Oh hey, we're [finally] killing RC4 everywhere officially. www.microsoft.com/en-us/window...

📰🤯 #Microsoft just announced the biggest #Intune license update since 2023 (release of the first Intune Suite Feature "Remote help"). aka.ms/M365-PIBlog aka.ms/M365Governme... aka.ms/IntuneM365Blog

📰 Reminder that TLS inspection is unsupported for many of the endpoints required for #Intune services. In this case its the Store endpoints, that are required for things like license validation. github.com/MicrosoftDoc...

#MSIgnite listening to BRK1700 right now. So the „cloud restore“ will use WinRE to download and reinstall Windows. 👌🏻 This is exactly what I wanted for years! Early Christmas if you ask me ❤️

"Microsoft Ignite 2025 Book of News" is out and _man_ there is a lot to unpack. Go read about it! Keywords to look for: * Security Copilot * Windows Resiliency Initiative * Maintenance Window and many more! news.microsoft.com/ignite-2025-...

#PowerShell #Windows I just found one of the weirdest thing. Remember reagentc? If you /disable while using a x86 PowerShell the WinRE.wim will be put into a different folder than when you do it from x64. This is wild. github.com/MHimken/WinR...

#Intune network requirements page got a huge update! There is now a consolidated list for the network endpoints. Rejoice! However, it's still not fully complete 😭 But updating _that_ list should be much easier than the JSON 😊. learn.microsoft.com/intune/intun...

#Entra will have "soft delete" for _cloud_ security groups. I wonder if this would also restore access to things like Teams private channels and SharePoint. deltapulse.app/message/MC11... I wish I had this feature a couple moons ago...💀

📰🆕: The #INR script v1.4 to test #Intune and related network services just got its first big update in a bit. Here's what changed in the latest version. - ID-to-Service list is now available. - Test MCC - Test NuGet - ... Go grab the new version here: github.com/MHimken/Intu...

PSA: If you're running WSUS you will want to look at MC1178653 in your Message Center. The only workaround to CVE-2025-59287 is denying access to the service. If you haven't patched your Server 2025 yet (and as that update apparently was pulled) this is the replacement fix.

Hey #Intune peeps, @skiptotheendpoint.co.uk released a new version of his awesome #OpenIntuneBaseline #OIB today for 25H2! stte.me/oib25h2

💡New docs on #Intune "remote device actions". Apparently it was updated this month and while it looks much cleaner now, I think its missing crucial information (like what each action actually does?) I liked the old table more 🙈. learn.microsoft.com/intune/intun... web.archive.org/web/20250328...

Using #WindowsAutopatch in #Intune? You should go here and Migrate to the Win32 App. This will create an application for you "Windows Autopatch Client Broker" that you can use to deploy the AP service instead of the script. intune.microsoft.com#view/Microso... learn.microsoft.com/en-us/window...

TIL: Is it #Office ADMX x86 or x64 right for me? They're identical except for a minor version number string in the Lync16.adml files. Just use whichever download you prefer.

Ok, Citrix really? First of all, Intune has been able to do this for years. So, you've figured that out, and you've even got a working template? Oh, wait a minute - your new ADMX doesn't work too, because you forgot to include EXPLAIN strings in 2 spots. github.com/MHimken/FixM...

Reminder! - "The option to move back to Compatibility mode will remain until September 2025. After this date, the StrongCertificateBindingEnforcement registry key will no longer be supported" - support.microsoft.com/en-us/topic/... #ADCS #InfoSec

🖨️💡Have you switched your #Windows printer drivers to v4 or IPP with PSAs yet? Don't know I'm talking about? It's time to read up on this apparently forgotten topic. Out of the five customers I had today, none of them knew about the change. To busy w/ W11. learn.microsoft.com/en-us/window...

#INR aka #Intune Network Requirements script just got an update and a new home. Update your bookmarks! Also, new ASAs added: * Microsoft Defender for Endpoint * Visual Studio github.com/MHimken/Intu... #MVPBuzz

#Intune "Windows Quality Update management policies" just dropped on the roadmap. This will allow you to control non-security and OOB updates more granular. www.microsoft.com/en-us/micros...

You can now specify whether an #ADDS group is an #EntraID group or on-premises. This is called a 'change of SOA'. However, be aware that, since @ajf8729.com and I have only just tried this out, the documentation is incomplete for now. Let me explain...🧵 learn.microsoft.com/en-us/entra/...

#WindowsUpdate: Thinking of moving to #Intune and/or #Autopatch? Used GPOs or any RMM tool (yes CM too) to adjust the update settings? This cleanup script is for you. I recently received some requests for this again, so I'll share it once more. github.com/MHimken/tool... #MVPBuzz

'Windows 11 cloud-native migration with Microsoft Intune'. There's a great article from @onpremcloudguy.com with lots of useful information in the links. Afterwards, you can read my blog to find out about other relevant technologies 😉 techcommunity.microsoft.com/blog/windows...

