iiinova — where your digital self keeps evolving

James Robinson | MVP @skiptotheendpoint.co.uk · 14/07/2025

There's some companion apps coming to #Windows11 via the M365 Desktop Apps that might catch admins or users off-guard, so I've put some thoughts and information together in a mini-blog. skiptotheendpoint.co.uk/m365-compani...

skiptotheendpoint.co.uk

M365 Companion Apps: A (P)review

M365 Companion Apps are coming! What are they, what does this mean as an admin, and what do I think?

143

James Robinson | MVP @skiptotheendpoint.co.uk · 05/05/2025

I'll find someone here to bring one back for you 😉

010

James Robinson | MVP @skiptotheendpoint.co.uk · 04/05/2025

#MMSMOA is almost upon us! Start your conference right with a dose of the #OpenIntuneBaseline, and asking a good question may reward you with a special shiny SkipToTheEndpoint sticker! 8am, Lakes B! Sign up here: stte.me/mmsoib

130

James Robinson | MVP @skiptotheendpoint.co.uk · 28/04/2025

📬 #Windows Recall had a rocky start, but where do we stand now as it moves into GA? With a complete security overhaul, fresh admin controls, and a default-off strategy, the improvements are promising! Interested to read a more optimistic view? stte.me/recallisgreat

stte.me

From Criticism to Confidence: Windows Recall

Windows Recall is a powerful tool, but is it secure, should you be concerned, and how do you manage it?!

031

James Robinson | MVP @skiptotheendpoint.co.uk · 15/04/2025

They've addressed the enterprise-readiness because yeah, the initial announcement was awful. While I somewhat agree as I also work across physical and virtual devices, the security necessary for it so heavily ties it to a device. I've been loving the Snapdragon Surface though!

000

James Robinson | MVP @skiptotheendpoint.co.uk · 15/04/2025

After picking up a Surface and having some time to play with #Windows #Recall, I'm working on a blog all about it, but am already fed up with seeing posts about policy not working. So let me make this as clear as I can:

120

James Robinson | MVP @skiptotheendpoint.co.uk · 02/04/2025

It's an absolute pleasure to be invited back to the @mmsmoa.bsky.social to talk all about the #OpenIntuneBaseline! Interested in how it all started? Not sure how to get the most of it in your environment? I'm stoked to be able to tell you all about it! sched.co/1uF7c

091

James Robinson | MVP @skiptotheendpoint.co.uk · 17/03/2025

I am deeply unhappy that these things now qualify as being "dad rock". And that I'm the dad.

140

James Robinson | MVP @skiptotheendpoint.co.uk · 20/02/2025

📰 OIB Windows v3.5 - 24H2 Baseline Edition! A surprise drop of some settings and an updated 24H2 Intune baseline brings some of those additions (and some extra goodies) to the Windows OIB. Check out the changelog below! github.com/SkipToTheEnd...

github.com

Release windows-v3.5 · SkipToTheEndpoint/OpenIntuneBaseline

Windows v3.5 - 2025-02-20 - 24H2 Baseline Edition (Mostly) Added Settings Catalog Win - OIB - SC - Device Security - D - Windows Package Manager - v3.5 Added configuration that will be being adde...

0114

James Robinson | MVP @skiptotheendpoint.co.uk · 11/02/2025

Since about April last year. It's also a bypass to other policies blocking access to the Store (mostly). Though those policies are largely security by obscurity and not a valid alternative to proper Application Control.

010

James Robinson | MVP @skiptotheendpoint.co.uk · 06/02/2025

📬 It's been a quiet couple of months on the #Intune front, so what's better than getting Intune 2501 in February! New Edge settings, more Apple DDM, and CSP control over the upcoming #Windows #Recall feature. skiptotheendpoint.co.uk/settings-run...

skiptotheendpoint.co.uk

Intune Settings Rundown - 2501

Intune 2501 - Stay informed of the latest Intune settings policy and UI changes!

083

James Robinson | MVP @skiptotheendpoint.co.uk · 28/01/2025

So you're saying I should have jumped straight to v95? 😅

010

James Robinson | MVP @skiptotheendpoint.co.uk · 27/01/2025

The multiple entry points to configure things like this and WHfB confuse so many people. Like Windows LAPS, I think they should only be configurable via Endpoint Security > Encryption.

100

James Robinson | MVP @skiptotheendpoint.co.uk · 24/01/2025

🚨 #OpenIntuneBaseline Windows v3.4 Released! New additions and some things to be aware of, such as the fact all policy names have been updated. Thanks for all the community input. You guys rock. Check out the release changelog below: github.com/SkipToTheEnd...

github.com

Release windows-v3.4 · SkipToTheEndpoint/OpenIntuneBaseline

Windows v3.4 - 2025-01-24 ImportantA UI change in November '24 has made all policy types visible in the Configuration blade. This has caused a lot of confusion when trying to identify policies conf...

