Welcome back everyone! You will notice a theme in this weeks community posts, Intune Suite is finally hitting E5 (and some bits in E3) so there is a lot of information out there covering the different functionality now available to many of you.
Community Content
Before we delve into the world of Intune suite, Brady Widener has an excellent guide covering app packaging for your macOS devices here
https://www.edtechirl.com/p/app-packaging-101-on-macos
Now we can start with the Intune suite posts and first up is Jörgen Nilsson covering Endpoint Privilege Management (EPM)
Florian Salzmann also looks at EPM and how it compares to some of the competitors here
https://scloud.work/intune-endpoint-privilege-management-vs-the-alternatives/
Mattias Melkersen and Simon Skotheimsvik have a whole series covering EPM with part 1 available here
Another useful tool, especially with unattended access now included (not so great for iOS users though) is Remote Help, covered in-depth here by Gerry Hampson
http://gerryhampsoncm.blogspot.com/2026/06/you-have-intune-remote-help-already-you.html
Nicklas Ahlberg also looks at how to use Remote Help from within the tenant
My favourite part of the suite, Advanced Analytics. This set of reports gives you the ability to really improve the user experience and be proactive fixing issues, your users will love you! Jannik Reinhard looks at what it can do and how it compares to other options here
Sander Rozemuller looks at some of the key reports to watch for when using Endpoint Analytics here
https://rozemuller.com/microsoft-intune-advance-analytics-more-than-endpoint-analytics/
Panu Saukko digs into Device Query and Multi-Device query here, also included with Advanced Analytics for even granular data
This post from Jeroen Burgerhout looks at the suite as a whole and the value it offers for both Intune and W365
Joery Van den Bosch also looks at everything you now get in both your E3 and E5 licenses
https://intunestuff.com/2026/06/19/microsoft-intune-suite-m365e5-e3/
Not Intune Suite, but another useful product in your license which many don’t use is Microsoft Defender. This post from Lewis Barry looks at why it should be your AV of choice
https://conditionalaccess.uk/blog/microsoft-defender-is-good-enough/
If you are using App Control policies and want to take your security to the next level, you can sign the policies themselves to stop anyone tampering with them. Learn how here with Niels Kok
Next, Roman Padrun confirms what many MVPs have been telling you for years, why you shouldn’t be using Security Baselines
https://www.cloudcook.ch/intune-security-baselines-why-your-tenant-is-probably-still-living-in-2023/
If you now have access to device query, Damien Van Robaeys has some useful KQL queries here to look for old BIOS versions across the estate
https://www.systanddeploy.com/2026/06/monitor-intune-devices-with-old-bios.html
If you are using an Entra account with your multi-app kiosk, this custom OMA-URI policy will stop any notifications about the account from appearing. Peter van der Woude runs through configuring it here
Turning off account notifications in Start and multi-app kiosk mode
Find out what Intune release 2605 brings for Android Enterprise in this post from Nicky De Westelinck
What’s New for Android Enterprise in Microsoft Intune 2605: May 2026 Highlights
I am a big fan of Windows 365 reserve, it’s like an insurance policy for your users productivity. If you want to know more about how it works and what it costs, try this post from Dieter Kempeneers
Windows 365 Reserve Explained: Setup, Licensing and Limitations
T-Bone has updated the excellent drive mapping script so it doesn’t hit your domain controllers quite as heavily, check it out here
Video Content
Now for this weeks video content and we start with one which should be the first thing you do on a new tenant, block personal devices. Learn how here with Jonathan Edwards
The latest Intune for MSPs meetup is now live and looks at macOS management with Andy Rostad, Lior Bela and Ugur Koc
Dean Ellerby looks at what is soon to be included in your E3 and E5 subscription here
Learn how to protect company data on unmanaged devices using app protection in this video from Steve Weiner
Microsoft Content
Onto the Microsoft content starting with information about the new Windows Ready Print functionality from Ellie Sekine
Learn more about the security behind enterprise app management in this post from Joe Lurie
The new Vulnerability Remediation agent is in public preview and you can find out more about it here from the Intune Support Team
We could certainly have used this post at Experts Live UK last week (if you were there, you’ll know), how to setup Platform SSO for your macOS devices from Naveen Akkugari and Michael Griswold
That’s all for this week, have a great weekend!