A CIS Benchmarks Contributor is a subject matter expert within specific technology(ies) who attends most Community meetings and creates or comments on tickets, proposed changes, and discussions. They ...

Learn more about: Appendix C: Protected Accounts and Groups in Active Directory

The Microsoft MVP Program connects technical community leaders with Microsoft to promote engagement, advocacy, and knowledge sharing on Microsoft Products & Services.

Hello Windows Insiders, I want to speak to you directly, as an engineer who has spent his career building technology that people depend on every day. Windows touches more people's lives than almost a...

With Windows Backup for Organizations, you can now restore Windows on even more devices.  

Microsoft wants you to update your Secure Boot certificates as soon as possible. Join me as I explain the situation and take action now!

Are there Entra devices in your tenant that you cannot delete? Is your Autopilot device pointing to the wrong Entra device? Read more here!

As organizations face an evolving threat landscape, strengthening Windows authentication is more critical than ever.

As per ICM (675845676) SSL inspection is not supported for Microsoft store API and may cause reporting issues so we need to add the note that SSL inspection not supported for Microsoft Store API si...

Review endpoints for Intune. This page lists IP addresses and port settings needed for proxy settings in your Intune deployments.

Microsoft Entra introduces soft deletion and restoration for cloud security groups, allowing recovery within 30 days while preserving settings, ownership, and m

A handful of updates (full changelog here) are finally implemented: ID-to-Service-List list is now available. This will show you which custom ID is related to which service. Test MCC endpoints Tes...

Windows v3.7 - 2025-10-15 - 25H2 Edition Added 🆕 Settings Catalog 🆕Win - OIB - SC - Device Security - D - Administrator Protection - v3.7 Added configuration to enable the new Administrator Protec...

Discover how to use Microsoft Intune to remotely manage, wipe, lock, restart, and secure Android, iOS/iPadOS, macOS, Windows, and ChromeOS devices. Learn about available remote actions, prerequisites,...

This article provides information on the end of servicing plan for third-party printer drivers on Windows.

This tool provides a way to verify Intune network requirements automatically - MHimken/IntuneNetworkRequirements

Learn about Source of Authority (SOA), including prerequisites, supported scenarios, and step-by-step guidance for IT Architects and Administrators.

This is my toolbox. Watch where you step. Contribute to MHimken/toolbox development by creating an account on GitHub.

Learn how to migrate domain-joined, co-managed Windows 10 devices to Microsoft Intune managed Windows 11.   

Microsoft engineers and IT pros come together to develop solutions that better meet customer needs.

Now that the the “Azure AD based Windows Login” extension is available (docs here), a Windows server running in Azure or that is Arc-enabled can now be signed into via Entra ID. When I …

Set up macOS account configuration with LAPS through automatic device enrollment for macOS devices in Intune.

Software, Networking, Licensing, and Configuration requirements for Windows Autopilot.

Summary of new auditing features and deployment details

Learn about the policy settings to configure Configure Windows Hello for Business.

Ready for the next feature update? Windows 11, version 25H2 is coming as an enablement package (eKB) later this year!