Intune Community Digest

Microsoft Intune: Deployments & Deployment Plans

Introduzione La distribuzione graduale di applicazioni e configurazioni è una pratica consolidata negli ambienti enterprise. Prima di estendere una nuova The post Microsoft Intune: Deployments & Deployment Plans…

Sat 3 Oct Intune

Windows 11 26H2 disponibile in General Availability

Introduzione Finalmente ci siamo! Windows 11 versione 26H2, distribuito anche con il nome Windows 11 2026 Update, è disponibile dal The post Windows 11 26H2 disponibile in General…

Sat 3 Oct Windows

Test your network equipment using PowerShell and the Invoke-NetStress Module

I like to test my network connections to see if they're reliable and what the capacity really is. There's a PowerShell module for that with some nice options…

Fri 2 Oct Scripting & Graph

Requesting Certificates with PowerShell

Another blog on certificates! While working on my Certificate Enrollment Services lab, I wanted a straightforward way to request a machine certificate without having to repeat the same…

Fri 2 Oct Entra & securityScripting & Graph

Weekly Newsletter – 26th of September 2026 to 2nd of October 2026

Welcome to the 224th edition of the Windows 365 Community newsletter! This week, we bring you the latest Windows 365 news, free events, and expert tips & tricks…

Fri 2 Oct Windows

Intune Newsletter – 2nd October 2026

It’s 26H2 week so get ready for even more Copilot, I know you were all definitely looking forward to that appearing in File Explorer! The question is, can…

Fri 2 Oct Intune

Your AI Coding Agent Is Creating Secrets You Don’t Know About

Why coding agents keep creating client secrets, and how to stop them, with Microsoft Entra Agent ID PM Arturo Lucatero

Fri 2 Oct Entra & security

Microsoft Intune Expands Windows Quality Update Management with New Approval Settings

Fri 2 Oct WindowsIntune

Windows Backup is Now Enabled by Default for Eligible Intune Managed Devices

Fri 2 Oct WindowsIntune

Mastering MS-102: Lab Preparation Strategies for Intune Certification

Strategic guide for setting up and managing a lab environment to excel in MS-102 Intune certification.

Fri 2 Oct Intune

Intune Policy Not Applying: Why Silent Failures Keep Coming Back

A practical troubleshooting order for Intune policies that do not apply: applicability, conflicts, check-ins, registration state and App Protection failures.

Fri 2 Oct Intune

Deployments

Learn how to use Microsoft Intune deployment plans and rings to roll out apps and policies gradually, monitor progress, and troubleshoot deployments.

Thu 1 Oct IntuneEntra & security

New in Intune: Roll Out Apps and Policies in Rings with Deployments (Preview)

Microsoft Intune now has Deployments (preview), a new way to roll out Win32 apps, Enterprise App Catalog apps, settings catalog policies, and endpoint security policies in rings. In…

Thu 1 Oct VideosEntra & security

How to try Robopack for free!

Robopack now has a new interactive Sandbox, giving you a way to explore the platform without connecting your real Microsoft Intune environment first. In this video I take…

Thu 1 Oct VideosIntune

Upgrade to Windows 11 26H2 using Intune

Microsoft released Windows 11 26H2, also known as the Windows 11 2026 update, on 29

Thu 1 Oct WindowsIntune

Ensure Continuous Identity Synchronization – Action Needed Before April 2027

Upgrading Microsoft Entra Connect Sync — Required Before April 2027 :root { --bg: #ffffff; --bg-alt: #f6f7f9; --text: #1c1e21; --text-muted: #5b6270; --border: #e1e4e8; --accent: #2563eb; --accent-soft: #eaf1ff; --code-bg: #f2f3f5;…

Thu 1 Oct Entra & security

Deploy Windows 11 26H2 Update using SCCM

In this guide, I’ll cover the steps to deploy Windows 11 26H2 update using SCCM. I will use Windows Servicing to...

