Generated by Rank Math SEO, this is an llms.txt file designed to help LLMs better understand and index this website.

# Ugur Koc: Microsoft MVP for Intune and Security Copilot

## Sitemaps
[XML Sitemap](https://ugurkoc.de/sitemap_index.xml): Includes all crawlable and indexable pages.

## Posts
- [KQL Queries Made Easy: My Intune Admin Journey with Copilot](https://ugurkoc.de/kql-queries-made-easy-my-intune-admin-journey-with-copilot/): I started learning how to write KQL as soon as I became dissatisfied with my reporting methods in Intune. I started when we could only send diagnostic logs from Intune to a Log Analytics workspace and query this data. It was difficult at first, but it got easier the more I wrote queries. After some time, I started a small project to collect and share queries that anyone could copy and paste. This project has grown significantly and can be found here: KQLSearch.com.
- [Windows Hotpatch for Intune Admins](https://ugurkoc.de/windows-hotpatch-for-intune-admins/): IT administrators constantly juggle maintaining security and ensuring smooth system operations. A critical part of this task is regularly applying software updates and patches. Typically, Windows updates require system reboots, disrupting user workflow and productivity. To address this challenge, Microsoft introduced Hotpatch—a feature aimed at significantly reducing reboot disruptions. This post provides IT admins with a clear overview of Windows Hotpatch, explains how it works, and guides on deploying it using Microsoft Intune.
- [How to enable and configure Quick Machine Recovery with Intune](https://ugurkoc.de/how-to-enable-and-configure-quick-machine-recovery-with-intune/): Quick Machine Recovery (QMR) is a powerful new feature introduced in Windows 11 (24H2 Insider Preview) that automatically detects, diagnoses, and repairs critical boot issues leveraging Microsoft's cloud diagnostics. This detailed guide explains Quick Machine Recovery in-depth and provides clear steps for IT administrators to configure it using Microsoft Intune.
- [Enroll Ubuntu 24.04 into Intune](https://ugurkoc.de/enroll-ubuntu-24-04-into-intune/): Microsoft Intune supports managing Ubuntu Linux devices, including the latest Ubuntu 24.04. Enrolling these devices provides a more comprehensive view of all devices within your organization. Linux desktops, in particular, have been a hot topic in many discussions around security and compliance. This journey begins by using Intune to register them in Entra ID, ensuring better management and integration. This way you will also be able to check for compliance and force conditional access via Microsoft Edge.
- [Manage Apple Intelligence on macOS with Intune](https://ugurkoc.de/manage-apple-intelligence-on-macos-with-intune/): If you're managing macOS devices with Intune, Apple Intelligence is worth getting to know. This new set of AI-powered tools from Apple makes interacting with devices smoother and smarter. Available on iPhone, iPad, and now Mac, Apple Intelligence is designed to simplify everyday tasks - whether that's a more natural-sounding Siri, quick editing tools for writing, or advanced image recognition in Photos to help you find what you need in seconds. It’s all about making things easier and more intuitive for users, which can be a huge win for productivity.
- [The macOS Sequoia Aftermath: What Happened and How Can We Prevent Similar Issues?](https://ugurkoc.de/the-macos-sequoia-aftermath-what-happened-and-how-can-we-prevent-similar-issues/): It's Tuesday the 17th of September - a frosty morning. I wake up early, ready to start the day. The smell of my Americano with oat milk fills the air as I sip slowly, preparing for my first meeting. The day is off to a good start. Naturally, I check Intune to see how many people have already installed MacOS Sequoia, which was only released to the public yesterday.
- [From Intune to EntraID – Add custom data to the Extension Attributes](https://ugurkoc.de/from-intune-to-entraid-add-custom-data-to-the-extension-attributes/): Many people wonder why they can't find the serial number of devices in EntraID. This is because the serial number is not a property of the device object in EntraID; it's a property in Intune.
- [Get All Assignments in Intune for a User, Group or Device](https://ugurkoc.de/get-all-assignments-in-intune-for-a-user-group-or-device/): This blog post is about the following tool of mine: Intune Assignment Checker (ugurkoc.de)
- [Deploy Files on MacOS Devices with Intune](https://ugurkoc.de/deploy-files-on-macos-devices-with-intune/): Deploying files to Intune-managed devices can present challenges. Previously, I utilized a Win32 App (intunewin) for deploying fonts, Teams backgrounds, and license files to Windows devices. In this post, I will guide you through the process of creating an application in the .pkg format to securely deploy your files on macOS devices.
