Skip to content
  • Home
  • Group Policies
    • Allow Remote Desktop Access with Restricted Groups
    • Folder Redirection Setup
    • Group Policy Preference- Creating shortcuts
    • AGPM- Advanced group policy management
    • Orphaned GPO & Unlinked GPO
    • Create Firewall exception rules
    • GPO- Security Group filter
    • Application association for Windows Image
    • File association for Domain joined computers
    • Office Ribbon/Quick access Custom ribbon
    • Print Nightmare
    • Outlook- Meetings are created as Teams Online Meetings by default
    • Enable or Disable Office Add-in Resiliency
    • Remove office add-in resiliency for a specific group.
    • Immediate task- deploy scripts in group policy
    • Scheduled Task- Deploying scripts using Group policy
    • Delete Scheduled task
    • Group Policy Copying files/set of files to location
    • Enable/Disable Microsoft Edge enterprise sync
    • Policy Analyzer
    • Enforce Outlook Exchange Cache Mode
    • OneDrive KFM+ SSO Group Policy
  • UEM
    • Workspace One UEM (AirWatch)
      • iOS Enrollment- Workspace One UEM (AirWatch)
      • Deploy Public Apps for iOS – Workspace One UEM (AirWatch)
    • Intune
      • General Intune UEM Prerequisite
      • Windows Enrollment
        • Windows Enrollment-BYOD-MAM [Mobile Application Management] User Scope
        • Windows Enrollment-COBO-MDM [Mobile Device Management] User Scope
      • Android Enrollment
        • Android-BYOD-Android Enterprise personally owned devices with a work profile
        • Android-COBO-Corporate-Owned, Fully managed user device
      • iOS/iPadOS Enrollment
        • iOS/iPadOS-BYOD-User enrollment [Part 1] Prerequisites- Intune Profiles and Policies
        • iOS/iPadOS-BYOD-User enrollment [Part 2] Prerequisites- Apple Business Manager and Federated Authentication
        • iOS/iPadOS-BYOD-User enrollment [Part 3] Enrollment Stage
        • iOS/iPadOS-COBO-Device Enrollment (Non-Supervised)
        • iOS/iPadOS-COBO-Device enrollment [Part 1] Prerequisites (Supervised Mode)
        • iOS/iPadOS-COBO-Device Enrollment [Part 2] Enrollment stage (Supervised Mode)
        • Intune Apple Token Renewal
      • Deploy OneDrive for Azure Joined Devices – Intune
      • Intune- Compliance Policy
      • Compliance policy- Require Bitlocker
      • Intune- Bitlocker Silent Encryption
      • Intune- Bitlocker Recovery key Rotation + Non Compatible TPM
  • SharePoint
    • OneDrive KFM (Known Folder Move)
      • 1. Pre-Provision Users- OneDrive KFM
      • 2. Enable Single Sign on – OneDrive KFM
      • 3. OneDrive Group Policy – OneDrive KFM
      • 4. Deploy OneDrive for Azure Joined Devices – OneDrive KFM
      • 5. Secure OneDrive with Conditional Access Policy – OneDrive KFM
      • Folder Redirection to OneDrive using SharePoint File Share Migration – OneDrive KFM
  • Microsoft Entra ID
    • Microsoft Entra Hybrid join with Intune enrollment – Prerequisite
    • Microsoft Entra Hybrid join with Intune enrollment – Installation
    • Microsoft Entra Hybrid Join – Targeted Deployment with Intune Enrollment
    • Microsoft Entra Hybrid Join – Troubleshoot
    • Entra ID-Multi-factor authentication – Microsoft Authenticator
    • Microsoft Entra Self-Service Password Reset
    • Microsoft Entra Password Protection
    • Microsoft Entra- Windows LAPS
    • Account Lockout
    • Conditional Access Policy
      • Conditional Access – Terms of Use
      • Conditional Access- Block Legacy Authentication
      • Conditional access- Require MFA to Register or Join Devices
      • Conditional Access- Block access for unsupported device platform
      • Conditional Access- Registering Security information
      • Conditional Access- Require MFA for Intune Enrollment
      • Conditional Access- Require Compliant Device for Office 365
      • Conditional access- Require App Protection Policy (MAM)
      • Conditional Access- Require MFA for All Cloud Apps
      • Conditional Access- Administrator Session Control + MFA
      • Conditional Access – Administrator Microsoft Azure Management + Admin Portals Location Restriction
      • Conditional Access- Allow Only Administrators to Azure Management + Admin Portals
      • Conditional Access- Unmanaged Devices- App Enforced Restrictions- Sharepoint + Exchange Online
