The school holidays are nearly at an end with I imagine many having one last break before September arrives (a special shoutout to those in education who have no doubt been extremely busy)
Plenty of exciting content this week, both informational and some exciting new scripts!
Community Content
For those licensed for Autopatch (which will be most), it is one of the first things I suggest in any new (or existing) tenant. Follow this guide from Shehan Perera to quickly get up and running including some gotchas to look out for when changing from a different patching solution
Getting Started with Windows Autopatch in 2025 (cheat sheet)
A new feature in Windows 365, you can now re-provision a machine which was removed if a license expired. Learn more in this post from Niall Brady and Paul Winstanley
Recovering a Windows 365 Cloud PC that was de-provisioned due to license expiration
This is one for those of you getting started with MDE, or if you’re finding alerts firing when they shouldn’t be, Albin Klinaku has you covered here
https://www.indefent.com/iocs-in-defender-for-endpoint/
Windows Updates during OOBE are on the way, but it appears controlling them will be limited to only Autopilot v1 and not device prep. Michael Niehaus looks at it further in this post
Get ready to manage updates in OOBE, but only with Autopilot v1?
If the naming options within Intune aren’t working for your organization, but you manage a lot of devices, this Power Automate renaming tool from Andy Jones will answer your prayers!
Tired of finding WP Wolf bloating your new devices? Try this script from Kevin Malinoski
By default, OneDrive provisions accounts when the user logs in, either via the app, or via the web. If you want them pre-provisioned in advance, Tobias Eriksson has two options here using PowerShell
Damien Van Robaeys has updated the Lenovo Bios Dashboard, this version will compare detected versions to the latest available so you can quickly check which need updating
https://www.systanddeploy.com/2025/08/lenovo-bios-versions-dashboard-with-log.html
If you are migrating (or considering migrating) from Workspace One to Intune, Jon Towles has a new three part series comparing the two, this one looking at enrollment, policies, compliance and third party integrations
You can now natively track your Windows 365 cloud PC usage and make sure your devices are being used and are correctly sized. Learn more here from Thomas Marcussen
Cloud PC Usage Insights: Now With 90-Day View and Unused Device Tracking
One thing everyone should have configured, LAPS, but there are many different ways to configure it with a lot of different settings available. Find out the recommended settings in this post from Daniel Bradley
If you’re hitting Webview2 errors when launching Teams after Autopilot completes, check out this post from Mads Johansen
https://evil365.com/intune/WebView2-Edge-Autopilot-issues/
Following on from last weeks Conditional Access guide, Ewelina Paczkowska continues here looking at naming conventions, break-glass accounts and other essentials
https://www.welkasworld.com/post/conditional-access-naming-conventions-personas-design-process
Configuring User Rights can often catch you out. Follow this guide from Torbjorn (Mr T-Bone) Granheden to make sure it all works correctly
If you are deploying user context apps and hitting issues with the IME Cache folder, check out this troubleshooting and fix from Gannon Novak
https://smbtothecloud.com/imecache-permissions-errors-with-user-context-win32-apps/
Now Edge has proper password management, learn how to manage it and make sure it is used securely and only by Edge and only with corporate accounts in this post from Dustin Gullett
Multi-admin approval has finally received some attention and can now be applied to Device actions (Wipe, Reset, Retire) as covered here by Daniel Bradley
Multi-Admin Approval Extends to Device Reset Options in Intune
Also covered by Jan Mulder here
Multi Admin Approval – Device delete, retire & wipe policies.
Progressive Web Apps (PWA) are going to be more and more popular, it’s basically all Outlook is these days anyway. Learn how to deploy them via Intune in this post from Brad Wyatt
Auto Deploy Progressive Web Applications (PWA) using Intune or PowerShell
Something I have come across, EPM is great except when it needs to interact with the logged in users profile at which point the different account it uses causes issues. Fortunately a fix is on the roadmap as covered here by Rudy Ooms
Endpoint Privilege Management: Virtual Elevation Acccount Support
Learn how to use an unattend.xml file to automate your Windows setup (including bulk provisioning Entra/Intune join) in this post from Johan Arwidmark
Back to Basics – Using an AutoUnattend.xml file to Automate Windows 11 Setup from Media
Video Content
Now for the video content, starting with a follow-up from last weeks video on enrolling Apple devices with the Apple Configurator app. This one covers how to add iPadOS devices from Dean Ellerby
Learn all about scope tags and how to use them in your environment here with Steve Weiner
Steve also runs through how to get your Win32 apps back from Intune here
Microsoft Content
Now for the Microsoft content, starting with a look at how to deploy Virtualization Based Security (VBS) for Hotpatch via Intune or PowerShell from Nikita Deshpande
If you are looking to get started with Windows AI, check out this skilling snack from Aria Hanson
That’s all for this week, have a great weekend!