Workplace Ninja Summit 2024

Learn about the latest investments in Autopilot that enhances your ability to reliably get end users up and running on their Windows devices.

In this session we will cover how organizations are using Defender for Office 365 to detect and respond to new and emerging collaboration threats including phishing and BEC. We will walk through how SOC teams can be more effective and efficient using the power of XDR as well as build user resilience to new and emerging threats.

We've spent the last few years modernizing clients, kicking them out of Active Directory and optimizing them to run outside the corporate network. The use of modern protocols, conditional access and the integration of MDE and Intune now enables us to access cloud services with access management that largely complies with the principles of zero trust.

However, when it comes to accessing legacy apps in the old data center world, we unfortunately all too often fall back on the old solutions - perhaps enhanced with some SAML and certificates - and features such as microsegmentation and session revocation are sought in vain.

In this session I would like to discuss and show why Microsoft's SSE solution is so much closer to my understanding of Zero Trust Network Access by explicitly checking every session in the network during its establishment, limiting access to the least necessary and disconnecting in case of a breach.

As a security architect who used to deal intensively with networks and in recent years with identity, I am very much looking forward to a deep dive on the topic of Single SignOn when accessing the OnPrem environment with Private Access.

In addition to the way the technology works, you will learn what needs to be considered during POC and rollout and what differences there are to a classic VPN project.

Round Trip Time (RTT) measures the connection performance between a client and Azure Virtual Desktop (AVD). A high RTT is directly correlated with a bad user experience. This session digs into networking between the client and AVD. We start with an overview of the default behavior of an RDP session. Then we explore how RDP Shortpath for AVD can help. Next, we examine the options for RDP Shortpath for a private and public network. Finally, we review the configuration settings for RDP Shortpath for a private network.

In this session, we’ll start with the fundamentals. Learn what Copilot is, how it integrates with Microsoft Intune, and its role in modern endpoint management. We’ll cover the basics of setting up Microsoft Copilot, understanding its core features, and how it enhances security and productivity for your organization. Understand how Copilot leverages AI to provide actionable insights. Dive into the technical details of how it analyzes data, identifies patterns, and recommends optimizations. We’ll explore real-world examples and demonstrate how to harness these insights effectively.
This session will also cover nuances of Prompt engineering, high level architecture, data boundary and privacy and compliance related to Copilot workflow.

We're all familiar with DNS, the Domain Name System, which seamlessly connects domain names to their corresponding IP addresses, making it a vital component of the Internet. Next to that, it also plays a significant role in functions like email delivery, ensuring security, and optimizing network efficiency. However, in the complex landscape of hybrid or cloud-only environments, any DNS error can lead to downtime or inaccessible resources.

That’s why in this session, Micha and Wim will look into various DNS-related services and configurations essential for the smooth operation of your Azure environment, including your Virtual Desktop environment ➡️ Azure Virtual Desktop, Windows 365 and/or Azure DevBox.

Join them as they dive into not just Azure DNS, Azure IaaS DNS servers, and Azure Private DNS but also how to effectively troubleshoot any Azure DNS-related issues. Let's also switch things up and have DNS play a role in resolving an issue. Next to that, learn how to seamlessly integrate DNS with services such as Azure Private Endpoints and other PaaS offerings, as well as how to make DNS function flawlessly in your hybrid environment.

Looking to ease your way into entrusting our new AI overlords with running your life? Start by letting the machines deploy your patches. In this session we'll dive deep into automating your patching, common pitfalls, and common arguments against automation. We'll focus on how to achieve this via ConfigMgr ADRs while comparing other patching technologies such as Intune's Autopatch and Azure Update Automation.

If nothing else, we'll help you get a few years of letting the machines patch your devices before they decide they don't need us anymore.

Terraform is widely recognized as the dominant language for professional cloud configuration. It has become an essential tool for Azure, AWS, and Kubernetes projects, offering numerous advantages such as a readable declaration language, reliable state tracking for changes, robust auditing of all modifications through git, and automatic documentation of infrastructure.

Until now, Terraform has primarily focused on configuring cloud infrastructures and provided limited support for Entra ID. However, we are introducing a groundbreaking development: the Terraform Provider for Microsoft 365. This session provides an overview of this provider, which in it's first incarnation enables the configuration of almost all aspects of Intune. With support for Autopilot, Conditional Access, Configuration Profiles with Settings Catalog, Compliance Policies, and more, it opens up entirely new possibilities for Enterprise or MSP Tenant Management through Terraform.