Thu 1 Oct WindowsConfigMgr

Use Admin Host Info to Display Computer Details on the macOS Login Window using Intune

Thu 1 Oct AppleIntune

How Windows Autopatch Tattooed My Edge Settings

With Edge 154.0.4258.37, address bar search stopped working on devices that had the DefaultSearchProvider* settings deployed: type a search, press Enter, nothing happens. Florian Salzmann covered the cause…

Thu 1 Oct Windows

WDAC for macOS? App Control on macOS 27 with Intune

For years, stopping an app from launching on a managed Mac meant a third-party tool, or the com.apple.applicationaccess.new profile that Apple now deprecates in macOS 27. Privacy permissions…

Wed 30 Sep AppleIntune

Windows 11 2026 aka 26H2 est dispo

La nouvelle version de Windows 11 nommée Windows 11 2026 update est sortie. Il s’agit plus précisément de la version version 26H2. Comme déjà expliqué, le code de…

Wed 30 Sep Windows

Deploy Windows 11 26H2 with Intune Feature Updates (Step-by-Step)

📚 Windows 11 26H2 deployment | Intune feature update policy | Upgrade to Windows 11 26H2 with Intune | Windows 11 26H2 Intune step by step | Intune…

Wed 30 Sep VideosWindows

Microsoft Intune Adds New Device Naming Options to Windows Autopilot Device Preparation

Wed 30 Sep AutopilotIntune

Upgrade to Windows 11 26H2 using Intune

In this step-by-step guide, I will show you how to efficiently upgrade to Windows 11 26H2 using Intune. By leveraging the...

Wed 30 Sep WindowsIntune

The authentication debate has a blind spot

We talk phishing resistance and device binding. Users just want to log in faster. Why passkey adoption is a UX problem, not a security one.

Wed 30 Sep Entra & security

Deploy the Windows 11 26H2 Feature Update using Microsoft Intune

Wed 30 Sep WindowsIntune

How to use App & Policy Deployment Rings in Microsoft Intune

If you use Microsoft Intune to manage Windows devices, you may have come across Deployment Plans and Deployments (that are currently in public preview) and wondered exactly what…

Wed 30 Sep IntuneNews

Windows 365 Wednesday - Windows 365 Link and Intune

So, we’ve made it to the final part of the Windows 365 series.

Wed 30 Sep WindowsIntune

What’s New for Android Enterprise in Microsoft Intune 2609: September 2026 Highlights

A new month means a new Microsoft Intune Service Release. In this blog post, we’ll cover the new features that the Microsoft Intune September 2026 Service Release 2609…

Wed 30 Sep AppleIntune

Microsoft Agent 365: A Live Portal Overview

Watch my Microsoft Agent 365 portal overview: inventory, owners, Entra identities, tools and policy settings, with clear limits on what the demo proves.

Wed 30 Sep Entra & securityIntune

Upgrade to Windows 11 26H2

Devices being managed with Intune can be upgraded via a Feature Update policy. The blog shows you how to upgrade to Windows 11 26H2.

Wed 30 Sep Windows

macOS 27 and Intune: Privacy consent and binary allow/deny lists in practice

macOS 27 moves two long-standing Mac admin headaches into declarative device management (DDM): privacy permissions (the PPPC replacement) and application control. Both live in the same declaration, com.apple.configuration.app.settings,…

Wed 30 Sep AppleIntune

Windows 11 26H2 : ce qu’il faut retenir

Windows 11 version 26H2 est disponible depuis aujourd’hui.Comme la 25H2, elle est livrée sous forme de package d’activation (eKB) pour les appareils éligibles en 25H2 ou 24H2. Les…

Tue 29 Sep Windows

Windows 11 26H2 Is Here: What to Do with Autopilot and Intune (and How to Report on It)

Windows 11 26H2 is GA. What Autopilot and Intune admins need to do now, what to watch out for (24H2 Pro deadline, 26H1, WMIC, drivers) and how to…

Tue 29 Sep AutopilotWindows

What’s new in Microsoft Intune – September

Planning before the first devices receive updates is an important part of managing a rollout. IT admins must regularly decide which devices go first, how quickly a rollout…

Tue 29 Sep Intune

Check more Windows requirements with Intune custom compliance

Use PowerShell and JSON rules to check required applications and BitLocker startup PIN settings with Intune custom compliance.

