Greetings from Dallas (although by the time you read this I’ll be hopefully nearly home). Was great to meet many of you at Workplace Ninjas US and now I’m looking forward to a few weeks at home to enjoy Christmas!

I’ll review over the holiday season and see if there is enough content for weekly,or if it’s worth missing the 27th.

Anyway, time to enjoy the content from this week

Community Content
Video Content
Microsoft Content

Community Content

We start this week with a guide on how to deploy a custom Windows 11 start menu, but still allow users to customize it after deployment from Jörgen Nilsson

Windows 11 initial Start Menu with Intune

Now you can deploy Windows 365 machines with AI enabled features, Aresh Sarkari looks at how to provision these machines using Graph and PowerShell

AI-Enabled Windows 365 Cloud PCs – Full Automation with PowerShell (Graph REST API – Part 1)

On the subject of Windows 365, Peter van der Woude takes a look at the new W365 Reserve licensing to replace your current loan devices strategy

Understanding Windows 365 Reserve

Damien Van Robaeys has made another excellent Log Analytics dashboard, this one to look at Lenovo BIOS versions across your estate

https://www.systanddeploy.com/2025/12/lenovo-bios-versions-dashboard-with-log.html

If you ever need to access LAN resources from a Windows 365 machine, there is a fix here from Michael Meier

Windows 365 RDP Ethernet Redirection

A very useful script from Jóhannes Geir Kristjánsson which digs into Graph to tell you exactly who is logging into your Intune devices

Who has been logging in?

With the inclusion of security copilot in your E5 licensing, I imagine this getting started guide from Michael Frank will be useful to many of you!

https://michaelsendpoint.com/security/security_copilot.html

Michael also looks at Windows Backup for Enterprise here

https://michaelsendpoint.com/windows/winbackup.html

If you are using Chrome in your environment, configuring SSO is essential, especially if requiring device compliance. Learn how in this post from Justin Verstijnen

Deploy Google Chrome Single Sign On with Intune

Thiago Beier has updated the script to automate Intune filters, you can find it here

Automated filter rule update in Intune – 2

Video Content

Now the this weeks video, starting with a look at Security Copilot from Jonathan Edwards

Here is the latest Windows AMA, one you are probably all very much interested in, covering Secure Boot certificate update from Arden White, Kevin Sullivan, Scott Shell and Richard Powell