      • Conditional Access- Unmanaged Devices- Disable Persistent Browser Session
      • Conditional Access- Secure OneDrive
  • OPNsense
    • Best practice
    • NetFlow
    • Vlan
    • Intrusion Detection
    • Spamhaus Don’t Route Or Peer List (DROP)
    • GeoIP block- MaxMind GeoIP
    • Unbound DNS
      • BlockList
      • DNS over TLS
    • Opnsense Cloud backup
  • Printers
    • Xerox CentreWare Web Overview
      • Xerox CentreWare Web installation
      • Xerox CentreWare Web Discovery Method
        • Xerox CentreWare Web Printer Re-Discovery Method
        • Xerox CentreWare Web Active Directories Print server
      • Xerox CentreWare Web SNMP
      • Xerox Centreware Web SMTP Setup
      • Xerox Centreware Web Groups
        • Printer vs Group Actions
      • Xerox CentreWare Web Network Usage Configuration
      • Xerox CentreWare Web Device Configuration Policy
      • Xerox CentreWare Web Device Compliance
      • Xerox Centreware Web Printer Clone
      • Xerox Centreware Web Firmware Policy
      • Xerox Centreware Web Reporting
  • Powershell
    • Powershell Scripts
      • Windows 11 In place Upgrade Script (IPU) – Part 1
      • Windows 11 In place Upgrade Script (IPU) – Part 2
      • Windows 11 In place Upgrade Script (IPU) – Part 3
      • Powershell Script – Users and Departments in AD
      • Powershell Script – Password Expiration Notification
      • Powershell Script – Password generator
      • Powershell Script – AD Name Change
      • Powershell Script – Lenovo System Update
      • Powershell Script – Dell Command Update
    • Visual Studio Code
    • Powershell Fundamentals
    • Variables [Data Type]
    • Array & ArrayList [Data Structure]
    • Hashtables [Data Structure]
    • PS CustomObjects [Data Structure]
    • Pipeline
    • If, Else, ELSEIF(Conditional statement)
    • Switch (Conditional Statement)
    • ForEach (Loops)
    • For Loop (Loops)
    • While Loop (Loop)
    • Do While Loop (Loop)
    • Do Until Loop (Loop)
    • Error handling
    • Modules
    • Function
  • Microsoft Deployment Toolkit (MDT)
    • MDT- Application Deployment Part 1
    • MDT- Application deployment part 2
    • MDT- Application deployment part 3
    • MDT- Batch script
    • MDT- Powershell Script
    • MDT – Domain Join with Powershell
    • MDT – WSUS update with Powershell
    • MDT – Apply Group Policy Update
    • MDT – Windows Package Manager (Winget)
  • Azure Orchestration
    • Onboarding (ILM)
      • Front End Interface
        • Microsoft List Form (Intro)
        • Microsoft List Form (Part 2)
        • Microsoft List Form (Part 3 – Conclusion)
      • Microsoft Graph
        • Introduction to Microsoft Graph (API overview- Part 1)
        • Microsoft Graph Authentication Overview (Part 2)
        • Microsoft Graph Query Parameters (Part 3)
        • Microsoft Graph Permissions Scope (Part 4)
        • Microsoft Graph Explorer (Part 5)
        • Microsoft Graph Powershell SDK (Part 6)
      • Service Principal
        • Service Principal (Application Authentication) [Certificate]
        • Managed Identity
        • Managed Identity Permission
      • Azure Logic App
        • Logic App – Triggers
        • Logic App – Variables
        • Logic App – SharePoint connector
          • Logic App – Sharepoint Connector (Get items)
          • Logic App – Sharepoint Connector (Update item/Send an HTTP request to SharePoint)
        • Logic App – Azure Automation Connector
        • Logic App – Outlook 365 connector
        • Logic App – Microsoft Entra ID
        • Logic App – Parameters
        • Logic App – Data Operations
          • Logic App – Data Operations [Parse JSON]
          • Logic App – Data Operations [Compose]
          • Logic App – Data Operations- Group membership- [Example]
        • Logic App – Control actions
        • Logic App – Null values & Empty strings
        • Logic App – Functions and Dynamic Content
      • Azure Automation Account
        • Azure Automation Account – Runbook
        • Azure Automation Account – Runtime
        • Azure Automation Account – Modules
        • Azure Runbook – Connect to Microsoft Graph (certificate)
        • Azure Runbook – Connect to Microsoft Graph (Managed Identity)
        • Azure Runbook Hybrid Workers with Azure Arc
        • Azure Runbook – Secure Credential Management
  • About

