Happy Friday, it’s time for your favourite Intune news! Quite an international feel this week, you may notice from a few of the more strange URLs that I’ve been looking at blogs in different languages as well, but have linked the UK translation to save you precious clicks! I’m always looking for…

HTMD Community Intune Windows Modern Workplace Device Management

Learn how to architect a secure, zero-touch loaner device strategy using Intune Shared PC Mode, Web * Yes, it fits perfectly. Let's output only the continuation.-sign-in, and passwordless FIDO2 authentication. Build automated lifecycle flows with Microsoft Graph.

Defender was running. Windows said it was off. Intune could then mark the device noncompliant, and Conditional Access could block the user. Here is how the startup race happened, what our PowerShell workaround did, and what we found when testing Defender 4.18.26080.4

Moving from Group Policy to Microsoft Intune shouldn't simply be a lift-and-shift exercise. It's an opportunity to rationalise years of legacy configuration, remove technical debt and rethink how Windows endpoints should be managed in a cloud-native world. In this post, I explore Microsoft's latest…

For a few months now, a new scheduling system has appeared in the Windows Update / Microsoft Intune ecosystem: the Maintenance Window. Unlike active hours that you can find in update rings and that simply avoid...

It is possible to manage Windows security settings in Intune with different policy types. The problem begins when the same setting is defined with different values in more than one configuration policy. Settings Catalog, Security Baseline and Endpoint Security profiles most often map to MDM-based settings; Compliance…

Applied is not fixed. The Intune Vulnerability Remediation Agent prioritizes CVEs, but endpoint teams must prove real risk reduction.

Windows Autopilot device preparation built from scratch in an empty tenant, plus the new Device Association feature that binds a device to your tenant before it ever enrolls.

It’s been a few months since I first wrote about my 1PhoneMirror tool, and it has kept moving – mostly driven by my own needs and, honestly, a fair bit of curiosity-driven tinkering. I use it regularly myself, both for writing documentation and for live demos, and both of those use cases have…

A colleague asked me to investigate why iPad registration stopped working.

Windows Autopilot Device Association lets a brand-new laptop work out which tenant it belongs to before anyone signs in, which is genuinely useful, right up to the moment you realise […]

Just when we all got used to the feature of using the memberOf attribute in dynamic groups in Entra, Microsoft pulled the rug on us! Today I’ll show you how to find all groups with this attribute and how to bulk update them with a new rule. If you want to read the full message...

Here we are again! August is over, which means a new Service Release in Microsoft Intune. As we’ve done before, in this blog post we’ll go over the new features…

If you’ve opened Intune recently and gone to Devices > Enrollment, you’ve probably noticed the list keeps growing. Windows Autopilot, Windows Autopilot device preparation, Device association, Deployment profiles, Enrollment Status Page, the Intune Connector for Active Directory, it’s a lot to look…

When a Win32 app fails to install or a Remediation doesn’t produce the expected result, changing the installer command is often the first thing that comes to mind. However, if the Intune Management Extension (IME) on the device is not up to date or cannot receive policies from Intune, the issue may never reach the app or script layer. Microsoft’s…

Microsoft Entra Cloud Sync can now provision users to Active Directory in preview. Check the prerequisites, scoping process and current limitations.

Most organization have a process for collecting evidence from physical devices during a security incident. But what happens when the endpoint isn’t physical anymore?As more organization’s move workloads to Windows 365 Cloud PCs, security and incident response teams need a way to preserve evidence…

By: Maggie Dakeva, Senior Product Manager - Microsoft Intune We’ve heard organizations want Windows deployment to be simple for employees and predictable for IT admins. But before a device enrolls, how does the organization know that the device is really one of its own - and how can IT make sure…

Introduction In previous blog posts I took a look at Windows 365 Reserve, explained what it was and gave my thoughts about how to implement it and my thoughts about the best way to use it for disaster recovery in … Continue reading →

Have you ever bought a new machine for your organization, set everything up cloud native and cloud first, and then watched a user log in for the first time only to find their primary security software is McAfee with a one year free trial? Loaded at the OEM level, of course. And you didn’t buy […]

Anyone managing Intune compliance policies across iOS, macOS, Windows, and Android already knows this one.

HTMD Community Intune Windows Modern Workplace Device Management

Hello there! Late August in Sweden always feels like the real start of the year. The evenings are drawing in and the calendar is filling up again. It has been a good summer with a lot of sun and some travelling, and I am looking forward to some time indoors and the projects that come […]

We now have a way to manage settings for provisioned Cloud PC’s on the fly. Cloud PC Settings are dynamic settings that can be set during a Cloud PC’s lifecycle. Cloud PC Settings offers four types of settings objects: Like most Intune configuration profiles and group policy objects, for most…

IntroductionMicrosoft recently introduced the ability to collect Windows Registry data using Device Inventory and the Properties Catalog in Intune. While most examples focus on application inventory and configuration validation, I wanted to explore a different use case. Many security-related events…

IntroductionMicrosoft recently introduced the ability to collect Windows Registry data using Device Inventory and the Properties Catalog in Intune. While most examples focus on application inventory and configuration validation, I wanted to explore a different use case. Many security-related events…

Microsoft is clearly moving toward a more unified security operations experience within the Defender portal. Over the last few years, we have seen Microsoft bring more security capabilities together under the Defender platform. Instead of working with completely separate portals... Het bericht…

CISPolicyCreator is a free, non-commercial community project and an independent publication — not authorized, sponsored, certified or endorsed by the Center for Internet Security, Inc., and not an official CIS Build Kit. It reads an Intune-specific CIS Benchmark PDF you obtained yourself and builds…

IntroductionMicrosoft recently introduced the ability to collect Windows Registry data using Device Inventory and the Properties Catalog in Intune. While most examples focus on application-specific registry data, I wanted to explore a practical use case for Windows kiosk devices. In environments…

Edge Management service provides some great insights and features that we don’t get when we manage Edge using Intune for example and the best thing it is Free.That is also why the Edge Management UI is in the Microsoft 365 Admin portal and not in the Intune portal. There are many interesting…

In this video, I explain how to hide Windows Settings pages or show only certain pages using Page Visibility List via Microsoft Intune. #MicrosoftIntune #Intune #Windows11 #SettingsCatalog

Microsoft Intune Remote Help is not a brand-new tool. It has been around for a few years as a standalone add-on and as part of the Intune Suite. What is new is that Microsoft is adding the advanced Intune Suite capabilities to Microsoft 365 E3 and E5, and the rollout started in July 2026. That…

In the previous part of this series, we looked at managing Cloud PCs after they have been provisioned.

Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates https://www.linkedin.com/company/how-to-manage-devices/ The post Use Intune to Automatically Lock…

If you are sometimes slow updating your lab modules, like me, you may have noticed that when you ran Connect-MgGraph to do your Intune magic, you didn’t get a browser prompt for that interactive login. That’s because WAM in the Microsoft Graph SDK is now doing the heavy lifting on Windows. What is…

If you’ve ever opened a Microsoft support case for an Intune issue, you’ve probably heard the dreaded phrase: “Can you…

Intune now has the bult-in capability to support ring type deployments for applications and configuration payloads. A familiar mechanics if you manage Windows updates in Intune. Let me walk you trough it...