmore | MVP @byteben.bsky.social · 27d

Most patch Windows. Few patch browsers.
Extensions = mini-apps with major risk.

🕵️ Audit permissions
⚡ Classify risk
🛡️ Block/allow with Intune

Stop “free coupon finders” from finding your data.
Take back control today! #Intune

msendpointmgr.com/2025/10/04/t...

3

Reposted by Ben Whitmore | MVP

Merill Fernando 💚 @merill.net · May 27

🚀 Tired of Microsoft Graph PowerShell module headaches? 🤯

Say goodbye to dependency conflicts & endless auth prompts! 👋

I built Uninstall-Graph to completely remove all MS Graph PowerShell modules, giving you a clean slate. 🧼✨

Get it now: uninstall-graph.meri...

Landing page of site with text: Clean Slate for Your
Microsoft Graph
PowerShell Environment
Completely uninstalls and removes all Microsoft Graph PowerShell modules from your system. Say goodbye to dependency conflicts and multiple authentication prompts.

5 10 40

Reposted by Ben Whitmore | MVP

Patch My PC @patchmypc.com · Mar 18

Struggling with app updates? We’ve got you covered! Join our upcoming webinar to master supersedence & dependencies in #ConfigMgr, #WSUS, and #Intune so your updates run smoothly every time! Let’s make patching easier 💪 Reserve your spot ⬇️ #PatchMyPC patchmypc.com/supersedence...

Configuring Supersedence and Dependencies in ConfigMgr, WSUS and Intune Webinar | Patch My PC

Join us on March 26 to dive into supersedence and dependencies in ConfigMgr, WSUS, and Intune. Gain practical insights on configuring app updates, managing dependencies, and optimizing deployments for...

patchmypc.com

1 3

Ben Whitmore | MVP @byteben.bsky.social · Feb 23

I just published a deep dive on OAuth flows, from coding it yourself vs. using the Graph SDK. Do you know why PKCE is crucial? 🔐

#Intune admins, sometimes understanding stuff means playing with code you don't have to right?

msendpointmgr.com/2025/02/23/u...

#EntraID #MicrosoftGraph

Understanding OAuth: Coding the authentication flow yourself vs using an SDK - MSEndpointMgr

Dive into Microsoft Graph authentication with PowerShell. In this blog we explore OAuth flows, PKCE security, and token handling. Learn how to build a secure auth flow from scratch and why the SDK mig...

msendpointmgr.com

1 4 15

Ben Whitmore | MVP @byteben.bsky.social · Feb 15

🔍 New Blog: "Diving into the Microsoft Entra PowerShell Module"

Learn why #Intune admins might choose to skip it entirely.

#Intune #Entra #MicrosoftGraph

msendpointmgr.com/2025/02/15/a...

A Mini Dive into the Microsoft Entra PowerShell Module: An Intune Administrator's Perspective - MSEndpointMgr

In this post, we'll analyse the Entra PowerShell module's authentication implementation and discuss whether it's necessary for your Intune automation needs if you're already using the Microsoft.Graph....

msendpointmgr.com

2 5

Ben Whitmore | MVP @byteben.bsky.social · Feb 9

Ever wondered how the Company Portal really works under the hood?
🌉 The secret lies in Jeff Bridges! (Yes, really!)
🧵 I dug deep, finding one answer is🧊 Igloo Water

🔎 Full deep dive: msendpointmgr.com/2025/02/09/c...
#Intune #ConfigMgr

5 15

Ben Whitmore | MVP @byteben.bsky.social · Jan 22

Struggling with Graph API calls to the Intune Reporting Endpoint or jumping through filters of doom in the Intune Admin Center?

✅This script is for you!

github.com/byteben/MEM/...

#Intune #PowerShell #MicrosoftGraph #EndpointManagement #Automation #ITAdmins

5 21

Reposted by Ben Whitmore | MVP

Patch My PC @patchmypc.com · Jan 21

Engineers @byteben.bsky.social @mauricedaly.com @call4cloud.nl will be hosting our session 🙌 Don't miss it!

1 2

Ben Whitmore | MVP @byteben.bsky.social · Jan 13

Deep Dive: Microsoft Graph SDK Authentication Methods

🔑 Client secrets vs certificates
🏛️ Azure Key Vault
🤖 Automation with PowerShell
🌐 Cross-tenant & multi-cloud tips
🧀 Avoiding security "Swiss cheese"

msendpointmgr.com/2025/01/12/d...

