How do you remind yourself to renew your CA root certificates / subordinate certificates? Do you set a calendar reminder? Did the person who set those reminders up forget to share them with the team and now is on holidays?

Fear not, for I have holiday gift for you - using nothing but PowerShell, we can interrogate our trusted certificate policies and, as if by magic, send out alerts when the attached certificates are about to expire!

As I’ve said before, working with dynamic groups in Intune isn’t my favourite thing.

Luckily, Microsoft has been listening and have provided us with a better way to dynamically apply policies to devices with filters!

I’ve never been entirely happy with dynamic groups in Intune. The primary reason for this boils down to two primary issues:

• The time it takes to analyze the dynamic group rules is nowhere near fast enough.
• The available properties available for dynamic group rules are limited to the data available in AAD - not Intune.

Microsoft has recently introduced even more ways to create device configuration profiles..

The new profile type, named Settings Catalog, allows us to explicitly define and configure a policy that has only the settings that they want for that profile, nothing more. Additionally, the existing configuration profiles and ADMX templates have been migrated to the templates profile type.