- [Export All Scope Tags of All Devices, Apps, Policies, and Scripts in Intune](https://ugurkoc.de/export-all-scope-tags-of-all-devices-apps-policies-and-scripts-in-intune/): I was working on a blog post about Intune RBAC and also created a couple of scripts and tools around that same topic, I wanted to share a script of mine to export all scope tags in Intune. This is a simple Powershell Script that will interact with the Graph API and export a CSV File that will contain all assigned scope tags to all Intune Objects including Devices, Apps and Policies.
- [Block Homebrew on MacOS with Intune](https://ugurkoc.de/block-homebrew-on-macos-with-intune/): Homebrew is a very popular tool for MacOS (and Linux) Users to install applications in the user context ignoring the local privileges and ignoring application and patch management. I am sharing my solution/workaround to address the challenges of users using Homebrew on Intune managed MacOS Devices. Shall we begin?
- [Collecting Customized Inventory Data on MacOS Devices Using Intune](https://ugurkoc.de/collecting-customized-inventory-data-on-macos-devices-using-intune/): Having detailed insights into your managed macOS devices significantly simplifies management tasks. While Intune provides some basic inventory data, its scope is often limited and sometimes lacks critical information. This is where custom inventory scripts are very interisting.
- [Get Local Admins and Last Reboot Time on MacOS Devices Using Custom Attributes](https://ugurkoc.de/get-local-admins-and-last-reboot-time-on-macos-devices-using-custom-attributes/): You can create custom attribute profiles which enable you to collect custom properties from managed macOS device using shell scripts.
- [Rename Linux and MacOS devices in Intune](https://ugurkoc.de/rename-linux-and-macos-devices-in-intune/): A consistent naming convention is important for efficient management within an IT environment, as it significantly helps us in the organization and clarity of device identification. This approach allows for the straightforward recognition of various aspects of a device, including its type, whether it is personally owned or a corporate asset, and its associated location or department. This kind of clear setup is really key to making sure everything runs smoothly and efficiently.
- [Scheduling tasks on Linux with Cron and Intune](https://ugurkoc.de/scheduling-tasks-on-linux-with-cron-and-intune/): Here's a simple guide to setting up cron jobs on Linux devices that are managed with Intune. I'll break down the basics of what cron jobs are and the steps to get them running. Plus, we'll look at a few real-world examples to see how they work in action.
- [Mass deployment of Canary Tokens on Windows, MacOS and Linux devices with Intune](https://ugurkoc.de/mass-deployment-of-canary-tokens-on-windows-macos-and-linux-devices-with-intune/): In this blog post we will be looking into Canary Tokens what they exactly are and how they work. We will also look into how we can utilize Intune to deploy the tokens on Windows, MacOS and Linux Clients.
- [Offboarding devices from Intune, Entra ID and Autopilot](https://ugurkoc.de/offboarding-devices-from-intune-azure-ad-and-autopilot/): There will be always cases where you need to delete devices from Intune, Entra ID and / or Autopilot. This includes the exchange of devices, returns to the dealer and many more … Until now, you had to go to the different portals and delete the devices manually. With this tool, the whole thing should now be automated.
- [Linux2Intune – Linux enrollment in Intune](https://ugurkoc.de/linux2intune-linux-enrollment-in-intune/): When testing the Ubuntu functions in Intune, the initial enrollment bothered me the most. Right now, the Linux user has to run several commands in the terminal to enroll the linux device to Intune. While the commands would only need to be copied and pasted from Microsoft's official instructions, there are some potential errors. While waiting for a simpler method from Microsoft, I have been working on a workaround.
