<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Intune on justinverstijnen.nl</title><link>https://justinverstijnen.nl/blog/intune/</link><description>Recent content in Intune on justinverstijnen.nl</description><generator>Hugo</generator><language>en</language><atom:link href="https://justinverstijnen.nl/blog/intune/index.xml" rel="self" type="application/rss+xml"/><item><title>Automatically start Windows App at startup</title><link>https://justinverstijnen.nl/automatically-start-windows-app-at-startup/</link><pubDate>Thu, 25 Dec 2025 00:00:00 +0000</pubDate><guid>https://justinverstijnen.nl/automatically-start-windows-app-at-startup/</guid><description>&lt;h2 id="creating-the-intune-script"&gt;Creating the Intune script&lt;a class="td-heading-self-link" href="#creating-the-intune-script" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;We can achieve this with Intune using a PowerShell script. As Intune doesn&amp;rsquo;t support login/startup scripts, we have to create a Platform script that creates a Scheduled Task in Windows for us. This is a great way, as this is visible at the client side and can be disabled pretty easily.&lt;/p&gt;
&lt;p&gt;To create this task/script, go to the Intune Admin center: &lt;a href="https://intune.microsoft.com"&gt;https://intune.microsoft.com&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;Go to Devices -&amp;gt; Windows -&amp;gt; Scripts and remediations, then open the tab &amp;ldquo;Platform scripts&amp;rdquo;.&lt;/p&gt;</description></item><item><title>Deploy Google Chrome Single Sign On with Intune</title><link>https://justinverstijnen.nl/deploy-google-chrome-single-sign-on-with-intune/</link><pubDate>Thu, 11 Dec 2025 00:00:00 +0000</pubDate><guid>https://justinverstijnen.nl/deploy-google-chrome-single-sign-on-with-intune/</guid><description>&lt;h2 id="how-the-extension-works"&gt;How the extension works&lt;a class="td-heading-self-link" href="#how-the-extension-works" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;The Microsoft SSO extension for Google Chrome uses the same token/session you already have when you have your device Entra ID joined. It will send that to every Microsoft Online webpage to show you are already authenticated and have a valid token. This makes the user experience a lot better as they don&amp;rsquo;t have to authenticate first before starting to use the web applications.&lt;/p&gt;</description></item><item><title>Disable Windows Taskbar Widgets through Intune</title><link>https://justinverstijnen.nl/disable-windows-taskbar-widgets-through-intune/</link><pubDate>Thu, 06 Nov 2025 00:00:00 +0000</pubDate><guid>https://justinverstijnen.nl/disable-windows-taskbar-widgets-through-intune/</guid><description>&lt;p&gt;&lt;img src="https://sajvwebsiteblobstorage.blob.core.windows.net/blog/disable-windows-taskbar-widgets-through-intune-5551/jv-media-5551-0e5b331ce973.png" alt=""&gt;&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="method-1-settings-catalog"&gt;Method 1: Settings Catalog&lt;a class="td-heading-self-link" href="#method-1-settings-catalog" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;The easiest way to disable these widgets is through a Settings Catalog policy. Open up Microsoft Intune admin center and create a new policy through the Settings Catalog.&lt;/p&gt;
&lt;p&gt;Search for &amp;ldquo;widget&amp;rdquo; and these options are available:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;News and Interests: Disable Widgets on Lockscreen&lt;/li&gt;
&lt;li&gt;News and Interests: Disable Widgets Board&lt;/li&gt;
&lt;li&gt;Widgets: Allow Widgets&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;img src="https://sajvwebsiteblobstorage.blob.core.windows.net/blog/disable-windows-taskbar-widgets-through-intune-5551/jv-media-5551-81938df80595.png" alt=""&gt;&lt;/p&gt;
&lt;p&gt;In my case, I have set all three options to disabled/Not allowed.&lt;/p&gt;</description></item><item><title>Using and configuring Windows Backup for Organizations in Intune</title><link>https://justinverstijnen.nl/configure-windows-backup-for-organizations-in-intune/</link><pubDate>Sat, 01 Nov 2025 00:00:00 +0000</pubDate><guid>https://justinverstijnen.nl/configure-windows-backup-for-organizations-in-intune/</guid><description>&lt;h2 id="requirements"&gt;Requirements&lt;a class="td-heading-self-link" href="#requirements" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Windows 11 &lt;a href="https://learn.microsoft.com/en-us/windows/configuration/windows-backup/?tabs=intune#backup-requirements"&gt;with the latest feature updates installed&lt;/a&gt; for both creating and restoring backups&lt;/li&gt;
&lt;li&gt;Entra ID joined or Entra Hybrid joined device&lt;/li&gt;
&lt;li&gt;Microsoft Intune-capable license&lt;/li&gt;
&lt;li&gt;Around 15 minutes of your time&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="what-is-windows-backup-for-organizations"&gt;What is Windows Backup for Organizations?&lt;a class="td-heading-self-link" href="#what-is-windows-backup-for-organizations" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;Windows Backup for Organizations is a feature where Windows creates a backup of your Windows settings and Windows Store applications every 8 days. This will be saved to your Microsoft business account. If ever having to re-install your device or to use a new device, you can easily restore your old configuration. This is a revolution on top of the older Enterprise State Roaming feature, who did around 20% of this.&lt;/p&gt;</description></item><item><title>Remove Pre-installed Windows Store Apps with Intune</title><link>https://justinverstijnen.nl/remove-pre-installed-windows-store-apps-with-intune/</link><pubDate>Tue, 21 Oct 2025 00:00:00 +0000</pubDate><guid>https://justinverstijnen.nl/remove-pre-installed-windows-store-apps-with-intune/</guid><description>&lt;h2 id="this-new-feature-described"&gt;This new feature described&lt;a class="td-heading-self-link" href="#this-new-feature-described" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;In Intune we can now select which default shipped apps must be removed from Windows clients. Before, this was a complete package we had to use or remove with custom scripts, but now we can select the apps to remove (and deselect to keep).&lt;/p&gt;
&lt;p&gt;Keep in mind, we have the following requirements for this new feature:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Windows 11 25H2&lt;/li&gt;
&lt;li&gt;Education or Enterprise version&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Also worth mentioning, removing an application needs a manual reinstall, which is easy to do.&lt;/p&gt;</description></item></channel></rss>