Tue 29 Sep Entra & securityScripting & Graph

Complete Configuration Manager 2609 Upgrade Guide

This article is a complete Configuration Manager 2609 upgrade guide that covers all you need to know to update your existing SCCM...

Tue 29 Sep ConfigMgr

Fleet-Wide Application Inventory with KQL Is Coming to Intune

Microsoft is planning to allow KQL queries across Windows application inventory in Intune. I explore where this could help in your business as usual operations.

Tue 29 Sep Scripting & GraphIntune

Intune App Inventory: Because ‘It’s Probably Installed’ Isn’t an Answer

How to set up Intune app inventory with a Properties catalog policy, how it compares with Discovered apps, and how to read the results without blaming Dave.

Tue 29 Sep Intune

Windows Configuration Update ile Normal Configuration Profile Aynı Ayarı Yönetirse Ne Olur?

Windows configuration update ifadesi farklı Intune ve Windows yönetim akışları için kullanılabildiği için önce tenant’ınızda kullanılan profile türünü netleştirin. Yerel memdocs ve güncel Microsoft Learn taramasında bu başlıkla…

Tue 29 Sep Intune

Optimizing Enterprise Wi-Fi Roaming & Eliminating Intel AX211 Drops: Intune Proactive Remediations & Driver Tweaks

A comprehensive engineering runbook for eliminating sticky client disconnects, packet loss, and Microsoft Teams call drops during hallway and meeting room roaming on enterprise laptops equipped with Intel…

Tue 29 Sep WindowsIntune

Conditional Access Policy Baseline: Cleaning Up 40 Policies Nobody Reviews

A Conditional Access baseline built on Microsoft's Secure foundation templates: seven core policies, report-only deadlines, and consolidating policy sprawl.

Tue 29 Sep Entra & securityIntune

Getting started with deployments and deployment plans for an automated staged rollout

This week is all about deployments and deployment plans. Deployments and deployment plans have been introduced recently to provide IT administrators with the ability to create an automated…

Mon 28 Sep Intune

Using Windows 365 via Linux, ZorinOS to be precise.

Introduction 4 years ago in a previous blog post I looked at accessing Windows 365 Cloud PC’s from Linux using 3 different distros, namely: LinuxMint Ubuntu Fedora I…

Mon 28 Sep Windows

Autopilot Device Preparation BitLocker 256 Bit Issue: The 128 Bit Race Is Finally Fixed

For a long time, Autopilot Device Preparation could start BitLocker too early, causing a device configured for XTS AES 256 to begin encrypting with the default XTS AES…

Mon 28 Sep AutopilotEntra & security

Passkeys Became the Phishing Lure: Welcome to Identity Attacks in 2026

For years, the identity security roadmap looked reassuringly straightforward. We would move away from passwords, stop pretending SMS was the pinnacle of modern security, introduce stronger authentication and…

Mon 28 Sep Entra & securityNews

Microsoft Intune Deployment Plans: App Rollout Rings Are Here!

Microsoft Intune now has ring-based deployments for apps and policies in public preview. In this hands-on walkthrough, I test Deployments and Deployment Plans from scratch, create a staged…

Mon 28 Sep VideosIntune

How to disable SMTP Authentication in Microsoft365

In most cases SMTP Auth is disabled by default in newer Microsoft365 tenants or those with security defaults enabled however some older 365 tenants may have SMTP Authentication…

Mon 28 Sep Entra & security

Email Security Made Simple! SPF, DKIM, DMARC & BIMI Explained

In this deep-dive guide to email security, I’ll explain how modern email authentication works and show you how technologies including SPF, DKIM, DMARC and BIMI can help protect…