#MicrosoftGraph #Intune #Automation

Deep Diving Microsoft Graph SDK Authentication Methods - MSEndpointMgr

Learn how to authenticate to Microsoft Graph using the Microsoft Graph SDK for secure automation workflows.

msendpointmgr.com

4 13

Ben Whitmore | MVP @byteben.bsky.social · Dec 26

😍

a man is looking through a glass door with an open sign on it

ALT: a man is looking through a glass door with an open sign on it

media.tenor.com

Ben Whitmore | MVP @byteben.bsky.social · Dec 26

This is cool! 🎉 Did you know Microsoft Graph exposes Base64-encoded device data via the alternativeSecurityIds property? You can decode it to compute and verify a device's public key for secure validation. 🔐 #MicrosoftGraph #EntraID

9

Ben Whitmore | MVP @byteben.bsky.social · Dec 26

🚀 Post Updated!
Are you looking for a detailed and systematic examination of cert attributes, extensions, and associated metadata to validate the authenticity of your Entra/Intune devices? 🔐

#Intune #EntraID

msendpointmgr.com/2024/10/12/u...

Unpacking the Microsoft Intune MDM and Entra ID Certificate - MSEndpointMgr

In this post we take a small deep-dive into the Intune MDM certificate and talk about OID's and how they can be leveraged to elevate your trust in the device identity.

msendpointmgr.com

7

Ben Whitmore | MVP @byteben.bsky.social · Dec 25

🎄 Feeling festive? 🎅 Dive into our latest video @msendpointmgr.bsky.social with @mardahl.bsky.social and I where we unwrap the magic of the Graph SDK auth for Intune automation!

🔑 Authenticate securely.
📜 Use app registrations, delegated permissions, & cert-based auth.

youtu.be/ExGEvkYz45M?...

Simplifying Intune Automation with Microsoft Graph SDK: Exploring Authentication Options

YouTube video by MSEndpointMgr - Jungling the Cloud

youtu.be

5 11

Ben Whitmore | MVP @byteben.bsky.social · Dec 24

Warning - click bait heading here at its finest but also worth considering if you use Sentinel and Intune.

"Fine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector" - MSEndpointMgr

msendpointmgr.com/2024/12/24/f...

Fine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector - MSEndpointMgr

Learn how to fine-tune your data collection for Azure Sentinel when using Intune while carefully weighing the impact on security and compliance.

msendpointmgr.com

1 5

Ben Whitmore | MVP @byteben.bsky.social · Dec 22

🙌🏻

a woman talking on a cell phone with the words " opportunities like this " above her

ALT: a woman talking on a cell phone with the words " opportunities like this " above her

media.tenor.com

1 1

Reposted by Ben Whitmore | MVP

Nathan McNulty @nathanmcnulty.com · Dec 20

We're looking to hire another Purview expert for our team! :)

$150-$200K base salary DOE
32 hour work weeks
100% remote work from home
100% employee health coverage
3% 401k (no contribution required)

If you love learning and helping people, check it out:
patriotconsultingtech.com/work-for-pat...

6 5 21

Ben Whitmore | MVP @byteben.bsky.social · Dec 21

Sterling work 🍺🍺

2

Reposted by Ben Whitmore | MVP

Michael Niehaus @niehaus.bsky.social · Dec 20

It exists.
2pintsoftware.com/products/dep...

2Pint Software - DeployR - Modern operating system deployment

2Pint Software specializes in advanced IT infrastructure solutions for large enterprises.

2pintsoftware.com

7 6 35

Ben Whitmore | MVP @byteben.bsky.social · Dec 9

Haha

a cartoon of a woman with blue hair covering her face

ALT: a cartoon of a woman with blue hair covering her face

media.tenor.com

1 1

Ben Whitmore | MVP @byteben.bsky.social · Dec 8

The user isn’t using a privileged account?

3

Ben Whitmore | MVP @byteben.bsky.social · Dec 8

Do you have 2016 DCs or higher?

1

Ben Whitmore | MVP @byteben.bsky.social · Dec 8

And this is all in place and correct for cert requirements?

learn.microsoft.com/en-us/window...

Windows Hello for Business on-premises certificate trust deployment guide

Learn how to deploy Windows Hello for Business in an on-premises, certificate trust scenario.

learn.microsoft.com

1

Ben Whitmore | MVP @byteben.bsky.social · Dec 8

Do you have KDCs (DCs) correctly configured in the AD site the user signs into?

3

Ben Whitmore | MVP @byteben.bsky.social · Dec 7

Haha. The only thing non stick about non stick pans is the vendors promise that it’s non stick 😂

Ben Whitmore | MVP @byteben.bsky.social · Dec 7

Playing with timestamping today. It’s always been a thing of the dark arts but now it’s much clearer to me. It’s also useful to know which URLs are being used during your cryptographic operations.

1 3