iiinova — where your digital self keeps evolving

Anthony J. Fontanez @ajf8729.com · 07/02/2026

Four years running now, still managing to keep my lab root CA alive! I think the VM has been moved 3 or 4 times at this point, but I still keep managing to publish a new CRL! #PKI #ADCS

020

Anthony J. Fontanez @ajf8729.com · 14/11/2025

There's a new boot image option available in #ConfigMgr 2509! #BlackLotus

083

Anthony J. Fontanez @ajf8729.com · 13/10/2025

RIP Windows 10 tomorrow, can still remember running the initial insider builds!

030

Anthony J. Fontanez @ajf8729.com · 10/10/2025

Woohoo, #Autopatch can use a Win32 app instead of a platform script for the broker now! Go to intune.microsoft.com#view/Microso... and hit that Migrate button right meow! In case you missed the MC notification about this, it's here admin.cloud.microsoft#/MessageCent... #Intune

044

Anthony J. Fontanez @ajf8729.com · 01/08/2025

Aye, this new #Entra feature is pretty neat once you work out the missing bits! After you set isCloudManaged=true, add the group to the Cloud Sync Entra->AD config, trigger provisioning, and watch the group get relocated/renamed! SOA reversal with the SID maintained! See before and after images:

Synced group in Entra prior to isCloudManaged attribute change

Synced group in Entra after isCloudManaged attribute change

020

Anthony J. Fontanez @ajf8729.com · 28/05/2025

And it's a super easy setup/upgrade, go do it now! #Entra

162

Anthony J. Fontanez @ajf8729.com · 30/04/2025

So I shouldn't hybrid join my DCs and send the DSRM password to Entra?

110

Anthony J. Fontanez @ajf8729.com · 30/04/2025

Did you know you can send LAPS passwords to Entra on Server OS? Neither did @adamgrosstx.bsky.social or I until yesterday! Just need to hybrid join the server(s) and set the GPO to backup to "AAD"! Neat!

2154

Anthony J. Fontanez @ajf8729.com · 11/03/2025

PSA for Teams meetings organizers - you can end meetings for all participants when it's over.

000

Anthony J. Fontanez @ajf8729.com · 06/03/2025

It's 2025, why do I need to do this in order for #Intune to run PowerShell scripts in 64-bit mode?

061

Anthony J. Fontanez @ajf8729.com · 11/02/2025

It's Strong Certificate Binding Enforcement day everyone! support.microsoft.com/en-us/topic/...

031

Anthony J. Fontanez @ajf8729.com · 21/01/2025

Still got that test user hanging around!

010

Anthony J. Fontanez @ajf8729.com · 17/01/2025

TIL that your trusted root/subCA cert profiles and your SCEP profiles need to be assigned to the same groups so certs actually get issued. Was banging my head against a wall because my root/sub were assigned to devices and the SCEP profile to users.

030

Anthony J. Fontanez @ajf8729.com · 14/01/2025

FYI for those doing certificate authentication with NPS, there's an enforcement coming in 2025-02 for strong mapping support.microsoft.com/en-us/topic/... #Intune

032

Anthony J. Fontanez @ajf8729.com · 14/01/2025

TIL Discord supports security keys/passkeys! That's awesome!

010

Anthony J. Fontanez @ajf8729.com · 08/01/2025

I know Canary channel is bleeding edge, but I wasn't expecting THIS much...

040

Anthony J. Fontanez @ajf8729.com · 11/12/2024

Make sure you click the correct "Resource Explorer" link if you're looking for #Intune Device Inventory data on a co-managed device! (hint, the top one is Intune, the lower is ConfigMgr) 😄

060

Anthony J. Fontanez @ajf8729.com · 09/12/2024

Hmm, maybe I should update my root CRL this week...

020

Anthony J. Fontanez @ajf8729.com · 05/12/2024

Weird hiccup with the CMG after enabling the new Enhanced Security feature. The CMG properties window no longer worked correctly, I found WMI errors in the console log, and ended up temp adding a second SMS provider, which fixed it up. My lab has seen some stuff though.

010

Anthony J. Fontanez @ajf8729.com · 04/12/2024

Upgraded the lab! #ConfigMgr 2409, then site server upgrade from 2022 -> 2025!

150

Anthony J. Fontanez @ajf8729.com · 04/12/2024

I just completed "Ceres Search" - Day 4 - Advent of Code 2024 #AdventOfCode adventofcode.com/2024/day/4 github.com/ajf8729/Adve... and @z-nerd.com noticed my part 1 code looked like half of a Christmas tree so I added a star to it!

070

Anthony J. Fontanez @ajf8729.com · 27/11/2024

"Noooooo, I can't move to #Intune because I have so many important GPOs!" Contents of "important" GPO:

0163

Anthony J. Fontanez @ajf8729.com · 14/11/2024

Not sure, but often enough that yours is broken now :-D

110

Anthony J. Fontanez @ajf8729.com · 17/09/2024

Bluesky now has over 10 million users, and I was #222,742!

010