David Brook

Founder, Contributor

I am an experienced End User Computing Engineer who works on delivering Modern Desktop concepts using Microsoft Intune and Configuration Manager.

I’ve worked in IT for the past 8+ years with over 6 of those been a 3rd Line/Senior Engineer delivering solution to Medium/Large enterprise environments. I have worked on Micro Focus Novell ZENworks with ENGL Imaging, Which offered the traditional ‘Gold Image’ creation with the additional driver packs layered on top. More recently I have worked on a project to move away from ZENworks and traditional imaging techniques to the Modern Desktop approach using Intune and Autopilot with Co-Management functionality (Configuration Manager).

Did I mention I have a serious love for Powershell… Nope… Well I do. I have a passion for automation and delivering high standards of work.

I started this blog to share my experiences and also act as a personal Wiki of How-to’s and also share some thinds that I have develop.

Qualifications

Credly Profile

Exams Passed: SC-300

Achieved: August 2022

Exams Passed: SC-200

Achieved: July 2022

Exams Passed: MS-500

Achieved: June 2022

Exams Passed: MS-100 & MS-101

Achieved: April 2022

Exams Passed: MD-100 & MD-101

Achieved: August 2021

Exams Passed: AZ-500

Achieved: January 2021

48 Posts by this author

Windows 365 Custom Images - Part 1 - The Foundations

Welcome along for the ride as we talk about Windows 365 Custom Images, and how we can use Azure Image Builder to create these images.

Windows 365 Custom Images - Part 2 - PowerShell Deployment

Welcome to the second post in the series talking about Windows 365 Custom Images, and how we can use Azure Image Builder to create these images.

Windows 365 Custom Images - Part 3 - Azure DevOps Deployment

David Brook
9 Min To Read
31 May, 2023
- Windows 365
- Azure image builder
- Azure
- Dev ops
- Bicep
- Yaml

Welcome to the third post in the series talking about Windows 365 Custom Images, and how we can use Azure Image Builder to create these images.

Windows 365 Custom Images - Part 4 - Azure AVD UI

Welcome to the fourth (& final… for now) post in the series talking about Windows 365 Custom Images, and how we can use Azure Image Builder to create these images.

ASR Custom Data Collection with Intune

David Brook
4 Min To Read
24 May, 2023
- Power bi
- Intune
- Log analytics
- Asr

At MMS MOA 2023, I presented a session alongside Kenny Buntinx on Attack Surface Reduction (ASR) rules, a session filled with lessons learnt, interaction and belgian chocolate.

Graph API & Power BI - MMS Edition

David Brook
6 Min To Read
19 May, 2023

What a blast this year at MMS MOA 2023!

Log Analytics API Data Access with Service Principals

David Brook
5 Min To Read
09 May, 2023
- Log analytics

As IT Professionals start to look to the cloud for solutions, more and more of us are starting to utilise Log Analytics, weather that be to underpin other services & solutions or writing our own custom log collection scripts, it is becoming a very key piece of many deployments.

Driver and Firmware Servicing PowerShell Module

David Brook
3 Min To Read
20 Mar, 2023
- Drivers
- Firmware
- Powershell
- Updates
- Graph API

Its been just over a month since the announcement of Commercial Driver and Firmware Servicing by Microsoft.

Bulk Enrol Device to Driver and Firmware Servicing

David Brook
4 Min To Read
17 Feb, 2023
- Drivers
- Firmware

The driver and firmware serving solution currently allows you to onboard up to 2000 devices at once using a CSV file, and even then most of the leg work need to be completed by the Admin to export, populate a CSV and then upload it and so on.

View Applicable Devices for Driver Deployments

David Brook
5 Min To Read
16 Feb, 2023
- Drivers
- Firmware

The commercial Driver and Firmware servicing has been big talk across the system management community (SEE PRESS RELEASE HERE) since it’s release on valentines day.

Add Offer Deferrals to Driver and Firmware Policies

David Brook
4 Min To Read
15 Feb, 2023
- Drivers
- Firmware
- Updates

It’s been a days or so since the release of the public preview of Driver and Firmware management (SEE PRESS RELEASE HERE), and many of you may have used the GUI to create your policies, and have been left scratching your head as to why you cannot specify a deferral period.

Driver Management via Graph API and PowerShell

David Brook
9 Min To Read
14 Feb, 2023
- Drivers
- Firmware

Microsoft have now released the Driver and Firmware Update management via the Graph API to the public!