- [Rename multiple devices in Intune with Graph and a CSV file](https://ugurkoc.de/rename-multiple-devices-in-intune-with-a-csv-file/): Updated (11/10/2024): https://github.com/ugurkocde/Intune/blob/main/DeviceRename/mass_rename_devices.ps1
- [KQL Search](https://ugurkoc.de/kql-search/): This is the final website: KQLSearch.com
- [Autopilot Import GUI](https://ugurkoc.de/autopilot-import-gui/): Update: There is a new Version available. It adds a way to Update Windows before starting the Autopilot process as well as exporting the Hash to a USB Device. -> PowerShell Gallery
- [Daily Intune Monitoring Report](https://ugurkoc.de/daily-intune-monitoring-report/): I am using this email Report for a long time and I read on Twitter that others are using something similar. So why not share my flow and the queries?
- [winget2intunewin – Automatically create applications for Microsoft Intune](https://ugurkoc.de/winget2intunewin-automatically-create-applications-for-microsoft-intune/): Creating a .intunewin file and choosing the source file, source folder and the output folder is time consuming. Let´s also not forget the time we waste on searching for the newest version of a application we want to deploy. Following all this time consuming, manual steps I have created a tool that will automate all this steps with the help of Microsoft WinGet.
- [Microsoft Defender for Endpoint (MDE) – Update Tool](https://ugurkoc.de/microsoft-defender-for-endpoint-mde-update-tool/): Before I explain why this tool was created, I would like to first start by explaining the basics and dependencies of the Microsoft Defender on a Windows Client.
- [Automate the process of setting MDE device tags via Intune](https://ugurkoc.de/automate-the-process-of-setting-mde-device-tags-via-intune/): Automate the process of assigning tags to devices for a better observability and filtering in the MDE Portal, help create device groups and also implement Role Based Access Control (RBAC) based on the device tags.
- [Track changes of the Microsoft Intune Documentation and send them to Teams](https://ugurkoc.de/track-changes-to-the-microsoft-intune-documentation-and-send-them-to-teams/): Inspiration: https://nikkichapple.com/how-to-create-an-rss-feed-to-monitor-microsoft-docs-pages/
- [Locate your managed Devices with Powershell and Log Analytics](https://ugurkoc.de/locate-your-managed-devices-with-powershell-and-log-analytics/): Locating Devices was always a interesting use case for me and I was happy to find this Blog Post which has also motivated me to dig deeper. The blog did already explain most of the things I needed to achieve my goal of locating lost or even stolen managed devices. Some of the questions I had in my mind were: What happens if I need to know where the Devices are located physically? When was the last contact to that device and the last GPS Coordinates it submitted? How can I share or visualize this data?
- [Autopilot & Hardware Hash](https://ugurkoc.de/autopilot-hardware-hash/): Autopilot brings many benefits and significantly speeds up the rollout and setup of an end device. In order for devices to be able to go through this process, the device must first be registered in the autopilot of the respective tenant and the enrollment profile must be assigned. For the registration in the tenant, the hardware hash of the device is required for this purpose. What is the hardware hash and what does it contain?
- [Fast, Faster, Device Filtering](https://ugurkoc.de/hello-world/): In cases where new smartphones and tablets need to be onboarded into the Microsoft Endpoint Manager and deployed automatically, time is a critical factor. Policies and applications must be known to the device the moment it boots up and is deployed for the first time. This is where dynamic device groups are often relied upon to assign policies. As is well known, these can be created in Azure AD and provided with a dynamic membership rule. Various properties can be selected as rules, each of which makes sense for the corresponding use case. There is no general recommendation here. The problem: The synchronization of group memberships between Microsoft Endpoint Manager and Azure AD is too slow. Result: The android device, iPhone or iPad does not receive the policies, configurations and applications in time which were previously assigned during initial setup. The assignment does not take effect in time, because the device ends up in the Dynamic Group only after an almost complete enrollment and from there the policies are synchronized towards the endpoint via the assignment. After many difficulties and troubleshooting, a new solution was needed.

## Pages
- [Newsletter](https://ugurkoc.de/newsletter/)
- [Imprint](https://ugurkoc.de/imprint/): Information according to § 5 TMG:
- [Who Am I?](https://ugurkoc.de/who-am-i/): Hello and Welcome!
- [Privacy Policy](https://ugurkoc.de/privacy-policy/): The following notices provide a simple overview of what happens to your personal datawhen you visit this website. Personal data is any data that can be used to personally identify you.can be personally identified. For detailed information on the subject of data protectionour privacy policy listed below this text.