It was great to see so many of you in Baden this week for Workplace Ninja Summit and safe travels home for those travelling back today. I hope you enjoyed the conference as much as I did (even though the weather was a bit of a let down)
Somehow there has still been lots of Intune content this week so read on for more
Community Content
We start this week with a remediation for those of you with Lenovo devices. This will grab BIOS settings and store them in a Log Analytics workspace. Watch this space for what Damien Van Robaeys is going to do with this data!
https://www.systanddeploy.com/2025/09/collecting-lenovo-bios-settings-in-log.html
Learn how to use the Windows 365 alert functionality to be more proactive with your support in this post from Alex Durrant
Niall Brady and Paul Winstanley also look at using these alerts, both for Windows 365 and AVD
How healthy are your Windows 365 or Azure Virtual Desktop PC’s ?
Ola Ström has managed to grab a Windows 365 Link device. Learn about how it is to use here.
Next, Hailey Phillips looks at how to get started with Microsoft Graph using the SDK in its most basic form (the way I use it in most of my scripts)
https://www.allwayshype.com/allways-hype/msgraph-practical-guide
Thomas Marcussen has updated the excellent script to download all files from OneDrive for a user, check out the new version here
New and Improved: Download All OneDrive Files for a User with PowerShell – Updated Script
This post from Andy Jones looks at Windows Backup for Organisation, including how it compares to ESR and the requirements for it
We have a new version of the always popular Autopilot Branding script from Michael Niehaus with some useful fixes and additions
This post from Michael O’Brien looks at how Connected Cache can speed up your Autopilot deployments
Microsoft Connected Cache, Autopilot, and Windows 11 Rollouts
If you are using TAP, watch out for reboots as they could cause you problems as covered here by Mads Johansen
https://evil365.com/intune/TAP-Autopilot-Reboots/
Now hotpatch is here, you might find your users never turn their machines off and you’ll see a spike in support calls. To setup scheduled reboots, follow this post from Sergio Sant’Ana Junior
https://jornada365.cloud/intune-agende-reinicializacoes-automaticas-no-windows/
If you are just getting started with Windows 365, try this guide from Sucheta Gawade
On the subject of Windows 365, this post from Aresh Sarkari shows how to configure a Windows 365 apps provisioning policy using Graph. Keep an eye out for part two which is coming soon as well!
Windows 365 Cloud Apps – Provisioning Policy – PowerShell (Graph Rest API) – Part 1
Video Content
Onto the video content, starting with a useful and easy way to add security to your tenant, looking at the enterprise applications already there, what permissions they have and how to stop users just adding them from Jonathan Edwards
We now have the first episode of the second season of the podcast from Shady Khorshed. This one features Somesh Pathak discussing the Jump-In tool for macOS
Next, Chander Mani Pandey shows how to remove the logged in user as local admin using remediations
Learn how to get started with Windows 365 in this video from Vaishnav K
WDAC is a great way of blocking users from installing any apps (although I prefer applocker), but it is a pain to setup. Fortunately Steve Weiner has you covered in his latest video
Microsoft Content
Now onto the Microsoft content, starting with a deep dive into Autopilot Device Prep from Maggie Dakeva
That’s it for this week, have an amazing weekend!