VLOG - Driver and Firmware Updates Preview GUI Configuration

David Brook
1 Min To Read
14 Feb, 2023
- Drivers
- Firmware
- Windows
- Updates

In this video, we’ll walk you through: Installing required components Configuring the App Registration Securing your Web Application with User or Group Access Launching the GUI A brief look around the GUI Useful Links Node.

Create Windows 365 Azure Network Connections with PowerShell

David Brook
5 Min To Read
23 Jan, 2023
- Windows 365
- Intune
- Cloud PC
- Power shell
- Graph API

Windows 365 and Azure Network connections offers additional control over routing, IP Addresses, Subnets, Peerings and so on.

Troubleshooting New MS Store App Install Error 0x00000000

David Brook
3 Min To Read
12 Jan, 2023

While performing some work out in the wild, it was noted that one of the Microsoft Store Apps (New) would not install unless excluded from all policies.

VLOG - Windows 365 Access Solutions

In this video, we’ll walk you through: Self service methods of Access Approval Steps Bringing this into your SLAM Process Why group based assignments are optimal Useful Links Entitlement Management (Access Packages) Getting Started with Windows 365 Enterprise Windows 365 Business vs Enterprise Comparison Windows 365 Pricing and Plans Microsoft Flow & Power Automate

Why Windows 365?

David Brook
5 Min To Read
05 Jan, 2023

Windows 365 (Cloud PC) is the hot topic of the moment, and why wouldn’t it be?

Windows 365 - Graph API and PowerShell Basics

David Brook
9 Min To Read
05 Dec, 2022

This article was composed using Windows 365 Enterprise licences, the experience may differ if using Windows 365 Business.

VLOG - Windows Update for Business Reports

David Brook
1 Min To Read
02 Dec, 2022
- Updates
- Windows

In this video, we’ll walk you through Configuring Windows Update for Business Reports, Creating a Device Configuration Profile for Windows Devices, Ways to Access the Reports and a brief look at using the Logs and Kusto Queries (KQL).

Import GPOs to Group Policy Analytics using Graph API

David Brook
3 Min To Read
18 Nov, 2022

Many organisations are starting to adopt cloud technologies, some of which decide to start again with a clean slate and add in policies where necessary.

Bulk Remove Autopilot DisplayName Property

David Brook
2 Min To Read
10 Nov, 2022

Often, during the initial adoption of Microsoft Intune you will see organisations and admins try and maintain some of their technical debt of old.

VLOG - Getting Started with Windows 365 Enterprise

David Brook
1 Min To Read
03 Nov, 2022

A look into a ‘From the Ground Up’ approach to Windows 365, including Licensing, differences in Product SKUs, configuration and also three ways to access Windows 365.

VLOG - Getting Started with Windows Autopatch

David Brook
1 Min To Read
01 Nov, 2022
- Autopatch
- Intune
- Updates

This video goes over what Windows Autopatch is, and how the tenant enrollment flow happens.

Configure Self-Service Password Reset with Cloud Sync

David Brook
4 Min To Read
22 Sep, 2022
- Azure
- Azure ad
- Identity

Self-Service Password reset is just one of many features that reduce the pressure on support staff.

VLOG - Azure AD Connect Cloud Sync

David Brook
1 Min To Read
07 Sep, 2022
- Azure
- Azure ad
- Identity

What is this video about? This video goes over the configuration of Azure AD Connect Cloud Sync, with some insight into what the differences are with its bigger brother AADC, the Pre-Reqs and some other insights.

VLOG - Isolate your Hyper V Lab Environment from your network

David Brook
1 Min To Read
17 Aug, 2022

My first Vlog Post This video, is the first, of what I hope to be many Vlog’s.

Create a Microsoft Team with Graph API and PowerShell

Why use an API to create a Teams Channel?

Use Bicep to Compile or Decompile ARM Templates

David Brook
3 Min To Read
17 Jul, 2022

What is Bicep? Bicep is a domain-specific language (DSL) that uses declarative syntax to deploy Azure resources.

Deny Resource Type Creation with Azure Policy

David Brook
3 Min To Read
07 Jul, 2022
- Compliance
- Azure policy

What is Azure Policy? Azure Policy is a way to help organisations enforce standards and compliance.

