iiinova — where your digital self keeps evolving

Rudy Ooms | MVP @call4cloud.nl · 04/10/2025

Why Do Required Apps Wait 60 Minutes to be installed After Autopilot Enrollment? You’d expect the required apps to install as soon as the user hits the desktop after the Autopilot enrollment. Well, they don't; they wait exactly 60 minutes. #Intune #MSintune patchmypc.com/blog/why-do-...

1122

Rudy Ooms | MVP @call4cloud.nl · 24/07/2025

Quick Machine Recovery brings resilience to Windows 24h2. When devices fail to boot, Windows can now recover automatically: no USB sticks, no Safe Mode, no hands-on recovery needed. Just one policy, and it gets back to work. @patchmypc.com : patchmypc.com/blog/quick-m... #Intune #MSIntune

151

Rudy Ooms | MVP @call4cloud.nl · 01/07/2025

How the Intune Management Extension should clean up the IMECache Wondering why those folders in IMECache are still there after a Win32 app was “successfully” installed?? Read the blog at @patchmypc.com to find out how that folder should be deleted patchmypc.com/blog/how-the... #Intune #MSIntune

030

Rudy Ooms | MVP @call4cloud.nl · 05/06/2025

Intune PowerShell (Platform) scripts suddenly not running anymore? It turns out that the Intune Management Extension (IME, also known as the SideCar agent) policy payload has changed slightly. Read what changed and how we need to deal with it: patchmypc.com/blog/powersh... #Intune #MSintune

261

Rudy Ooms | MVP @call4cloud.nl · 31/05/2025

Microsoft Store apps failing with 0x87D30017 during Autopilot Device Preparation? If you're relying on Microsoft Store apps during Autopilot, you’ll want to read this. patchmypc.com/blog/when-re... #Intune #MSIntune #WindowsAutopilot

120

Rudy Ooms | MVP @call4cloud.nl · 27/05/2025

Personal Data Encryption requires Windows Hello for Business to unlock the protected data, right? Well.... I guess not. Logging in with just a password still gets you access to the protected data. Read the full blog below #Intune #MSIntune #Windows patchmypc.com/personal-dat...

032

Rudy Ooms | MVP @call4cloud.nl · 21/05/2025

Autopilot and the Security Policies (1 of 1 applied) Who is interested in learning more about how the Enrollment Status Page is tracking the security policies during #WindowsAutopilot? And... how we could manually add some ourselves? patchmypc.com/autopilot-id... #Intune #MSintune #Windows11

163

Rudy Ooms | MVP @call4cloud.nl · 12/05/2025

Outlook sign-in suddenly failing with CAA2000B and AADSTS500014??? We ran into the same issue, and it wasn’t a token issue or profile problem. It came down to one enterprise application quietly being disabled for sign-in. patchmypc.com/fixing-caa20... #Intune #MSIntune

011

Rudy Ooms | MVP @call4cloud.nl · 29/04/2025

Are you planning to move to #Windows 11 24H2? You might want to double-check something first. On Windows 11 24H2, Constrained Language Mode is no longer enforced properly when AppLocker Script Rules are active. Those scripts are now run in FullLanguage Mode patchmypc.com/windows-11-2... #Intune

173

Rudy Ooms | MVP @call4cloud.nl · 15/04/2025

The Device Lock Screen Inactivity Timeout Issue: What You Need to Know One thing’s for sure: You didn’t configure a device lock screen timeout, and there’s no Intune device configuration policy that points to it. It’s not a bug..... It’s a feature. #Intune #MSIntune patchmypc.com/intune-lock-...

1151

Rudy Ooms | MVP @call4cloud.nl · 11/04/2025

Do you have an Autopilot deregistration procedure in place when hardware gets replaced? A reused motherboard can still be tied to the original tenant. Without proper deregistration, the new device will try to enroll into the wrong tenant. Read the full blog: shorturl.at/74rsr #Intune #MSintune

040

Rudy Ooms | MVP @call4cloud.nl · 10/04/2025

"Continue to sign in?" We have all seen it! If you're based in Europe (like me) and wondering why Silent Sign-On (SSO) is broken for the Microsoft Apps, this might be why. We wrote a PowerShell script to disable it! call4cloud.nl/continue-to-... #Intune #MSIntune