Unattended access with Remote Help is on its way! Bear in mind that this is the GA date, so there may be a (private) preview available to join. I still highly recommend checking out the MMCCP to participate in early previews. techcommunity.microsoft.com/blog/windows... #MVPBuzz

Internet-facing file servers, using SMB over QUIC, and secured using Entra authentication! This turned out to be really easy to get up and running. ajf.one/entrafs #Entra #EntraID

Since I don't do a lot of macOS administration I completely missed this (thanks Andreas!). LAPS for macOS is here :) learn.microsoft.com/en-us/intune... #MVPBuzz

⚠️⚠️The preview update for #Windows 24H2 allows you to pin apps to the start menu ONCE (aka boolean). No mention of how yet though 🙈Finally, no more playing around with start2.bin Also: Quick Machine Recovery and many more things - go read now! support.microsoft.com/en-us/topic/... #MVPbuzz

This post does not have enough attention yet. 2.29.1 seems to finally solve the authentication issues that existed in Microsoft.Graph.Authentication for a good while now. Run your Update-Module now!

In case you're using a Windows 11 IoT version and it isn't a Microsoft Teams Room device, here's a reminder that (since may actually) Autopilot is _not_ supported. learn.microsoft.com/en-us/autopi... I can only assume that's because it - by default - skips the OOBE.

Part 8053 of eleventy billion on our path to killing NTLM: way way way way way better auditing. support.microsoft.com/en-us/topic/...

TIL: Using #Windows #24H2 with activated VBS (which is enabled by default on Windows 11) #WHfB PIN expiration and history are _not supported_. Time to change change some policies... learn.microsoft.com/en-us/window...

See? Not called Windows12 ¯\_(ツ)_/¯ techcommunity.microsoft.com/blog/Windows...

Oh wow, I just set up another PoC for GSA and checked the recommended ports for domain controllers. That list was extended by a _lot_. This will be hard to argue with some security folks. Mind you the 4 ports before were enough to get a TGT. learn.microsoft.com/en-us/entra/...

@jgkps and I will be speaking at not just one, but two sessions at #WPNinjasUK25! I'm looking forward to seeing Scotland and meeting more people to discuss passwordless and cloud-native devices with! wpninjas.uk Bring your questions if you've signed up!

Almost all customers requested this when we did the PoC. „We can’t protect the client otherwise!“. Right, but you should worry about the identity first and you don’t even enforce MFA let alone phishing resistant auth…

#Windows #Backup for organizations is finally showing up on public radar! This will allow you to save and restore ... things from W10 to W11 or W11 to W11 (think wipe). Accessing the MMCCP also just became easier - I recommend joining 😉 techcommunity.microsoft.com/blog/Windows...

Finally getting a chance to use my mug from @intune.best from @mmsmoa.bsky.social. Sure makes my morning coffee thst much better 😁 Thank you, Martin!

Nice Tech Community post on migrating BitLocker from #ConfigMgr to #Intune - techcommunity.microsoft.com/blog/CoreInf...

My take on remediating #BlackLotus via #Intune Remediations & #ConfigMgr CIs. It sure was fun to code up and test as much as I was able to. Please let me know if you have any feedback or run into any issues if you try the scripts out! ajf.one/blacklotus

Reminder that starting TOMORROW (15th of May) your current Microsoft Teams Android devices will start moving to Intune Android Open Source Project device management. Here's a list of dates and devices that will be impacted. techcommunity.microsoft.com/blog/microso...

Ausnahmsweise gibt es heute einen Beitrag auf Deutsch: OneDrive und MSA (also persönliche Accounts) sind momentan hier und auf anderen Plattformen in aller Munde. Zu Unrecht. Viele machen aus zwei bereits lange bekannten Einstellungen einen Elefanten. manima.de/2025/05/oned...

#MMS MOA HAS STARTED! Looking forward to meeting a lot of people! Here is a couple of em: @jgkps.bsky.social @conditionalaccess.uk @skotheimsvik.no

Time to leave for #MMS into Iceland to pick up the great @jgkps.bsky.social! If you’re there I’ll see you soon! For everyone else: I’ll be out of commission for a week 👌

#Intune #Azure #DevOps In case you hadn't noticed: There are still ongoing changes to all azureedge.net endpoints. If you filter outgoing traffic, please make sure you adjust your network accordingly. manima.de/2025/04/upco...

#CIS Benchmark v4 for #Intune and #Windows11 has been published as of two days ago! I recommend you check out the changes as soon as you get access to it. This has been in the work for months! #cybersecurity

And that’s a wrap! #MEMsummit 2025 was great! Thanks for everyone attending my sessions, I hope they brought value to your life 😊 Let’s hope we’ll meet again next year. Wish me luck on getting home because my train has been cancelled. #DeutscheBahn didn’t deliver!

A packed room for @intune.best He is talking about Intune Network Requirements are a team effort #MEMSummit

How the Entra Join's Octagon will help you move to cloud native by @intune.best #MEMSummit

I’m on my way to Paris to the #MEMSummit 2025! As a speaker, an attendee, MVP and father of two. I’m proud and a bit sad and nervous at the same time. A big conference, an unknown city but _many_ people that I’m eager to meet and chat with! See you in Paris! Find me in T1 in Frankfurt 😉

#Intune #INR ⚠️ Update for network endpoints incoming! all azureedge.net related endpoints will be REPLACED in EXACTLY THREE WEEKS! Prepare your network. Reminder: *.manage.microsoft.com, which is the new domain, does NOT SUPPORT TLS Inspection! learn.microsoft.com/en-us/intune...

New blog post! I'm going to stray a bit from #Intune and talk about considerations for #BitLocker startup PINs and pre-boot authentication in general. Once again: Cloud-native helps with security, but probably not in the way you think. manima.de/2025/04/to-b...