Valtteri Aho

My journey in IT began in 2006, managing on-premises infrastructure with Microsoft technologies. From 2010, I’ve transitioned into training others in Microsoft tech, earning my first Microsoft Certified Trainer badge in 2016. I’ve had the pleasure of teaching a wide range of Microsoft products, from Windows 7 through 11 and Windows Server 2008 through 2016, to Microsoft Threat Management Gateway, Microsoft Configuration Manager, and Microsoft Intune.For over a decade, I’ve managed a small datacenter, transitioning from VMware to Hyper-V platforms. I’ve also successfully migrated various solutions to the cloud, such as moving from Exchange 2016 to Exchange Online and transitioning workloads from Microsoft Configuration Manager to Intune or modernizing whole endpoint management from legacy models to modern using Microsoft Intune.Currently, I’m focused on modern ways of managing Windows and mobile platforms with Intune. I’m passionate about cleaning up old methods of maintaining and managing endpoints, and ensuring that Intune’s capabilities are used to their fullest potential. My extensive experience and hands-on knowledge make me a valuable resource in the IT community, especially in the realms of Microsoft Intune, Windows 365, and Azure Virtual Desktop.

Guide to Intune App Protection Policies: Part 3 – Data Protection Framework with App Protection Policies

by

Introduction Managing mobile apps in enterprise environments requires more than just applying security settings. You need a clear strategy for protecting corporate data—especially when users access it from both managed and BYOD devices. In this post, I’ll walk through key Intune App Protection Policy use cases, explain how to apply different policy levels, and show … Read more

Guide to Intune App Protection Policies: Part 2 – Intune MAM

by

Overview Did you know that Microsoft Intune offers powerful capabilities for managing mobile apps through Intune App Configuration and Protection Policies? These policies are part of Intune’s Mobile Application Management (MAM) features, which allow IT-admins to secure and configure apps without requiring full device management. Intune MAM works alongside Intune MDM (Mobile Device Management), giving … Read more

Guide to Intune App Protection Policies: Part 1 – Overview

by

What Are Intune App Protection Policies (APP)? Microsoft Intune App Protection Policies (APP) are a key component of Microsoft Intune MAM (Mobile Application Management) that help secure organization data at the application level—without requiring full device management. They are especially useful in BYOD (Bring Your Own Device) scenarios, where users access organization resources on personal … Read more

How about them Conditional Access Policies! Part 3 – Advanced policies

by

This blog is about advanced Conditional Access policies, like Risk-based, Device-based, app-based and more admin related policies. End users need additional licenses for some of these policies, such as Entra ID P2, which is included in M365 E5 or the E5 security add-on. This blog post also assumes that organizations ambition is to require compliant … Read more

How about them Conditional Access Policies! Part 2 – Policies that everyone needs

by

This blog is about recommended Conditional Access Policies and how to build them. First my 6 points on Conditional Access Policy building principles: Blog series overview How about them Conditional Access Policies! Part 1 – Naming convention – Wallo BlogHow about them Conditional Access Policies! Part 2 – Policies that everyone needs – Wallo BlogHow … Read more

How about them Conditional Access Policies! Part 1 – Naming convention

by

Here we go again, starting with Conditional Access naming convention! First of all, what is conditional access policies (CA policies)? I hate reinventing things that are already invented, so from Microsoft: “Modern security extends beyond an organization’s network perimeter to include user and device identity. Organizations now use identity-driven signals as part of their access … Read more

My take on Intune naming convention – Part 2 – Intune

by

This post is all about Intune naming convention, please check Part 1 for Intune related Entra security groups naming convention. Intune contains numerous items or policies that are assigned using Entra security groups. A naming convention is essential for understanding and managing policies on Intune effectively. Main elements Intune includes many items and policies that … Read more

My take on Intune Naming convention – Part 1 – Entra

by

When building device management strategy with Intune and Entra, a good naming convention is crucial building block when managing Intune and Entra related objects. Entra is used for assignment groups, Intune has policies, profiles, connectors, applications for different device platforms. Both of those do require a proper naming convetion that is simple to understand, easy … Read more