Browsed by
Category: Windows 10

Event ID 1121 – Exploit Guard – Microsoft Intune

Event ID 1121 – Exploit Guard – Microsoft Intune

Today I was getting Event ID 1121 in Windows Event Viewer while managing Windows Defender through Microsoft Intune. It took me a little bit of time to track down the exact cause as Microsoft have removed the GUIDs from the descriptions in the policy properties. I thought it would be a good idea to give an overview and include some useful references. Background Firstly, this blog applies to those running Attack Surface Reduction (ASR) through Microsoft Intune. These settings can…

Read More Read More

Intune Group Policy Conflict Resolution

Intune Group Policy Conflict Resolution

This is a short blogpost to tell you how to handle Intune Group Policy conflict. Occasionally, when switching from Group Policy to Intune you will experience issues where the policy setting in Intune are different from the policy setting in Group Policy. This can happen for a number of reasons. Usually its because the group policies are your old design and when creating Intune policies, you refresh your device behaviour. The Problem When the device is presented with two sets…

Read More Read More

Application Install Error 0x80070005 – EnforceApp Failed

Application Install Error 0x80070005 – EnforceApp Failed

Today I came across an issue I had not seen before so I thought it would be a good idea to write down some ideas of how to resolve the issue, for when I forget what I did next time it happens! I was deploying a routine application for our organisation, one I have deployed and updated 10+ times before so I was surprised to see this error when testing the deployment today. While the error code is quite a…

Read More Read More

Microsoft Excel Query could not be started because it isn’t installed

Microsoft Excel Query could not be started because it isn’t installed

I thought I would write this one up as it took a little bit of time to figure out the answer to this problem, and there are many perfectly valid solutions out there that resolve this error, except, if you are like me and make use of the Microsoft Security Baselines for Office, non of those answers would have helped…and here is why I am very much of the opinion that no matter how small your business or indeed how…

Read More Read More

Install Windows Capability with SCCM/WSUS deployed Windows Updates

Install Windows Capability with SCCM/WSUS deployed Windows Updates

I have worked in many environments where access out to external WSUS servers is limited (or not available). This makes sense if you are trying to tightly control the updates that your devices are receiving, but, it does make some of the modern Windows 10 tasks very difficult to manage. For example, if you wanted to install a feature on demand from Settings, you would normally select the Feature that you want to install and it would install. The problem…

Read More Read More

Stop Workstations Updating from Online Sources

Stop Workstations Updating from Online Sources

Sometimes its necessary to prevent Windows clients from taking any updates from online sources, this is not necessarily the best approach to managing Windows Updates, and should only really be configured if you have a solution such as WSUS or Config Manager in place to push updates to your workstations. Without this, you will not receive any security updates and this could be disastrous for your organisation. You should also be aware that this solution means that Windows cannot install…

Read More Read More

In progress…

In progress…

Welcome! My first ever blog. This is brand new (Jan 2022) and does have any content yet. The plan is to use this as a technical knowledge dump for me, and if you find the information helpful as well, then we are all winners. I am busy setting a few things up right now but come back soon for my first blog or two.