Microsoft MVP - PwSh | Engineer @ SpaceX
Seattle, WA
Joined April 2009
- Tweets1.1K
- Following1.1K
- Followers680
- Likes2.4K
Built an Intune Architect template for Grok Bot: pairs @merill’s Lokka MCP with a local 27,700-endpoint Graph index, enforces pilot-ring staged writes (`DELETE` blocked), writes PowerShell, and runs silent daily drift audits.
x.ai/bot/eM7PHgoKyJJNdTMgEbx…
Jorgeasaurus retweeted
PowerShell 7.6.8 is released on GitHub and will be available via WinGet soon.
It's a maintenance release that moves the .NET SDK to 10.0.402 and somewhat ironically removes the update notification feature from PowerShell, per customer feedback. 🗣️
💾 github.com/PowerShell/PowerS…
"Why did this policy land on that device?"
Usually it's how include, exclude, and filters stack up. I made a 4-minute video on how Intune works out the final assignment.
youtu.be/1aIXhR2d8Pk
Detection only reports success when TPM+PIN exists, the recovery password is still there, and the TPM-only protector is gone. If the user cancels, it returns 1602, and Intune retries later.
The full walkthrough covers the Settings Catalog policy import, packaging, return codes, and a test checklist:
jorgeasaur.us/bitlocker-star…
After provisioning, a Win32 app runs as SYSTEM through ServiceUI and shows a full-screen PowerShell prompt. The user picks a 6-20 digit startup PIN, which is separate from their Windows Hello PIN.
Works for Standard/Non-admin users, on x64 and ARM64 systems.
Autopilot gives you a BitLocker-encrypted device with TPM-only protection. If you want a startup PIN, you have to add it afterward, and you can't just hand the user a manage-bde command.
So I built a package that does it through Intune. 🧵
New Blog Post
Add a startup PIN to an encrypted Windows device with a full-screen PowerShell based prompt, Intune policy settings, and desktop readiness checks.
jorgeasaur.us/bitlocker-star…
Jorgeasaurus retweeted
I gave Tokyo Night a space programme 🚀
Meet Tokyo Liftoff for Omarchy.
The full Tokyo Night palette, four 8K launch wallpapers, and a fairly good excuse to stare at your desktop.
Install it with: omarchy theme install github.com/tcballard/omarchy…
Your AI assistant can now search endpoint engineering jobs. EndpointJobs has a free, read-only MCP server: endpointjobs.dev/mcp
New Blog Post:
Intune assignments: Do's and don'ts
jorgeasaur.us/intune-assignm…