Disable WiFi MAC Randomization on Samsung with Intune

David Brook
5 Min To Read
17 Jun, 2022
- Knox
- Samsung

Why disable MAC Randomization? In some scenarios setting static IP Addresses for mobile devices is a requirement (such as EPOS, Kiosks, Meeting Room Self-Service Tablets etc.

Configure Samsung Knox SSO with Azure

David Brook
2 Min To Read
09 Jun, 2022
- Azure
- Knox
- Samsung
- Sso

Why should I configure SSO? Configuring SSO in Knox Login to Samsung Knox

Getting Started with Samsung Knox for Enterprise

David Brook
6 Min To Read
26 May, 2022
- Intune
- Knox
- Samsung

What is Samsung Knox? Samsung Knox is a service made up of a number of solutions such as Knox Mobile Enrollment and Knox Platform for Enterprise.

Microsoft Graph API and PowerBI

David Brook
15 Min To Read
25 May, 2022
- Azure
- Azure ad
- App registrations
- Powershell
- Intune
- Graph API
- Power bi
- Logic apps

A little bit about this post At MMS 2022 I took a huge leap and briefly presented this in the Tips & Tricks Session.

Update Apple SCIM Token

What is SCIM? Meaning: SCIM (System for Cross-domain Identity Management)

Autopilot Enrolment Terms of Use

Why would I want to do this? Whats the Purpose?

Create Dynamic Application Packages with PowerShell

Dynamic? In what way? When I say the packages are dynamic, I mean that you don’t have to update the application package when a new version is released by the vendor.

Deploy Windows Subsystem for Linux

David Brook
8 Min To Read
15 Feb, 2021

What is the Windows Susbsystem for Linux? As per the Microsoft Documentation, The Windows Subsystem for Linux (WSL) is a new Windows 10 feature that enables you to run native Linux command-line tools directly on Windows, alongside your traditional Windows desktop and modern store apps.

Creating Intune Win32 Apps

David Brook
8 Min To Read
05 Jan, 2021

Win32 Apps, What Are they? If you’re familiar with Configuration Manager/MEMCM then think of these files as your source directory, the difference being you are effectively zipping it up and then uploading to Intune.

Finding Microsoft Graph API's from the Web

David Brook
2 Min To Read
05 Oct, 2020
- Azure
- Graph API

Why do I need to find these? Welcome (Back) to another post about the graph API’s, This time it isn’t so much about rambling through documentation but about giving you a nice handy tip on your route to finding what API is been called when browsing in the Web Console.

Backup and Import App Protection Policies

Why backup App Protection Policies? Why would you need to back up something that runs in stored and hosted on Azure?

Backup and Import Conditional Access Policies

Why backup Conditional Access Policies? Why would you need to back up something that runs in stored and hosted on Azure?

Backup and Import Intune Compliance Policies

Why backup Compliance Policies Why would you need to back up something that runs in stored and hosted on Azure?

Backup and Import Intune Device Configuration Profiles

Why backup Device Configuration Profiles? Why would you need to back up something that runs in stored and hosted on Azure?

Add devices to an Azure Group using the Microsoft Graph API

David Brook
7 Min To Read
11 Aug, 2020

Have you ever needed to add a device to an Azure AD Group as part of your MEMCM or Autopilot deployment for specific app, profiles or scripts?

Enrol Devices to Autopilot (Unattended)

David Brook
9 Min To Read
07 Aug, 2020

I have been working on a project at the company I work for, and up to this point we have been primarily focused on getting new devices imported and deploying via Autopilot.

Create an Azure App Registration

David Brook
4 Min To Read
08 Jul, 2020

What can you use an Azure App Registration for An Azure App Registration has many uses, in my case I use it mainly for the Microsoft Graph API to perform Intune Configuration Profile backups, List devices, Update local CMDB dynamically and also enrol devices into Autopilot.

Breaking Down Custom OMA-URI (CSP) Policies

David Brook
8 Min To Read
30 Jun, 2020

What is an OMA-URI Policy? Meaning: Open Mobile Alliance Uniform Resource Identifier Traditionally when you implement a new piece of software which contains Group Policy Objects (GPO’s) to customise the feature of the application you would import the .

Getting Useful Device Information… Troubleshooting Made Easy

David Brook
3 Min To Read
23 May, 2020
- Power shell tools

SO… I’ve been working tirelessly in trying to get an Autopilot Hybrid Deployment working along with my colleagues.