During this session, we will review the Windows 365 and Azure Virtual Desktop roadmap. What's the vision around Cloud VDI and Cloud PC and how do both AVD and Windows 365 compare? We will answer this and also talk about new features you haven't heard of before. This session will include loads of new insights, technical depth, and also fun!

What do we mean when we say that we are unifying Windows Update for Business & Windows Autopatch? Come along to understand why we made this decision, and where we plan to take the management of Windows updates

This session aims to guide IT professionals through the process of transitioning from Microsoft Configuration Manager to Microsoft Intune, providing a clear and secure path to cloud-native device management. From initial assessment and migration planning to the implementation of Intune and the final decommissioning of Configuration Manager, attendees will be equipped with strategies, tools, and insights needed to successfully and securely complete the migration. By the end, participants will be prepared to maximize the benefits of cloud-based device management, ensuring a smooth transition to Intune.

This demo-based session explores the potent collaboration between OpenAI and Copilot for Security.

Discover how the fusion of artificial intelligence is revolutionizing threat detection, response strategies, and proactive risk mitigation.

The session contains following topics:
- How AI used by attackers
- How Copilot for Security works
- Setting up security using with AI
- Detect threats with the AI-assistant
- Give a quick and informative AI-driven response
- A few words about licensing

We are one year into the launch of the driver and firmware feature, come along to hear about Driver and Firmware management. We will talk about how we have seen it successfully used at our customers and sharing best practices to get the most of driver and firmware management with Windows Autopatch.

In today's rapidly evolving digital landscape, staying ahead with the latest updates is a must-have for maintaining a secure and efficient virtual desktop environment. Join Sander Rozemuller, Microsoft Security and Windows and Devices MVP in this session as he reveals a new feature revolutionizing Azure Virtual Desktop (AVD) management: host pool updates.

Sander will guide through this new feature that helps simplify updating your AVD environment. Discover how host pool updates work in detail and how to setup the configuration of host pool updates. Of course in this session, Sander with his automation first philosophy will show how to seamlessly integrate it into your existing automation strategies.
At last, Sander will top it all of where he also explain how to monitor for - and initiate updates.

Don't miss your chance to unlock the future of AVD management in this session.

Collecting logs from Windows endpoints is a critical part of maintaining healthy and secure IT systems. However, there are many ways to collect logs, and choosing the right method can be a daunting task for your Cloud Native devices.

We'll explore various paths to seamlessly integrate your data into log analytics, from legacy HTTP Data Collector API to Azure Monitor Agent and new Log Ingestion API. We'll guide you through diverse options, explain when to use different methods, and discuss managing access to log data and retention policies.

We will show how to Migrate from Data Collector API and custom fields-enabled tables to DCR-based custom log collection

We will also discuss best practices for log collection and manage log retention policies.

400MB Full Presentation with Videos
Exploring OSDCloud - Final.pptx

Utilizing the OSDCloud Community Project offers numerous possibilities for seamlessly integrating machines into modern device management without the need for any on-premises infrastructure components.

During this session, David and Akos will address the challenges of using OS imaging over the Internet, also known as Cloud-based OSD.

Content in this session will prepare you for Expand OSDCloud:Script Automation
https://wpninjas24.sched.com/event/1fipT/expand-osdcloud-script-automation

Key takeaways will include:
•Workstation Setup
•WinPE Options
•Deployment Frontends
•Offline Deployment
•OSDCloud Tips

Agenda:

1. Getting started with OSDCloud
2. Workstation Setup
3. OSDCloud Template
4. OSDCloud VM Setup
5. OSDCloud Workspace
6. OSDCloud ISO and USB
7. Deploying with OSDCloud
8. Operating Systems and Driver Packs
9. Using OSDCloud Offline
10. Expand OSDCloud (Session Preview)

*** Attend and join our buzzword BINGO to win a unique 'Ninja 'award' 3D-printed by Esther! ***
What makes every Azure Virtual Desktop deployment unique is the applications. A golden image approach can be very effective for Azure Virtual Desktop Host Pools, but sometimes more flexibility is required to reduce the operational overhead. You might be familiar with MSIX app attach to dynamically attach applications from an application package. Join this session to learn about the latest evolution in this area and level up your application management and deployment from MSIX app attach to just app attach, focused on improving the administrative and user experiences. A link to all source code is shared during our session!