0235

Rudy Ooms | MVP @call4cloud.nl · 08/04/2025

You configured a new Device platform enrollment restriction in Intune.“Only allow Windows devices that meet a minimum OS version.” Somehow, devices with an older Windows build still got enrolled, what happened? patchmypc.com/windows-auto... #Intune #MSintune

031

Rudy Ooms | MVP @call4cloud.nl · 07/04/2025

Has anyone seen what the March 24H2 Windows Update is going to fix for Windows Autopilot/OOBE? “OOBE Fixed: Addresses an issue that prevents the ESP from running every time a new user logs onto the device even when configured by policy.” patchtuesday.com/blog/windows... #Intune #MSIntune

041

Rudy Ooms | MVP @call4cloud.nl · 04/04/2025

Using Windows Update client policies (WUfB) to patch your devices right after Autopilot enrollment? Then you’ll want to know about OOBECompleteTimestamp. This little registry key tells Windows that OOBE is done, and until it’s set, your (Hotpatch) Updates won’t apply. shorturl.at/n4A84 #Intune

072

Rudy Ooms | MVP @call4cloud.nl · 02/04/2025

Remember the CrowdStrike incident that left many of your devices trapped in a BSOD loop?Turns out that Microsoft has been quietly working on Quick Machine Recovery.This feature helps you recover the next time it happens.(Because, yes, there will be a next time) shorturl.at/dztUq #Intune #MSIntune

0209

Rudy Ooms | MVP @call4cloud.nl · 26/03/2025

Are you using a Temporary Access Pass (TAP), and somehow, the web sign-in option is missing after the device was enrolled with Windows Autopilot for Pre-Provisioned Deployments? Well, we found the bug!! patchmypc.com/web-sign-in-... #Intune #MSintune #Patchmypc

1142

Rudy Ooms | MVP @call4cloud.nl · 21/03/2025

Are your Windows Autopilot enrollments failing on the Microsoft 365 Apps? One simple misconfigured policy could be the reason...and it’s not just Autopilot. Installing other apps from the Company Portal could give you the exact same issue. patchmypc.com/delivery-opt... #Intune #MSIntune

162

Rudy Ooms | MVP @call4cloud.nl · 20/03/2025

DNS failures and network issues could prevent devices from syncing with Intune, disrupting policy and app delivery Guess what??? Microsoft just added a fix/feature to deal with those DNS/Network Issues when the device needs to sync with Intune! patchmypc.com/new-sync-eve... #Intune #MSIntune

060

Rudy Ooms | MVP @call4cloud.nl · 19/03/2025

Microsoft just fixed two Administrator Protection bugs!!! 1. Failed to load MUI File patchmypc.com/administrato... 2. Administrator Protection broke EPM patchmypc.com/local-admini... With these fixes in place, Administrator Protection looks closer than ever to GA. #Intune #MSIntune

092

Rudy Ooms | MVP @call4cloud.nl · 18/03/2025

How One Intune Policy Can Break Autopilot Pre-Provisioning If you're applying energy-saving policies through Intune, you might unknowingly break Autopilot Pre-Provisioning. Want to know what’s causing the issue and how to fix it? Read the blog! patchmypc.com/autopilot-pr... #Msintune #Intune

073

Rudy Ooms | MVP @call4cloud.nl · 14/03/2025

It looks like Microsoft is cooking up something new for Windows Autopilot. This new feature could potentially solve one of the most frustrating Autopilot issues. The Account Setup being stuck indefinitely! Could this be the fix we’ve been waiting for??? shorturl.at/5bgTY #Intune #MSintune

271

Rudy Ooms | MVP @call4cloud.nl · 14/03/2025

Did you hit the maximum of 200 BitLocker recovery keys for your device? We (@byteben.bsky.social) developed a Proactive Remediation PowerShell script that automatically cleans up those stale recovery keys! How? Well, that's for you to find out! #Intune #MSIntune patchmypc.com/bitlocker-re...

0131

Rudy Ooms | MVP @call4cloud.nl · 12/03/2025

It seems that Microsoft has resolved the Standard User bug in Autopilot Device Preparation with the latest Intune Management Extension update!!!! Want to see how Microsoft implemented this fix? Read the blog: patchmypc.com/autopilot-de... #Intune #MSIntune #WindowsAutopilot

193

Rudy Ooms | MVP @call4cloud.nl · 05/03/2025

Using Local Administrator Protection on a non en-US device? It could have broken admin access. It seems that Microsoft fixed it!! If you want to know more about administator protection and how Microsoft fixed it ...you might want to read this blog #Intune #Msintune patchmypc.com/administrato...

