I got a new microphone! .. Using a Temporary Access Pass is a wonderful way to allow a new hire to register a password less method such as a FIDO2 security key and provision a new Windows PC without IT intervention. In today's video I take this a step further by introducing Conditional Access, Device Compliance and Windows Intone into the architecture that makes this an even more seamless and easy experience for the end-user.

Links to Docs:
Configure Temporary Access Pass in Azure AD to register Passwordless authentication methods https://docs.microsoft.com/en-us/azur...

Conditional Access: https://docs.microsoft.com/en-us/azur...

Enable combined security information registration in Azure Active Directory https://docs.microsoft.com/en-us/azur...

What are enrollment restrictions? https://docs.microsoft.com/en-us/mem/...

Overview of Windows Autopilot https://docs.microsoft.com/en-us/mem/...

Configure Autopilot profiles https://docs.microsoft.com/en-us/mem/...
Windows Autopilot user-driven mode https://docs.microsoft.com/en-us/mem/...



Table of Contents:
00:00:00 Intro
00:00:40 End User UX blocking MySecurityInfo
00:01:48 End User UX Windows Autopilot w/ TAP
00:02:51 End User UX Passwordless Registration on Compliant Device
00:03:46 Admin UX Combined Registration
00:04:18 Admin UX Conditional Access Policies
00:06:11 Admin UX TAP Policy Config
00:06:31 Admin UX Issue TAP
00:07:01 Admin UX Device Enrollment Restrictions
00:07:57 Admin UX Autopilot Profile
00:08:20 Admin UX Autopilot Device
00:09:11 Special Thanks to Philipp!

Gear:
Sony A6400 DLSR Camera
Sigma 30mm F1.4 Contemporary DC DN Lens for Sony E
Elgato Cam Link 4K HDMI to USB Video Interface
Shure SM7B Microphone
Focusrite Scarlett USB Audio Interface
Elgato Key Light
Kingjoy 75" Tripod
Frameworks Mic Boom
Camtasia Video Editing Software running on MacBook Pro
Windows 365 Cloud PC + Microsoft 365 E5 subscription
Microsoft PowerPoint