What a week it has been, you’ve probably noticed I sent this later than usual to give you a chance to clear your Inbox first!
I’m off to Ignite on Sunday, if you’re there, I’ll be between the Robopack and Microsoft Security booths, always great to say hello
Enjoy!
Community Content
- 📦 App management | Update Microsoft Paint (CVE-2026-83844) • Jan Mulder
What a world we’re living in, a CVE for paint! It will be calculator next. Learn how to patch it here from Jan - 📦 App management | Intune Remote Help for Windows and macOS: Attended and Unattended Sessions • Hubert Maslowski
With Remote Help now included in a lot of licenses, I see many companies test it to save on a license. Find out how to deploy it, configure RBAC and use it here - ⚙️ Device configuration | Maester Tests for CIS Benchmarks in Microsoft Intune • Joe Loveless
Maester v3 is including support for CIS testing with the new packs as tested here by Joe - ⚙️ Device configuration | It’s Not Just You: Your App Control Supplementals Aren’t Attaching (….and how to catch it with Intune) • Kevin Malinoski
A new series from Kevin here looking at some of those little things that you think you broke, but actually didn’t. Starting with everyone’s favourite, App Control - ⚙️ Device configuration | One big Intune policy or many small ones? • Abraham Anteskog
Always a tricky subject, do you go for lots of small policies, one massive one, or a bit of both? - 🚀 Device enrollment | Faster Hybrid Windows Autopilot with Microsoft Entra Kerberos • Aljaz Perovsek – Cloud Journey
For the 3 of you still brave enough to be using Hybrid Autopilot, see how Entra Kerberos can help (or better still, don’t use hybrid autopilot…) - 🚀 Device enrollment | Ubuntu, Entra ID, Intune & Defender • Julian Rasmussen
Considering issuing some Linux devices? This post from Julian shows how to build an ISO with all of the M365 bits you need already there - 🚀 Device enrollment | Autopilot Self-Deploying waited 30 minutes • Jeroen Burgerhout
Are you finding your self-deploying shared PCs are taking an unusually long time to provision? Find the fix here! - 🚀 Device enrollment | Now available: Next-generation Autopilot Branding • Michael Niehaus
A lot of people are already using the excellent Autopilot Branding script from Michael, but now it has had a massive update which you can learn all about here - 🚀 Device enrollment | Giving Autopilot a Proper Landing • Jeff Gilbert
Wouldn’t it be great if you could give your users an even better experience on first login, like the custom welcome screen when you enter your hotel room. Jeff has just the thing here with some clever use of Edge - 🚀 Device enrollment | Autopilot device preparation diagnostic • Aymen EL JAZIRI
A useful script to troubleshoot your Autopilot Device Prep deployments via Graph - ✅ Compliance | Conditional Access Filters With Custom Security Attributes: Target Apps, Not App Lists • Mark Oldham
You can now use filters and extended attributes in CA policies when targeting applications to make management something you do at the app level instead of the policy level - ✅ Compliance | 📺 Microsoft Just Changed How We Manage Conditional Access • Nick Ross
Nick looks at the new Conditional Access Policy plans too - ✅ Compliance | 📺 Quick overview of Conditional Access Policy Plans • John Savill’s Technical Training
With the release of Conditional Access policy plans, John gives a great overview of how they work here - 🔄 Device updates | Deploying the Lenovo USB3.0 LAN Driver for Docks With Intune • Philip Jorgensen
The Lenovo USB3.0 LAN drivers for docks won’t appear in commercial vantage. If you are using these, find out how to install via Intune here - 🔄 Device updates | Autopatch Gets Granular Approvals, and Your Old GPOs Are Officially Ghosted • Torbjorn Granheden
Autopatch now has more granular control over your update approvals, something I imagine a lot of you are looking for! - 📒 Tenant administration | Day 20: Capstone: the reference architecture • Dave Randall
Dave completes the 20 days of RBAC with a final overview of everything covered in one neat diagram - 🪟 Windows | Building your use case for Windows 365 for Agents • Jon Jarvis
Windows 365 agents feel like they aren’t as popular as people expected (or maybe that’s just me). If you want to give them a try but need to convince management, Jon has you covered here - 🪟 Windows | Locking the taskbar position and size • Peter van der Woude
Now users can move the taskbar themselves, of course we want to be able to lock it down! Learn how here - 🪟 Windows | The Token That Knew Nothing: Reading AD Groups on Entra-Joined PCs Without Locking Anyone Out • JJ Milner
Continuing the series on managing AD objects with Entra devices, this post covers how to read AD groups from a non-AD joined device - 🤖 Android | Android Enterprise • Michael Frank
This post from Michael runs through the end to end configuration for deploying Android Enterprise devices, from Google Play right through to end user setup - 🍎 Apple | Managing macOS updates with Microsoft Intune using DDM, update rings and Nudge • Kenneth van Surksum
A deep dive into macOS update management in this post from Kenneth - 🍎 Apple | Upgrading to macOS 27? Your Intune Security Policies Might Not Tell the Whole Story • Kenneth van Surksum
If you have noticed the privacy controls are now deprecated in the Intune settings catalog (on macOS), this deep dive from Kenneth is worth a read on how to protect your data
Video Content
- 📼 Video | 📺 One Week With the Surface Laptop Ultra: What I’d Change • Steve Weiner
After last weeks unboxing, Steve gives feedback on the Surface Laptop Ultra after a week of use
Microsoft Content
- 🔄 Device updates | Granular controls for multiple updates in Windows Autopatch • Mounica Battula
A lot of exciting updates for Autopatch to learn about here! - 🪟 Windows | Enhanced resilience with Windows settings backup and restore • Shilpa Narang
Learn all about the new features in Windows Backup and Restore here - Message Center | MC1547994: Plan for Change: Update your iOS/iPadOS Company Portal minimum version to v5.2608.0
That’s all for this week, have an amazing weekend!
- Want to get featured on Intune News? → Submit your content 😎