041

Rudy Ooms | MVP @call4cloud.nl · 27/02/2025

Autopilot Skipping Intune Enrollment? Even while the MDM Scope is configured, and the user has a valid Entra and Intune license? Read the blog below to find out because there was something pretty well hidden in Microsoft Graph! patchmypc.com/missing-mdm-... #MSIntune #Intune #WindowsAutopilot

051

Rudy Ooms | MVP @call4cloud.nl · 25/02/2025

Performing a remote wipe from Intune? And now your devices won’t boot, stuck on “There was a problem resetting your PC”? There’s a reason this keeps happening, especially on Dell devices. And no, it’s not just bad luck. Read it all here! patchmypc.com/intune-remot... #Intune #MSintune

131

Rudy Ooms | MVP @call4cloud.nl · 23/02/2025

Do you already have Personal Data Encryption in place? Without it, local admins might have more access than you think. Windows 11’s Personal Data Encryption (PDE) ensures that user data stays locked, and only the rightful owner can access it. patchmypc.com/personal-dat... #Intune #MSintune

171

Rudy Ooms | MVP @call4cloud.nl · 21/02/2025

Stuck at Account Setup in Windows Autopilot again? Let's just skip it then! Instead of waiting at the identifying step, you can simply disable the User / Account ESP and launch the Company Portal automatically at first login. Here’s how: patchmypc.com/automaticall... #Intune #MSIntune

192

Rudy Ooms | MVP @call4cloud.nl · 20/02/2025

Are your Windows Kiosk Devices Waiting for Win32App Update Install Status… indefinitely? Why aren't the Win32Apps being Updated? What’s going on behind the scenes?? And, more importantly, how do we fix it? patchmypc.com/kiosk-device... #Intune #MSintune

052

Rudy Ooms | MVP @call4cloud.nl · 17/02/2025

Are your users still a local admin after enrolling with Autopilot Device Preparation (AP-DP) even when the Autopilot profile was configured to Standard user? patchmypc.com/autopilot-de... Microsoft seems to be fighting an update to fix the StandardUserProvider flow. #Intune #MSintune

162

Rudy Ooms | MVP @call4cloud.nl · 15/02/2025

Look at this! Microsoft seems to reintroduce quality updates during OOBE (After Windows Autopilot), but this time, IT admins will have some control over this process. Curious about the details and how Microsoft is going to implement this? shorturl.at/dYWFy #Intune #MSIntune

071

Rudy Ooms | MVP @call4cloud.nl · 12/02/2025

Windows Autopilot Pre-Provisioning Failed with 801c03ed (Invalid Token) during Entra join after being stuck for 10 minutes on: Please wait while we set up your device If you want to know which policy was causing this, you need to read the blog at @patchmypc.com shorturl.at/2uYpd #Intune #MSintune

162

Rudy Ooms | MVP @call4cloud.nl · 07/02/2025

Microsoft is bringing back Quality Updates during the Out-Of-Box Experience, but this time, they are doing so with a policy to control them. No more forced updates after Autopilot! You’ll soon have the option to defer them. Want to read the full story??? shorturl.at/UrEAu #Intune #MSIntune

080

Rudy Ooms | MVP @call4cloud.nl · 05/02/2025

Another trophy added ! And i love it!!! Thanks for having us #wpninjasnl !!! @wpninjasnl.bsky.social It was pretty awesome to be on stage again with @mdmlab.nl #intune #msintune

050

Rudy Ooms | MVP @call4cloud.nl · 05/02/2025

Within a couple of hours me and @mdmlab.nl are going to present a session about device query, device inventory and….. :) … We can’t wait to talk about the :) part today at #wpninjasnl #intune #msintune

0101

Rudy Ooms | MVP @call4cloud.nl · 01/02/2025

Microsoft #Entra ID caps BitLocker recovery keys at 200 per device. If you exceed that limit, silent encryption fails. But we found a hidden cleanup mechanism in the latest Insider Preview that might finally fix it. Start following @patchmypc.com , so you won't miss out! #Intune #MSintune