Steven’s Knowledge Base

Blogs and Technical Guides

About

I created this blog to archive key insights and lessons learned, with the hope that it serves as a valuable resource for others.

-Steven

www.linkedin.com/in/steven17182

https://github.com/sli929/Public_Repository

Any ideas or suggestions, feel free to email user@blue929.com

Menu

  • Home
  • Group Policies
    • Allow Remote Desktop Access with Restricted Groups
    • Folder Redirection Setup
    • Group Policy Preference- Creating shortcuts
    • AGPM- Advanced group policy management
    • Orphaned GPO & Unlinked GPO
    • Create Firewall exception rules
    • GPO- Security Group filter
    • Application association for Windows Image
    • File association for Domain joined computers
    • Office Ribbon/Quick access Custom ribbon
    • Print Nightmare
    • Outlook- Meetings are created as Teams Online Meetings by default
    • Enable or Disable Office Add-in Resiliency
    • Remove office add-in resiliency for a specific group.
    • Immediate task- deploy scripts in group policy
    • Scheduled Task- Deploying scripts using Group policy
    • Delete Scheduled task
    • Group Policy Copying files/set of files to location
    • Enable/Disable Microsoft Edge enterprise sync
    • Policy Analyzer
    • Enforce Outlook Exchange Cache Mode
    • OneDrive KFM+ SSO Group Policy
  • UEM
    • Workspace One UEM (AirWatch)
      • iOS Enrollment- Workspace One UEM (AirWatch)
      • Deploy Public Apps for iOS – Workspace One UEM (AirWatch)
    • Intune
      • General Intune UEM Prerequisite
      • Windows Enrollment
        • Windows Enrollment-BYOD-MAM [Mobile Application Management] User Scope
        • Windows Enrollment-COBO-MDM [Mobile Device Management] User Scope
      • Android Enrollment
        • Android-BYOD-Android Enterprise personally owned devices with a work profile
        • Android-COBO-Corporate-Owned, Fully managed user device
      • iOS/iPadOS Enrollment
        • iOS/iPadOS-BYOD-User enrollment [Part 1] Prerequisites- Intune Profiles and Policies
        • iOS/iPadOS-BYOD-User enrollment [Part 2] Prerequisites- Apple Business Manager and Federated Authentication
        • iOS/iPadOS-BYOD-User enrollment [Part 3] Enrollment Stage
        • iOS/iPadOS-COBO-Device Enrollment (Non-Supervised)
        • iOS/iPadOS-COBO-Device enrollment [Part 1] Prerequisites (Supervised Mode)
        • iOS/iPadOS-COBO-Device Enrollment [Part 2] Enrollment stage (Supervised Mode)
        • Intune Apple Token Renewal
      • Deploy OneDrive for Azure Joined Devices – Intune
      • Intune- Compliance Policy
      • Compliance policy- Require Bitlocker
      • Intune- Bitlocker Silent Encryption
      • Intune- Bitlocker Recovery key Rotation + Non Compatible TPM
  • SharePoint
    • OneDrive KFM (Known Folder Move)
      • 1. Pre-Provision Users- OneDrive KFM
      • 2. Enable Single Sign on – OneDrive KFM
      • 3. OneDrive Group Policy – OneDrive KFM
      • 4. Deploy OneDrive for Azure Joined Devices – OneDrive KFM
      • 5. Secure OneDrive with Conditional Access Policy – OneDrive KFM
      • Folder Redirection to OneDrive using SharePoint File Share Migration – OneDrive KFM
  • Microsoft Entra ID
    • Microsoft Entra Hybrid join with Intune enrollment – Prerequisite
    • Microsoft Entra Hybrid join with Intune enrollment – Installation
    • Microsoft Entra Hybrid Join – Targeted Deployment with Intune Enrollment
    • Microsoft Entra Hybrid Join – Troubleshoot
    • Entra ID-Multi-factor authentication – Microsoft Authenticator
    • Microsoft Entra Self-Service Password Reset
    • Microsoft Entra Password Protection
    • Microsoft Entra- Windows LAPS
    • Account Lockout
    • Conditional Access Policy
      • Conditional Access – Terms of Use
      • Conditional Access- Block Legacy Authentication
      • Conditional access- Require MFA to Register or Join Devices
      • Conditional Access- Block access for unsupported device platform
      • Conditional Access- Registering Security information
      • Conditional Access- Require MFA for Intune Enrollment
      • Conditional Access- Require Compliant Device for Office 365
      • Conditional access- Require App Protection Policy (MAM)
      • Conditional Access- Require MFA for All Cloud Apps
      • Conditional Access- Administrator Session Control + MFA
      • Conditional Access – Administrator Microsoft Azure Management + Admin Portals Location Restriction
      • Conditional Access- Allow Only Administrators to Azure Management + Admin Portals
      • Conditional Access- Unmanaged Devices- App Enforced Restrictions- Sharepoint + Exchange Online
      • Conditional Access- Unmanaged Devices- Disable Persistent Browser Session
      • Conditional Access- Secure OneDrive