Mon 28 Sep VideosEntra & security

Copilot Chat vs Cowork vs Autopilot: What to Use When

An answer, a finished task, or work that keeps moving while you are away? I compare Copilot Chat, Cowork and Autopilot, including licenses, Copilot Credits and the controls…

Mon 28 Sep Autopilot

Update Lenovo Devices with Lenovo Commercial Vantage using Intune

A while back I wrote a blog post about how to Update Dell devices with Dell Command Update using Intune, and it turned out to be one of…

Sun 27 Sep Intune

Faster Required App Delivery After Autopilot

Windows Autopilot finishes. The Enrollment Status Page (ESP) completes. The user reaches the desktop, but none of the other required (non-blocking) Win32 apps have even started installing. Then,…

Sat 26 Sep AutopilotIntune

Remote Help

A practical guide to Microsoft Intune Remote Help, covering licensing, setup, RBAC, attended and unattended support, supported platforms and session monitoring.

Sat 26 Sep IntuneEntra & security

Du tilbakekalla sesjonen. Men sjekka du om angriparen registrerte si eiga eining?

Noko av det eg tok med meg heim frå Workplace Ninja Summit i Baden, var kor mykje eininga faktisk betyr for identiteten. Vi snakkar mykje om MFA, passkeys,…

Sat 26 Sep Entra & security

Patch My PC Publisher Preview Version 3.1.0.462 Released

This release contains a variety of features, improvements, and fixes, as noted below. Features Improvements Fixes

Fri 25 Sep News

slmgr.vbs replacement in PowerShell using the OSLicense module

We all know that VBScript has been deprecated and will be removed in future Windows releases. The PowerShell OSLicense module helps you activate licenses, query them, and more.…

Fri 25 Sep Scripting & Graph

Where to store your Microsoft 365 passkey?

Microsoft 365 (Entra ID) has supported passkeys for a long time now. From auto-registered passkeys like Windows Hello to synced passkeys. I’ve created this tool to quickly see…

Fri 25 Sep Entra & security

How to convert DMG application to PKG

In some cases, a DMG package may not install correctly during deployment with Microsoft Intune. This can stem from various reasons. However, there is a simple way to…

Fri 25 Sep Intune

Intune Newsletter – 25th September 2026

Happy Friday, it’s time for your favourite Intune news! Quite an international feel this week, you may notice from a few of the more strange URLs that I’ve…

Fri 25 Sep Intune

Entra ID telephony providers for SMS and voice MFA: first look

What was announced# Microsoft has published the first documentation for Choose Your Own Telephony Provider in Entra ID, together with an FAQ that might answer some of your…

Fri 25 Sep Entra & security

Security Copilot is now included as part of Microsoft 365 E5/E7

Microsoft 365 E5 and E7 now include Security Copilot capacity. Check the SCU allowance, access requirements, usage examples and cost controls.

Fri 25 Sep Entra & security

How to Opt Out of the Entra ID Passkey Registration Campaign with Microsoft Graph

Microsoft Entra ID now makes passkeys the default for users enabled for SMS or voice MFA. Those users are auto-enabled for passkeys and pulled into a Microsoft Managed…

Thu 24 Sep VideosEntra & security

Caching CRLs on IIS Explained

And we’re back again! During PKI assessments, I regularly come across IIS servers that are used as HTTP distribution points for CRLs and CA certificates. Most of the…

Thu 24 Sep Entra & security

Your Edge Updates Have No Deadline (….and how to set one with Intune)

Autopatch picks your Edge channel, and that’s about it. Here’s how to control when Edge checks for updates, how users are told to restart, and when that restart…

Thu 24 Sep WindowsIntune

DFCI on Surface: Intune Reaches Below Windows, and One Checkbox Combo Can Cost You an SSD

Somewhere in almost every environment I walk into, there is a spreadsheet in Excel. It is called something like BIOS_passwords_FINAL_v3.xlsx, it lives in a folder that three people…

Thu 24 Sep Intune

The Enterprise Agent Control Plane I Want

An enterprise agent control plane needs five layers: identity, catalog, policy, telemetry and lifecycle. This is the operating model I would build.

