I’m back home after an exciting trip to Copenhagen to visit the office and then Experts Live to launch our latest product! Thanks to the organizers and speakers for such a great event.
It’s also been a busy week for Intune content so lets get started…
Community Content
We start this week with a couple of exciting announcements from Lenovo. The first is from Philip Jorgensen and looks at how you can use PowerShell with Lenovo Commercial Vantage with the SU helper tool
https://blog.lenovocdrt.com/su-helper-use-cases-in-a-modern-world
If you’re using MDT, there is a fix here for detecting the enclosure type from Thad Lawson
https://blog.lenovocdrt.com/mdt-no-longer-detects-enclosure-correctly
If you are using macOS and hitting the authentication loop with phishing resistant authentication, check out this post from Rahul Jindal
https://rahuljindalmyit.blogspot.com/2025/03/passkeys-for-macos-and-addressing.html
Next, Roy Klooster has a very useful PowerShell script for configuring language packs
https://rksolutions.nl/language-packs-i-just-told-my-computer-to-figure-it-out-apparently-it-did/
For those of you with an Asus NUC, learn how to configure the BIOS using PowerShell here with Damien Van Robaeys
https://www.systanddeploy.com/2025/03/managing-bios-settings-on-asus-nuc.html
Automate your user onboarding in this post from Dustin Gullett
Reduce your Windows 365 costs by scheduling resizes during maintenance windows when the machines are not in use. You can even use Graph to do it! Learn more here from Aresh Sarkari
Learn how to use the new Device Query functionality for multiple devices here from Torbjorn (Mr T-Bone) Granheden
Peter van der Woude also runs through the functionality here
As does Michael Meier, it’s a popular addition!
Intune Device Query now allows queries for multiple devices as part of Advanced Analytics
If your macOS PUA policies keep changing the settings, this post from Oktay Sari is well worth reading
Next, Gannon Novak has a script to quickly add all 24H2 baselines into your tenant
https://smbtothecloud.com/import-all-24h2-security-baseline-policies-with-a-script/
WHfB can be tricky to troubleshoot, fortunately Eswar Koneti has a guide here
Troubleshooting Windows Hello for Business PIN Reset Issues – Something went wrong
Peter Rausch has an excellent guide for phased deployments of all aspects of Intune in large environments
https://www.peterrausch.nl/2025/03/how-to-do-phased-deployments-in-cloud.html
If you want to see the key points from the tech takeoff (more in the Microsoft section below), Niklas Tinner has you covered here
https://www.oceanleaf.ch/technical-takeoff-2025/
To reduce the permanent nature of “God mode” in Entra, check out this post from Sebastian F. Markdanner
https://www.chanceofsecurity.com/post/restrict-elevated-access-microsoft-entra-logic-app
Video Content
Onto the video content with the first of a two-part series from Craig Camacho looking at handling your Windows update rings
Next, Steve Weiner runs through migrating from your physical machines to Windows 365 and how to correctly size them.
Niklas Tinner and Florian Salzmann cover their highlights of Tech Takeoff here
Microsoft Content
We have a lof of Microsoft content this week including the Tech Takeoff. If you haven’t seen these videos, make sure you watch them (too many to include here individually)
A new series from Dan Andersen covering managing your frontline workers with Intune
Catarina Rodrigues also looks at frontline workers, in this case the critical nurses on their nurses station machines
Doug Coombs looks at the new Windows 365 disaster recovery functionality here (in preview)
The all-important What’s New in Intune 2502, always worth reading!!
https://learn.microsoft.com/en-us/mem/intune-service/fundamentals/whats-new
Learn how connected cache can help optimize your bandwidth and speed up deployments from Andy Rivas
Some excellent news for smaller businesses, you can now add an E5 Security to Business Premium! Learn more here from Oke Bamgbose
That’s all for this week, have a great weekend!!