1278

James Robinson | MVP @skiptotheendpoint.co.uk · 22/01/2025

Haha. Also not wrong. That being said, I've seen the mechanism for configuring the start menu break like 5 times in the last few years. There's far better things for admins to be worrying about on a daily basis than chasing a goose with a knife ;)

110

James Robinson | MVP @skiptotheendpoint.co.uk · 22/01/2025

Haha, tell me about it. That naming scheme alone is a labour of love. If they're not descriptive and someone who's not sure can't at least take a guess at where a thing might be configured, what's the point?!

000

James Robinson | MVP @skiptotheendpoint.co.uk · 22/01/2025

📰 OIB 3.4 News! I'm busy finalising changes/updates to v3.4 of the #OpenIntuneBaseline. Some forewarning of a "breaking change" in that all policies have been renamed to show where they actually exist (ES - Endpoint Security, SC - Settings Catalog). I still don't like it :(

182

James Robinson | MVP @skiptotheendpoint.co.uk · 20/01/2025

Another day, another "x policy/remote action isn't working on our iOS devices" issue. Just because you used Corp Identifiers, or switched it from Personal to Corp doesn't mean that device is Supervised. Stuff won't work as you expect. Enrol your devices properly, guys!

030

James Robinson | MVP @skiptotheendpoint.co.uk · 14/01/2025

Is this another hilarious #Windows en-GB install media localisation issue where "checked" has been replaced with "ticked"? 24H2 26100.2605

132

James Robinson | MVP @skiptotheendpoint.co.uk · 20/12/2024

Thanks! Glad they were valuable. Pretty sure I just had to stop and disable AppArmor entirely, though I'm not sure if that's necessarily the best thing to do: ubuntu.com/server/docs/...

ubuntu.com

010

James Robinson | MVP @skiptotheendpoint.co.uk · 19/12/2024

📬 Following from last week, Part 2 in the story of #Windows CSP and #Intune policy deployment. ControlPolicyConflict, Policy Scope and MMP-C, oh my! Happy Holidays! skiptotheendpoint.co.uk/windows-csp-...

skiptotheendpoint.co.uk

Windows CSP: A Tale of Magic, Betrayal, and Intrigue - Part 2

Part 2 on how Windows handles policy, the 2 major reasons people struggle, as well as a taste of the future.

1124

James Robinson | MVP @skiptotheendpoint.co.uk · 12/12/2024

📬 Do you administer #Intune or support Intune-managed devices? Do you know how policy gets delivered to devices, and how the OS handles them? Check out part 1 of 2 all about the nuance and intricacies of #Windows CSP's! skiptotheendpoint.co.uk/windows-csp-...

skiptotheendpoint.co.uk

Windows CSP: A Tale of Magic, Betrayal, and Intrigue - Part 1

Creating an Intune policy is easy, but what happens then? How go they get there, and why you should know and care.

0172

James Robinson | MVP @skiptotheendpoint.co.uk · 11/12/2024

Oh my I think it finally happened! The #Defender security "recommendation" to implement a now-defunct version of LAPS has disappeared! Can't seem to find any official changelog though. It's a Festivus miracle! 🎉

040

James Robinson | MVP @skiptotheendpoint.co.uk · 06/12/2024

There are also some super cool capabilities in the EMS, like a one-click way to automatically block all other browsers which deploys a pre-built AppLocker config in Intune! learn.microsoft.com/en-us/deploy...

learn.microsoft.com

Customization settings

Provides steps for configuring customizations for Microsoft Edge management service.

020

James Robinson | MVP @skiptotheendpoint.co.uk · 06/12/2024

🚨You can now enable monitoring of channels and updates in the #Edge Management Service! learn.microsoft.com/en-us/deploy... You may also notice all #Intune Settings Catalog policies in the "Configuration policies" list. I'm writing a blog as there's some chance for danger here...

150

James Robinson | MVP @skiptotheendpoint.co.uk · 05/12/2024

Is this #Defender #ASR recommendation notification new?! Incredibly cool that it's analysed the logs, seen no audit or warn events and actively suggesting to deploy it with as associated user impact!

1111

James Robinson | MVP @skiptotheendpoint.co.uk · 02/12/2024

Theoretically no, but it's adding additional confusion to an already confusing ownership story. Description isn't a bad idea but many don't read them. It was already somewhat confusing to have those policies be in the Settings Catalog export folder from IntuneManagement...