1121

Rudy Ooms | MVP @call4cloud.nl · 31/01/2025

ShadowAdminPairs:The Key to Administrator Protection and Entra Local Admins Are you using the new Administrator Protection feature announced at Ignite?If so, you may wonder how the Administrator Protection feature, handles Entra accounts that are local admins shorturl.at/cB3Qy #Intune #MSIntune

041

Rudy Ooms | MVP @call4cloud.nl · 29/01/2025

Have you ever clicked "Collect Diagnostics" in Intune and wondered what’s really going on behind the scenes? In this blog @patchmypc.com will do a deep dive into how this diagnostic tool is doing its job and how all the data is collected patchmypc.com/intune-colle... #Intune #MSintune

1244

Rudy Ooms | MVP @call4cloud.nl · 24/01/2025

Troubleshooting Windows Feature Updates with Graph API Deploying Windows Feature Updates through #Intune seemed simple until one device didn’t appear in the Windows Feature update report. In this @patchmypc.com blog, we will show you how to fix it with Graph: shorturl.at/5jNqp #WindowsUpdates

0113

Rudy Ooms | MVP @call4cloud.nl · 21/01/2025

Clearing the TPM on certain Dell devices doesn’t just reset it, it changes the EKpub and Offline Device ID. This breaks TPM standards and has serious implications for attestation We found this issue unique to Dell (STM TPM) devices, other vendors remain unaffected. 🔗 patchmypc.com/clear-tpm-ch...

0169

Rudy Ooms | MVP @call4cloud.nl · 20/01/2025

With the latest Windows Insider Preview, enabling local administrator protection is as simple as flipping a switch in the Account Protection settings. It’s that easy! I updated the blog (another deep dive is coming!) 👉 patchmypc.com/local-admini... #Intune #MSIntune

094

Rudy Ooms | MVP @call4cloud.nl · 09/01/2025

Deploying Windows Feature Updates is like playing a game of WUfB-DS chess. You need to know the rules of the game. This blog lays out the full update flow, common issues, and how to troubleshoot when updates don’t apply (decision engine). shorturl.at/baRdV #Intune #MSIntune #WindowsUpdate

1161

Rudy Ooms | MVP @call4cloud.nl · 04/01/2025

Last time, we took a deep dive into Personal Data Encryption and how it encrypts user files against other bad administrators. But while testing, we discovered a weird issue: executables in protected locations just gave the error 0x80070043. Want to know more? shorturl.at/Jw2Pk #Intune #MSIntune

1102

Rudy Ooms | MVP @call4cloud.nl · 28/12/2024

🚨 Under the hood of Personal Data Encryption -Can SYSTEM decrypt protected files? -Can folders be added? -Can re-encryption work? -Does logoff truly lock everyone out? Curious about the answers? Read our findings here @patchmypc.com : patchmypc.com/personal-dat... #Intune #MSIntune

1224

Rudy Ooms | MVP @call4cloud.nl · 26/12/2024

Happy Holidays! This year, Call4Cloud had 2,147,085 visitors, with 1,060,103 unique visitors. Finally hit the 1 million unique visitor's mark! It’s great to see the weird content I write is helping the #ITcommunity. What should I blog more about next year? #MsIntune #Intune

0150

Rudy Ooms | MVP @call4cloud.nl · 19/12/2024

Thinking about enabling the new Local Administrator Protection feature?Before you do, check out the latest @patchmypc.com blog to avoid a nasty surprise: getting locked out of your device with the error "The resource loader cache doesn't have loaded MUI entry" #Intune #MSIntune shorturl.at/mAfrA

095

Rudy Ooms | MVP @call4cloud.nl · 09/12/2024

Are you using EPM and enabled Local Administrator Protection? You might want to double-check that setup. These two features don’t play well together, and the result? Some funny errors and with it, EPM no longer able to elevate the process. #Intune #MSIntune #Windows #Windows11 shorturl.at/PA3tM

060

Rudy Ooms | MVP @call4cloud.nl · 06/12/2024

💭 Thinking about removing built-in #Windows Store #apps after #WindowsAutopilot? This blog will discuss the risks, rewards, and best practices for keeping your deployments clean and problem-free. patchmypc.com/uninstall-bu... #Intune #MSIntune #patchmypc

1256