I've completed "Secret Entrance" - Day 1 - Advent of Code 2025 #AdventOfCode adventofcode.com/2025/day/1 github.com/ajf8729/Adve...

There's a new boot image option available in #ConfigMgr 2509! #BlackLotus

Why is it every time I hear/see things like "Delivery Optimization broke our network", the "solution" always seems to be "so we blocked DO [in all the incorrect ways]" instead of "we finally decided to upgrade our ancient network infrastructure"?

RIP Windows 10 tomorrow, can still remember running the initial insider builds!

Woohoo, #Autopatch can use a Win32 app instead of a platform script for the broker now! Go to intune.microsoft.com#view/Microso... and hit that Migrate button right meow! In case you missed the MC notification about this, it's here admin.cloud.microsoft#/MessageCent... #Intune

TIL that you need DA to view RODC password replication policy results (was testing/verifying for AzureADKerberos). @josephryanries.bsky.social maybe you know why, seems odd, thought that would fall under typical RO directory data for domain users.

Reminder! - "The option to move back to Compatibility mode will remain until September 2025. After this date, the StrongCertificateBindingEnforcement registry key will no longer be supported" - support.microsoft.com/en-us/topic/... #ADCS #InfoSec

#INR aka #Intune Network Requirements script just got an update and a new home. Update your bookmarks! Also, new ASAs added: * Microsoft Defender for Endpoint * Visual Studio github.com/MHimken/Intu... #MVPBuzz

I scored 11/21 on e-mail.wtf and all I got was this lousy text to share on social media.

TIL you can pass an HTTP(S) URL directly to msiexec.exe and it will totally work. I had no idea!

ICYMI - #PowerShell 2.0 removal coming soon! learn.microsoft.com/en-us/window... - "Windows PowerShell 2.0 is removed from Windows 11, version 24H2 starting with the August 2025 non-security update. It’s also removed from Windows Server 2025 starting with the September 2025 security update."

Seems the 2025-08 .NET 8/9 updates were released a week early this month, in case you're already seeing the 2025-07 updates superseded in #ConfigMgr github.com/dotnet/core/...

Folks, bookmark this 👇 Did you know I curate a list of all the awesome Entra related links all in one place? Here's a quick peak into this list

I ended up writing a post about the new feature to change group SOA from AD to #Entra. Big big thanks to @intune.best for all of the assistance he provided and initial testing he did in #WinAdmins Discord voice yesterday! ajf.one/group-soa

Aye, this new #Entra feature is pretty neat once you work out the missing bits! After you set isCloudManaged=true, add the group to the Cloud Sync Entra->AD config, trigger provisioning, and watch the group get relocated/renamed! SOA reversal with the SID maintained! See before and after images:

Internet-facing file servers, using SMB over QUIC, and secured using Entra authentication! This turned out to be really easy to get up and running. ajf.one/entrafs #Entra #EntraID

You can now sign into Server 2025 via Entra ID and gain MFA/RBAC/CA if the VM is in Azure or is Arc enabled! learn.microsoft.com/en-us/entra/...

It has been almost 3 years since my last blog post, but I am excited to share my first Microsoft Tech Community post! Want deeper Intune reporting? I walk through building a Windows 365 dashboard using Power BI + Log Analytics. Check it out! #Intune #Windows365 #TechCommunity

Notepad++'s code signing cert expired, couldn't get a new one under the "Notepad++" name, so instead of getting one under their name (what the WinSCP developer does), they instead created their own root CA, issued a code signing cert, and want you to trust it notepad-plus-plus.org/news/v883-se...

And it's a super easy setup/upgrade, go do it now! #Entra

Happy Memorial Day Weekend Everyone! Indy 500 tomorrow, Game 3 between the Pacers and Knicks. What better way to celebrate the weekend than a new post about converting SCCM Configuration Items to Intune Remediation Scripts? joeloveless.com/2025/05/conf... #sccm #intune #mecm #powershell

My take on remediating #BlackLotus via #Intune Remediations & #ConfigMgr CIs. It sure was fun to code up and test as much as I was able to. Please let me know if you have any feedback or run into any issues if you try the scripts out! ajf.one/blacklotus

Nice Tech Community post on migrating BitLocker from #ConfigMgr to #Intune - techcommunity.microsoft.com/blog/CoreInf...

