At #MMSMOA I kept seeing folks using client IDs and secrets in their #GitHub Actions workflows for #MSGraph. I'm not an authentication expert, but I know enough to be paranoid. There's a better way: OIDC federated credentials. Think of it like a system-managed identity, but for GitHub Actions.

It would be cool to be able to manage VS Code settings in #intune like you can Group Policy. #modern

Thanks Google

Your browser is the new attack surface. Every tab and every “trusted” extension is a potential entry point. In our latest webinar, we uncover how browser chaos happens and how to stop it. Watch the replay ➡️ https://bit.ly/4hgSzAW #BrowserSecurity #Intune #AdvancedInsights #PatchMyPC

I was an intern in high school doing XP lab upgrades with Ghost floppies. Got my first real job during Windows 7. Got my first CM job around Windows 10 1511. I RIP Windows 10.

Ever wonder why settings are available in the legacy Group Policy, but aren't in the #Intune settings catalog? I wrote a couple of scripts to help gather that data, looping through ADMX files, and then finding corresponding Intune settings (if available). joeloveless.com/2025/10/what...

#MSIntune for #ZeroTrust security guidance learn.microsoft.com/en-us/intune...

Ummm....what? How does that happen? #intune

@jay.bsky.team @danabra.mov seems like @atproto.com is crumbling.

Goodbye Windows 10.

Exploring #microsoft #intune filters and passing the 50-mile mark on the MN Hiking Club. What do these have to do with each other? Nothing really. I'm not sure I've talked about Intune filters outside of work. Maybe I should on my next hiking trip with the kids? joeloveless.com/2025/10/expl...

Remember when we had forums? That was as perfect of social media as you could get. As long as we have these platforms that have so many users, moderation will never be possible that works for everyone.

Took Bo out on a hike today for his 8th birthday. He's been out of the hikes for a bit with a torn all. We actually saw the bison at Minneopa.

From reading, it seems the cleanup rule just hides from the UI and nothing else. Today I learned. #intune

#Intune device cleanup rules. When I manually delete a device, I see the Intune Management Extension get uninstalled pretty quickly, allowing GP settings to then take place (hybrid). Anyone know what happens when the Cleanup Rule processes? Does that also remove the Intune Mgmt Extension? #microsoft

Great stuff here. I love the simplicity of Markdown and not having to worry about me screwing up the formatting in Word. Or Word doing that for me.

Why do I have decision paralysis on everything? Looking for good used laptops for my kids (tenth gen or higher business class), preferred less than 500 total for 2. Yet here I am debating all the models and looking at reddit reviews for HP, Lenovo, Dell. Yet my 2018 laptop is just fine for me.

Did a little camping trip this weekend with my daughter. We hit 4 state parks for the hiking club and passed the 50 mile mark. Lake Maria Mille Lacs (camped here) Crow Wing Father Hennepin

Every Apple event

I wonder when Microsoft will release their next future of work podcast?

New episode of Diary of a SysAdmin with @campbell.scot drops Monday! 🎤 We discussed his journey from helpdesk to cybersecurity, writing a book, LinkedIn Learning, and his iconic beard! 🧔 You don't want to miss this episode! RSS Feed 👉 diaryofasysadmin.com

Use Signal justingarrison.com/blog/2021-01...

Anyone ever hear of recommended settings for config refresh in large environments? Any recommendations? #intune

Really different post. Ordered a couple of the #homeassistant voice boxes to help my wife out with her #dexcom issues. Being Type1 #diabetic seems awful. Even more awful when there are issues. Automated the LED lights, buttons, and to ask what her blood sugar is. joeloveless.com/2025/09/maki...

One day I'll actually maintain tomatoes and not plant so many. #gardening

New Diary Of A Sysadmin podcast episode drop. 🎤 @rorymon.com talks App-V, community, and insights he's learned on his podcast (5 Bytes Podcast) Really enjoyed learning about his IT journey! Go check it out on all podcast platforms and YouTube Spotify: open.spotify.com/episode/0dXI...

Happy Labor Day to everyone. May we all collaborate in the office before being replaced by AI that can't collaborate.

Time to make some salsa. #gardening

Ever needed to know how many users are enrolled in Windows Hello for Business on a device? Here's an #intune detection script to do just that. joeloveless.com/2025/08/find... #windowshelloforbusiness #intune

Starting a personal blog on a domain you control is a power move in 2025

We need everyone back in the office because we want the serendipitous magic that only happens when you let humans get creative together and also we're replacing all of you with an AI machine that can only do things that it's seen done before

@allwayshype.com Question...Running VSCode, logged in as standard user, need to run scripts under a different user context, but not necessarily elevate (just for AD rights etc)....what's your workflow? RunAs and open a terminal? Ideally I'd like it all integrated in VSCode, not sure it's possible.

Just a great episode. Introduced No Dunks to my son on our ride home from ju jitsui. A little disappointed when he found out its mainly a basketball podcast and not a movie review podcast.

Doing away with AI based images on my site. Blogging is hard enough. Coming up with images are even harder. Decided to make this somewhat basic and have different images with line colors.

I might try this next time I rebuild my #configuration #intune lab. Have you tried this @mattzaske.com

Are you still using Hybrid Entra ID joins just to keep drive mappings to on-prem? It might be time to rethink that with Intune and Cloud Kerberos trust, you can: Check out my blog below to configure this in Intune 👇 intunestuff.com/2025/08/08/c... #IntuneStuff

Ever wonder what the state of your devices look like for a Windows Hello for Business rollout? How many user accounts are on devices, what sort of biometrics are available? Here's a blog post with some helpful #Intune detection scripts to gather that data. joeloveless.com/2025/08/gath...

@ennnbeee.bsky.social Nick, how are you handling assignments and any exceptions for CIS policies in Intune? Do you do exceptions per group if needed or just in the main profiles? Do you apply users vs. devices?

Who says we can't have nice things?

My son got his first stripe in jui jitsui this week. He's been going since February and for the most part doesn't complain too much about going and always leaves happier. We signed him up to improve his mental health and its paying off. Proud of him.

This. So much easier and much more consistent. Also don't have to remember commands.

#marvel #fantasticfour

www.techrepublic.com/article/news... Sometimes it's best to keep your thoughts to yourself.

Jordan 11 Jordan 7 Jordan 1

This one goes out to all those that are hybrid joined. A post about finding #grouppolicy settings by Category and migrating those policies to #Intune. #intune #microsoft #activedirectory #grouppolicy #powershell joeloveless.com/2025/07/sear...

I've started waking up early just for this. It's amazing.

Dearest @swiftonsecurity.com, from our conversation last year over on X about managing endpoint policies in the enterprise. Beware, novel ahead. potentengineer.com/2025/07/02/m... #sysadmin #itpro #configmgr #intune #mdm #grouppolicy

Saw Superman today. Movie kicked ass. I hadn't seen much Superman since Christopher Reeve, and hadn't liked any of the other DC movies compared to Marvel. This was 10/10 for me.

Today I wrote a post about Getting Started with Microsoft Graph. I look into building a delegated app, authenticating using different methods, and building a script using different methods. #intune #microsoft #powershell #graphapi joeloveless.com/2025/07/gett...