  • OPNsense
    • Best practice
    • NetFlow
    • Vlan
    • Intrusion Detection
    • Spamhaus Don’t Route Or Peer List (DROP)
    • GeoIP block- MaxMind GeoIP
    • Unbound DNS
      • BlockList
      • DNS over TLS
    • Opnsense Cloud backup
  • Printers
    • Xerox CentreWare Web Overview
      • Xerox CentreWare Web installation
      • Xerox CentreWare Web Discovery Method
        • Xerox CentreWare Web Printer Re-Discovery Method
        • Xerox CentreWare Web Active Directories Print server
      • Xerox CentreWare Web SNMP
      • Xerox Centreware Web SMTP Setup
      • Xerox Centreware Web Groups
        • Printer vs Group Actions
      • Xerox CentreWare Web Network Usage Configuration
      • Xerox CentreWare Web Device Configuration Policy
      • Xerox CentreWare Web Device Compliance
      • Xerox Centreware Web Printer Clone
      • Xerox Centreware Web Firmware Policy
      • Xerox Centreware Web Reporting
  • Powershell
    • Powershell Scripts
      • Windows 11 In place Upgrade Script (IPU) – Part 1
      • Windows 11 In place Upgrade Script (IPU) – Part 2
      • Windows 11 In place Upgrade Script (IPU) – Part 3
      • Powershell Script – Users and Departments in AD
      • Powershell Script – Password Expiration Notification
      • Powershell Script – Password generator
      • Powershell Script – AD Name Change
      • Powershell Script – Lenovo System Update
      • Powershell Script – Dell Command Update
    • Visual Studio Code
    • Powershell Fundamentals
    • Variables [Data Type]
    • Array & ArrayList [Data Structure]
    • Hashtables [Data Structure]
    • PS CustomObjects [Data Structure]
    • Pipeline
    • If, Else, ELSEIF(Conditional statement)
    • Switch (Conditional Statement)
    • ForEach (Loops)
    • For Loop (Loops)
    • While Loop (Loop)
    • Do While Loop (Loop)
    • Do Until Loop (Loop)
    • Error handling
    • Modules
    • Function
  • Microsoft Deployment Toolkit (MDT)
    • MDT- Application Deployment Part 1
    • MDT- Application deployment part 2
    • MDT- Application deployment part 3
    • MDT- Batch script
    • MDT- Powershell Script
    • MDT – Domain Join with Powershell
    • MDT – WSUS update with Powershell
    • MDT – Apply Group Policy Update
    • MDT – Windows Package Manager (Winget)
  • Azure Orchestration
    • Onboarding (ILM)
      • Front End Interface
        • Microsoft List Form (Intro)
        • Microsoft List Form (Part 2)
        • Microsoft List Form (Part 3 – Conclusion)
      • Microsoft Graph
        • Introduction to Microsoft Graph (API overview- Part 1)
        • Microsoft Graph Authentication Overview (Part 2)
        • Microsoft Graph Query Parameters (Part 3)
        • Microsoft Graph Permissions Scope (Part 4)
        • Microsoft Graph Explorer (Part 5)
        • Microsoft Graph Powershell SDK (Part 6)
      • Service Principal
        • Service Principal (Application Authentication) [Certificate]
        • Managed Identity
        • Managed Identity Permission
      • Azure Logic App
        • Logic App – Triggers
        • Logic App – Variables
        • Logic App – SharePoint connector
          • Logic App – Sharepoint Connector (Get items)
          • Logic App – Sharepoint Connector (Update item/Send an HTTP request to SharePoint)
        • Logic App – Azure Automation Connector
        • Logic App – Outlook 365 connector
        • Logic App – Microsoft Entra ID
        • Logic App – Parameters
        • Logic App – Data Operations
          • Logic App – Data Operations [Parse JSON]
          • Logic App – Data Operations [Compose]
          • Logic App – Data Operations- Group membership- [Example]
        • Logic App – Control actions
        • Logic App – Null values & Empty strings
        • Logic App – Functions and Dynamic Content
      • Azure Automation Account
        • Azure Automation Account – Runbook
        • Azure Automation Account – Runtime
        • Azure Automation Account – Modules
        • Azure Runbook – Connect to Microsoft Graph (certificate)
        • Azure Runbook – Connect to Microsoft Graph (Managed Identity)
        • Azure Runbook Hybrid Workers with Azure Arc
        • Azure Runbook – Secure Credential Management
  • About
  • September 2026
  • August 2026
  • July 2026
  • February 2026
  • May 2025
  • January 2025
  • December 2024
  • November 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
Create a website or blog at WordPress.com
  • Subscribe Subscribed
    • Steven’s Knowledge Base
    • Already have a WordPress.com account? Log in now.
    • Steven’s Knowledge Base
    • Subscribe Subscribed
    • Sign up
    • Log in
    • Copy shortlink
    • Report this content
    • View post in Reader
    • Manage subscriptions
    • Collapse this bar