@matt Soseman, great Video :) ! What license have you got installed, E3 or E5?

HI. The issue there though is that it blocks copying in the document itself which will stop people actually editing a document.

How to fix this issue ? other than office network i cant login in my outlook and teams, getting same error even on mobile also

How can we bypass that restrictions???

I was talking about Android

thanks for sharing

Hi Matt, so selecting the "Prevent installation of removing devices" is enabled and this should only Block USB drives right? It should NOT block like the headsets, or dongles for like mouse and keyboard right? Last thing, I need to assign this policy to All users and Exclude a special user group that needs access to USB drive.

Hi Matt! Great video! From the time of your video, it looks like Intune has made changes with the “word play” following your instructions, on my screen it says “Prevent installation of removable devices” but yours says Block removable storage. Are these the same meaning?

Is it possible to set up Windows logon with FIDO2 using a personal Microsoft account such as outlook?

Thank you, guys, for your efforts; it’s really helpful. Could you please clarify how to connect to the SPAN port?

If a word document has a link, and I click it, would that be blocked by turning this ASR rule on? Can you fine tune this rule?

Every time I try this, even for simple short bullets it says 'sorry, something went wrong. Please try again in a few moments'.. Not sure why.

Omg I can't even imagine what a security analysts thoughts would be clicking on Barbara.

trying to do the same thing using 365 Personal and Copilot Pro, but i dont have the Create presentation from file button, only create about and add a slide about. :/

great and super detailed, but would hv been greater if you slowed down a bit and mentioned at which step you are. thx for the effort. still at which step would you say the hash of the hash is being transmitted to entra? does this happen with the steps 4 - 6?

Can we use microsoft end point manager to be installed on a network backbone And not a server? Meaning i nean the security either on wifi or on a network work cable to be applied for the hardware serial number and Access Control List at the same time

How do I prevent a particular app being blocked by Smartscreen which I am trying to install? Device is being maintained by Intune.

old videos doesn't work anymore

Great video

Amazing content thank you .Going passwordless sounds great but how are we going to authenticate on MSFT native apps in Android and apple devices like outlook or teams onedrive?

Awesome explanation! Thank you!

Open PowerShell Admin ************************************************************************************************ Set-ExecutionPolicy bypass Install-Script -Name Get-WindowsAutopilotInfo -force [Y] Yes Get-WindowsAutopilotInfo -Online ************************************************************************************************* (If you copy this for later use give a like please!)

Does this block work on mobile as well? As in if I have the word doc open in Edge browser on mobile, will it work there too?

Thank you bro

Does it require any log server setup beforehand

hi, great video. Can you make another video explaining how to authenticate an Azure app in Tableau server i.e. the changes that we need to do in Tableau server settings to register an azure app, so that an external application can access the work book, reports from Tableau via this Azure app..that will be great. Thanks :)

Helpfull

Hey Matt love your stuff...this is great to know. All of the sudden my Tenant is inspecting and at times blocking copy and paste into web apps....Any idea what kind of policy that might live in?

, but does not meet the criteria to access this resource

Does MAM model block user for adding organisation user to non-managed application for example non-managed mail app?

THANK YOU! I was looking for this!

hey there, im getting error 65000, on devices that I'm trying to configure these settings: windows 11 ver 22h2

This no longer works as of Aug 2022.

Hello ! Do you have service to read sensitive data file on web browser ?

Hi Matt, thank you for the video. I want to block third-party uploads, but we won't label documents. Can we still deploy this policy?

Does this process still work in 2024? I set this up exactly the same but it still allows the device to enroll and personal and never shows the serial number as Enrolled :(.

Really interesting content, thanks!

Excellent overview. Some of those functions seem like hooks just because they can offer hooks, not because they provide value. UEBA sounds interesting though.

i dont see that option to block storage at all is this for an older version

Hi, very nice explanation, i have a query, by configuring this do we can see email activity log in MCAS, i am no seeing any documentation or information specifically for Gmail user activity logs into MCAS, any help on this that will be useful, thanks

Hey Matt, this was great to see. I got right through it, but now I'm stuck just few screens after this last screen at time 2:30. Once the device is wiped the setup gets to the Remote Management screen where I click Enroll. A sign-in window appears and asks for credentials: Enter your credentials for "COMPANY NAME". But no matter what credential I enter it won't proceed any further. What credentials do I need to enter? if it's a user, the user has no MFA setup on the account and is not a part of any conditional access policies. Does an admin user enter credentials? or is it something else? can't find any info anywhere else on this detail.

With O365 MDM is available. Can we achieve the objective of whitelisting personal devices ?

How can I fully automate this process on power automate or any other tool?

Thanks you so much 🎉

Thanks you so much 🎉

So what is the way to fix it

Anyone have an idea how to do this with a Mac?

should probably update this video to reflect what we're seeing now

this video needs to be updated

Hi Matt how would we do this if we are on Gsuite rather the Microsoft environment? Thank you for your help.