What do we want? A 64 bit IME! #Intune

Did you know you can send LAPS passwords to Entra on Server OS? Neither did @adamgrosstx.bsky.social or I until yesterday! Just need to hybrid join the server(s) and set the GPO to backup to "AAD"! Neat!

📬 #Windows Recall had a rocky start, but where do we stand now as it moves into GA? With a complete security overhaul, fresh admin controls, and a default-off strategy, the improvements are promising! Interested to read a more optimistic view? stte.me/recallisgreat

New Soapbox Post: Obsolete Security – Stop Setting These Policies! anthonyfontanez.com/index.php/20... Here I talk about requiring Ctrl+Alt+Del to log in, not displaying the last logged-in username, and logon banners, and why you should stop setting these! #Intune #WinAdmins

Folks, the latest episode of Entra.Chat podcast is out! Featuring our very own and beloved @nathanmcnulty.com Subscribe in your favorite podcast player today 👇 entra.news/p/operationa...

When did "zero trust" start to mean "use a 'VPN' for everything"?

Going to Workplace Ninjas UK 2025 wpninjas.uk in June? Don't miss these sessions with fellow WinAdmins and MVPs @jgkps.bsky.social, @krysonthe.net, and @intune.best!

This looks pretty freaking neat! Offline PKI using 3 YubiKeys and an ARM single board computer: vincent.bernat.ch/en/blog/2025... via @vincent.bernat.ch

PSA for Teams meetings organizers - you can end meetings for all participants when it's over.

It's 2025, why do I need to do this in order for #Intune to run PowerShell scripts in 64-bit mode?

Enterprise Deployment Guidance for CVE-2023-24932 support.microsoft.com/en-us/topic/...

It's Strong Certificate Binding Enforcement day everyone! support.microsoft.com/en-us/topic/...

This article is a great deep dive by @cryps1s I am also a huge fan of this Firewall series by Anthony Fontanez (used to be @ajf8729) anthonyfontanez.com/index.php/20... He covers how to handle certificate auth in the firewall and use with Entra joined devices, explains hard stuff well :)

It's Done.

Apparently I broke bit.ly/getwapi when I overhauled my GH Pages site recently, thanks @heyzeus.bsky.social for letting me know! It's since been fixed, and I figured I'd write a quick post about it: ajf8729.com/posts/get-wa... #Autopilot #Intune #WinAdmins

⚡ Check out this new Microsoft Entra blog post 👇 Microsoft Entra PowerShell module now generally available

A few new videos about Edge for Business, by @conditionalaccess.uk and @jgkps.bsky.social #Intune #WinAdmins Edge For Business, The Concept: www.youtube.com/watch?v=ryDs...

Worked a bit on my Hugo/GitHub Pages site today, new theme & layout, and cleaned some stuff up. Hoping to post some more small stuff here in the coming year! ajf8729.com

Wrote another blog post about how I dealt with a misbehaving MSI file that I was trying to deploy with intune. johannesblog.com/2025/01/25/d... Thanks to @masterpackager.com for the assist

🚨 #OpenIntuneBaseline Windows v3.4 Released! New additions and some things to be aware of, such as the fact all policy names have been updated. Thanks for all the community input. You guys rock. Check out the release changelog below: github.com/SkipToTheEnd...

I wrote a short blog about how to trigger an on-demand user provisioning to entra using powershell and graph johannesblog.com/2025/01/21/p... big thanks to @ajf8729.com and @intune.best for their assistance

TIL that your trusted root/subCA cert profiles and your SCEP profiles need to be assigned to the same groups so certs actually get issued. Was banging my head against a wall because my root/sub were assigned to devices and the SCEP profile to users.

FYI for those doing certificate authentication with NPS, there's an enforcement coming in 2025-02 for strong mapping support.microsoft.com/en-us/topic/... #Intune

TIL Discord supports security keys/passkeys! That's awesome!

I know Canary channel is bleeding edge, but I wasn't expecting THIS much...

Make sure you click the correct "Resource Explorer" link if you're looking for #Intune Device Inventory data on a co-managed device! (hint, the top one is Intune, the lower is ConfigMgr) 😄

Hmm, maybe I should update my root CRL this week...