Intune Newsletter – 15th November 2025

The Christmas adverts have started early here and I can feel the excitement building (especially for the holidays).  Whilst I wait for the Coca Cola truck to appear on TV, here is this weeks Intune news…


Community Content

We start this week with a very useful script from Damien Van Robaeys to alert you when those all important App reg secrets and certificates are due to expiry.  Better still, it uses a managed identity so you don’t have to worry about it expiring too.

https://www.systanddeploy.com/2024/11/be-notified-by-mail-of-azure.html


Next, Rudy Ooms deep dives into Device Health Attestation and an exciting addition to 24H2 with a scheduled task to check the health

Mastering Device Compliance: The Game-Changing Tpm-PreAttestationHealthCheck in Windows 24H2


Machines not communicating with WUfB could find themselves running an untested version of Windows if they find themselves unmanaged.  Identify these machines with this KQL query from Eswar Koneti

Identifying devices managed by Intune but not reporting to WUfB using KQL


If, like me, you’re a Firefox user, learn how to configure it to support device based Conditional Access in this post from Peter van der Woude

Configuring Mozilla Firefox for usage with device-based Conditional Access


Did you know you can use MDE on your unmanaged mobile devices?  Find out more here with Jan Mulder

Defender for Endpoint with MAM enrollment


If you want to give your users more self-service ability with Windows 365 provisioning, but don’t have an ITSM, check out this post from Ola Ström to guide you through using Access packages

Let’s improve onboarding for Windows 365!


You may have noticed some of your devices have been blocked from 24H2 upgrade by a Safeguard hold.  If this applies to you, Trevor Jones has been digging into it more here

Investigating Safeguard Hold 54762729 for Windows 11 24H2


We also have part 6 of the excellent getting started series from Steve Weiner, this one covers application deployment and management

https://www.getrubix.com/blog/getting-started-with-intune-part-6-the-apps

And part 7 covering everything update related

https://www.getrubix.com/blog/getting-started-with-intune-part-7-update-rings-bandwidth-savings-and-the-road-to-windows-11

Steve has had a busy week, we also have part 8, wrapping everything up and looking at how to manage this new, modern environment

https://www.getrubix.com/blog/getting-started-with-intune-part-8-your-new-management-world


Next, Shehan Perera has an excellent guide covering Conditional Access, no matter what stage you are at in your cloud journey

The 3 Stages of CA Policy Maturity – Lessons from the Field


For those of you still managing drive mappings, this post from Maxime Guillemin looks at the different ways to deploy them to your Intune managed devices

Intune Magic: Automate Network Drive Names


Video Content

It’s been a busy week from the video content creators this week, starting with a look at the difference between Cloud Attach, Tenant Attach and Co-Manage for those of you managing devices with SCCM and Intune from Manish Bangia


Next, Chander Mani Pandey covers how to expedite your M365 app updates with Intune policies


This video from Dean Ellerby covers how to use Robopack to deploy and manage your Intune applications


The latest podcast from Shady Khorshed is here discussing Windows MAM with Joery Van den Bosch


A VM is an excellent way to test your Autopilot and Intune builds for early testing, especially as you can just remove them if you hit any real issues.  This video from Steve Weiner covers registering a VM with Autopilot (remember to eject any ISOs for Bitlocker)

Steve also demonstrates how to use Intune to deploy a scheduled task

Steve also has his latest podcast dicussing Ignite with Ugur Koc


Microsoft News

This weeks Microsoft content comes from the Intune Support team with a workaround for an issue with Windows Security Health status for Windows MAM

https://techcommunity.microsoft.com/blog/intunecustomersuccess/known-issue-windows-security-center-health-status-for-windows-mam-may-require-up/4297120


That’s it for this week, have a great weekend!

2 thoughts on “Intune Newsletter – 15th November 2025”

Leave a Comment