000

James Robinson | MVP @skiptotheendpoint.co.uk · 02/12/2024

#OIB hivemind - The #Intune UI change that dumps everything into the Configuration page makes it hard to know where a policy actually exists. Thoughts on adding "SC" for Settings Catalog and "ES" for Endpoint Security into the naming convention?

580

James Robinson | MVP @skiptotheendpoint.co.uk · 29/11/2024

I sometimes look at the Elvanse (Lisdexamfetamine Dimesylate) and Amfexa (Dexamfetamine Sulphate) on my desk and think it's weird I've got so many Class B drugs just sat there. And I just get them delivered by courier.

030

James Robinson | MVP @skiptotheendpoint.co.uk · 29/11/2024

At least you were just using Dev Tools this time!

110

James Robinson | MVP @skiptotheendpoint.co.uk · 28/11/2024

That sounds like a horrible experience for everyone 🤣

000

James Robinson | MVP @skiptotheendpoint.co.uk · 28/11/2024

How often do you see your actual desktop? A few seconds after you log in until you fullscreen something. It's just that nobody ever questions these things. Some users need extra assistance, sure, but most are perfectly capable of pinning the things that are important to THEM.

410

James Robinson | MVP @skiptotheendpoint.co.uk · 27/11/2024

"Management" asks for changing default fonts, or right-click menu's, or moving the start button are unsustainable. Say "No". Empower your users with training or KB's. Stop assuming you know what every individual needs to be productive. #SomeExclusionsApply

6194

James Robinson | MVP @skiptotheendpoint.co.uk · 27/11/2024

Sounds like a HR issue, not an IT one 😉

000

Reposted by James Robinson | MVP

Steve Weiner @getrubix.bsky.social · 26/11/2024

Catch @shadykhorshed.bsky.social , @skiptotheendpoint.co.uk , @ugurkoc.de, and me this Thursday at 2 PM EST as we dive into all the biggest Intune and Windows updates from Ignite. youtu.be/msx-giuKfx4 #intune #autopilot

youtu.be

Intune at Ignite: a Thanksgiving Special

YouTube video by Get Rubix

0133

James Robinson | MVP @skiptotheendpoint.co.uk · 25/11/2024

One from the archive, but ever relevant for those embarking on their journeys into #Intune management. Names of things may have changed, but the sentiment has not. skiptotheendpoint.co.uk/haadj-stop-i...

skiptotheendpoint.co.uk

HAADJ: Stop it, you're making it worse for yourself (mostly)

HAADJ. A blessing or a curse for the shift to Modern Management? What if it was actually both?

072

James Robinson | MVP @skiptotheendpoint.co.uk · 24/11/2024

Lots of Intune has poor decisions of the past. I don't think this was the right way to fix this one is all.

000

James Robinson | MVP @skiptotheendpoint.co.uk · 24/11/2024

It complicates the already complicated split authority of policies in the Endpoint Security blade when it comes to RBAC. Someone could now think they could create an mdmSense policy via Settings Catalog. Keeping things clean and clear where things are managed is important.

110

James Robinson | MVP @skiptotheendpoint.co.uk · 24/11/2024

Glad it's been made official. I hate it.

100

James Robinson | MVP @skiptotheendpoint.co.uk · 22/11/2024

To bypass the security controls they impose on everyone else. Like a network team not having to go through the proxy.

110

James Robinson | MVP @skiptotheendpoint.co.uk · 21/11/2024

Fascists and wannabe despot's not a good enough reason? 😉

020

James Robinson | MVP @skiptotheendpoint.co.uk · 21/11/2024

📬 Another month and another #Intune SR means another Settings Rundown! UI changes, Hardware Inventory, Template Deprecation and WSL Compliance, oh my! skiptotheendpoint.co.uk/settings-run...

skiptotheendpoint.co.uk

Intune Settings Rundown - 2411

Intune 2411 - Stay informed of the latest Intune settings policy and UI changes!

0157

James Robinson | MVP @skiptotheendpoint.co.uk · 20/11/2024

"A little sign-in here, a touch of Wi-Fi there..."

030

James Robinson | MVP @skiptotheendpoint.co.uk · 20/11/2024

Intune Support Team in "The Other Place" have confirmed it is apparently an intended change...

041

James Robinson | MVP @skiptotheendpoint.co.uk · 20/11/2024

🚨 #Intune 2411 has made a UI change that is showing any Settings Catalog-backed Endpoint Security policies in the Configuration page. BitLocker, Defender, Firewall, ASR, LAPS and even Security Baselines visible. Currently unsure if this change is intended.

4120