Another week has flown by, it definitely feels like there aren’t enough hours in the day at the moment! Luckily for you, the community always finds time to post so there is more this week than just a picture of me looking busy and stressed!

Community Content

We start this post with a very useful look at how to use Homebrew for macOS in a secure and controlled manner in this deep dive from Oktay Sari

https://allthingscloud.blog/auditing-homebrew-security-intune-mac-fleet/

I’m sure some of you are still rocking 32-bit M365 apps (usually add-on related). If you are ready to make the switch to 64-bit, try this guide from Peter Klapwijk

Change a Microsoft 365 Apps installation from 32-bit to 64-bit

If you are getting started with Windows 365 and confused by the many options available in a provisioning policy, Thomas Marcussen has run through all of the options for you here

Simplifying The Creation of Windows 365 Provisioning Policies (part I)

On the subject of Windows 365, Nicky De Westelinck has a full end-to-end getting started guide here

Windows 365 for Beginners: Deploying Your First Cloud PC with Microsoft Intune

There are very few reasons not to use Autopatch (and Hotpatch), we all hate dealing with Windows updates anyway. This post from Joey Verlinden shows how to implement it from end to end

Windows Autopatch: Implementation how-to

Are your frontline workers complaining about their user data not following between devices? See how user experience sync can fix that in this post from Paul Winstanley and Niall Brady

First looks at Frontline Shared UES

For those of you with Azure VMs enrolled into Arc, find out how to quickly enrol them into Intune here from Michael Meier

Intune join Azure Arc enabled Windows 11 machines

Next, Peter van der Woude looks at the new PowerShell script installer in Win32 apps and how you can use it in your deployments

Getting started with the PowerShell script installer for Win32 apps

This post from Nicklas Ahlberg looks at the new Settings Catalog option to remove Microsoft default apps and what the policy changes on the device itself

Windows 11: Remove Built in Apps

Nicklas also looks at how you can add an extra layer of protection to Windows Hello for Business with multi-factor unlock:

Windows Hello for Business: Multi-factor Unlock

Learn how to securely manage your macOS estate with Intune and Defender here from Niklas Tinner

https://www.oceanleaf.ch/secure-macos-intune-deployment-with-defender-and-global-secure-access/

I often recommend AVD for those apps which absolutely must have a domain join, but it can be tricky domain joining the session hosts. This guide from Alex Durrant will help you massively!

https://modernworkspacehub.com/speed-up-avd-hybrid-join/

Video Content

Now for the video content, starting with the next part of the GitHub for Intune admins series from Steve Weiner, this one looking at git commits and how to rollback errors

Steve also has a new podcast looking at AVD and Windows 365 with Thomas Poppelgaard

We have an AMA which I imagine many of you will be interested in, covering Secure Boot with Arden White, Kevin Sullivan, Scott Shell and Richard Powell