Welcome back one and all, conference season is about to begin, I am trying to keep my list updated here, if you’re attending any, would be great to catch up with you. If I’ve missed any, let me know!
For any of you in education attending BETT next week, I will be at stand SF31 with goodies and a pac-man machine!
Now for the reason you are all here, this weeks newsletter:
Community Content
We start this week with more bad news for those not fully cloud yet. Following on from the end of MDT, SCCM Tech Preview has followed in its footsteps. Learn more here from Michael Niehaus
MFA, how it’s grown! If you are struggling to keep up with the many changes, new authentication methods and everything else, have a read of this post from Michael Mardahl
Passkeys and the Personal Phone Problem – An MFA Update for 2026
If some of your devices have not yet received the new secure boot certificate, this remediation from Mr T-Bone should be all you need
A second post this week, this one looking at the new Baseline Security mode available in your tenant and covers multiple M365 products.
I’m sure you’ve all found the odd device deciding it’s back at Redmond after deploying Windows the first time. There are some native options in Intune for managing the time zone which Peter Klapwijk looks at here
Configuring the time zone with Intune, what are our options?
Many of you are probably using AVD and W365 to allow access for employees and contractors on non corporate devices, but you really don’t want to be making massive exclusions on your CA policies for it. Jan Bakker runs through how to secure access to them here
Access Azure Virtual Desktop and Windows 365 Cloud PC from non-managed devices
Managing Windows updates can be a challenge, especially if you don’t know where it is looking for them. This deep dive from Ben Whitmore tries to track down the scan source and the different behaviours
Add another layer to your data protection with watermark protection in Edge as covered here by Peter van der Woude
Reinforcing data protection with watermark protection in Microsoft Edge
Jóhannes Geir Kristjánsson tests the new PowerShell script installer for Win32 apps here, initially testing with Foxit Editor
Installing Foxit PDF Editor With The New Script Installer Feature
A quick look at some very useful changes to Windows updates here from Mads Johansen
https://evil365.com/intune/Windows-Updates-Early2026/
AI has made it to your Windows 365 machines. To see what’s available, how it works and what you need to run it, have a read of this post from Dominiek Verham
Exploring AI features on Windows 11 Copilot+ PCs and Windows 365 AI-enabled Cloud PCs
Ever wanted to quickly find out which policy contains a certain setting? This new script from Nicholas Pilzner is just what you are looking for
https://www.mostlycompliantendpoint.com/blogs/intune-policy-search
If you find yourself in a situation like this one from Oktay Sari where a customer must have some users without MFA but with other restrictions in place, here is one possible solution for you
Win32 script install is now finally GA (it appeared, then disappeared and now has appeared again) and seems like a great solution for most apps. Kevin Malinoski looks at how to use it here
Intune Win32 App PowerShell Script Install Method – A First Look
Video Content
Now for this weeks video content, starting with the first part of a new series from Steve Weiner running through how to get started with GitHub for Intune admins
The latest Windows in the Cloud video is here where Christiaan Brinkhoff discusses windows updates and in particular the one thing everyone should have configured, hotpatch with Nevine Geissa
Next, Chander Mani Pandey demonstrates (and supplies) a script to use PowerShell to create custom detection scripts
Microsoft Content
Some exciting Microsoft news this week, Windows backup for organizations can now restore directly at first login. Learn more here from Miranda Leschke
That’s all for this week, have a fantastic weekend!