Thu 24 Sep Intune

What is dynamicMembershipPriority for Entra Groups?

Microsoft Graph beta now exposes dynamicMembershipPriority for some Entra groups. I examine its high value, an undocumented endpoint and what it may mean.

Thu 24 Sep Entra & securityScripting & Graph

How to Use Native Wave Deployments in Microsoft Intune

Learn how to configure gradual app and policy rollouts in Microsoft Intune with reusable deployment plans, rings, schedules, and group assignments.

Thu 24 Sep Intune

Windows 11 Point in Time Restore with Intune: Configuration and Recovery Strategy

TL;DRWindows 11 Point in Time Restore rolls a PC back to a recent local snapshot. Intune can deliver the configuration; the documented restore runs locally in Windows Recovery…

Wed 23 Sep WindowsIntune

Microsoft Defender ISOC Your First Look!

What happens when XDR and SIEM come together in Microsoft Defender? A simpler, more connected approach to security operations. Today, in partnership with the Microsoft Security Team, I’m…

Wed 23 Sep VideosEntra & security

New Apple Business verification methods

If you needed to stand up an Apple Business Manager from scratch before, you probably already heard of dun and bradstreet (aka D-U-N-S number) and know the world…

Wed 23 Sep Apple

Passkeys on the laptop are easy. The phone? Not so much!

Back in February I wrote about how to onboard passkeys safely with Temporary Access Pass, and in Passkeys enabled ≠ phishing-resistant I wrote about tightening Conditional Access afterwards.…

Wed 23 Sep Entra & security

Aligning Intune Policies with Your Windows Rollout Using OS Version Filters

Microsoft deprecated the osVersion filter property. That sent me through every assignment filter in my tenant, and it turned out the ones doing real work were all doing…

Wed 23 Sep Intune

Entra ID PIM Setup: What to Validate About Authentication Context at Role Activation

What Microsoft documents about PIM authentication context, the 10-minute reauthentication window, and how to validate the behaviour in your tenant.

Wed 23 Sep Entra & security

Which Windows device wipe/reset method is right for you?

A refreshed look at Intune's device wipe choices: what happens to user data and enrolment, when secure erasure makes sense, and when Autopilot Reset or Retire is the…

Tue 22 Sep AutopilotIntune

Intune Client-Driven Compliance Evaluation – mise à jour rapide de la conformité Intune

Microsoft introduit une nouvelle fonctionnalité dans Microsoft Intune appelée Client-Driven Compliance Evaluation (évaluation de conformité pilotée par le client) pour les postes Windows. Son objectif est de réduire…

Tue 22 Sep Intune

Time to Switch? Migrate from Entra Connect to Cloud Sync FULL DEMO!

Ready to migrate from Microsoft Entra Connect Sync to Microsoft Entra Cloud Sync? In this step-by-step demo, I walk you through Microsoft’s migration wizard and show you what…

Tue 22 Sep VideosEntra & security

Deployment Plans dans Microsoft Intune : le rollout progressif enfin natif

Combien de fois avez-vous dû gérer manuellement plusieurs groupes de sécurité, planifier des dates de bascule pour déployer une application ou configurer une policy en plusieurs vagues successives…

Tue 22 Sep Intune

BitLocker Kurtarma Anahtarı Escrow Mimarisi ve Intune Üzerinden Yönetimi

BitLocker policy’sini Intune’dan gönderip cihazın şifrelendiğini görmek işin kolay kısmı. Asıl kritik soru şu: recovery key gerçekten ne zaman Entra ID’ye yazılıyor, bu yazma işlemi başarısız olursa cihaz…

Tue 22 Sep Entra & securityIntune

Thought Global Reader Could Read Everything? Intune Says 401

A Microsoft Graph 401 against Intune is usually not an authentication failure. An unlicensed Global Reader with no Intune RBAC role assignment gets refused by the Intune service…

Tue 22 Sep Scripting & GraphIntune