Good news, it’s Friday which means I’m free to send this newsletter before delving back into the murky depths of Graph. Fortunately it’s been a cooler week this week, but it looks like next week is going to be another hot one!

But we aren’t here to talk about the weather, that’s purely for small talk in England, you’re here for the incredible content from this week

Community Content

When dealing with Windows 365 machines, it used to be a case of redirect or don’t redirect local items. This was never ideal, especially when using it from a managed device to begin with. Fortunately you can now use context-based redirection to add requirements before redirecting. Learn more in this comprehensive post from Dominiek Verham

Using context-based redirections for Windows 365

Multi-admin approval (if turned on) now also impacts Microsoft Graph actions, although you can exclude Enterprise apps. This script and post from Sander Rozemuller digs into it further and can show you what the impact will be in your environment

https://rozemuller.com/avoid-automation-breaks-with-intune-multi-admin-approval/

If you want some control over your AI agents with MDE, check out this post from Jannik Reinhard

https://jannikreinhard.com/2026/06/26/defender-ai-agent-runtime-protection/

With Intune Suite now hitting a lot of tenants, if you are looking to try Remote Help, follow this guide from Nicky De Westelinck

Configuring Remote Help in Microsoft Intune: A Step-by-Step Guide

Nicky also looks at the new Android Enterprise features added in the 2606 Intune release here

What’s New for Android Enterprise in Microsoft Intune 2606: June 2026 Highlights

If you are using multi-admin approval, you have probably noticed you need to live in the Intune portal to see when you have approvals awaiting your consent. Mark Orr has built a solution here to alert you when there are actions awaiting your approval

https://medium.com/@markhunterorr/multi-admin-approval-maa-a-missing-feature-notifications-4b9b5220e2ea

Move your personally owned work profile Android devices to Android Management API in this guide from Peter van der Woude

Getting started with Android Enterprise personally owned devices with work profile

We now have a few useful community scripts, starting with a script to create USB sticks for bare-metal imaging from Anthon N

https://github.com/SuperDOS/Intune-USB-Creator

This script from Mert Özsoy creates remediation scripts to uninstall Win32 apps

https://github.com/mertozsoy/IntuneWin32AppUninstall

A very useful script (and descriptive post) from Alex Durrant to quickly rename and change the description on your Intune policies in bulk

Intune: Bulk Rename and Re-describe Every Profile in Minutes

If you are picking between Autopilot and Autopilot Device Prep, or just want to learn more about Autopilot in general, try this post from Lewis Barry

https://conditionalaccess.uk/blog/should-i-use-autopilot-device-preparation/

On the subject of Autopilot, for those wanting to safely force updates during ESP, try this script from Somesh Pathak

Forcing the Windows Updates During Autopilot Pre-Provisioning (ESP Technician Phase)

Learn all about win32 apps and intunewin files in this post from Gannon Novak

Win32 App Deep Dive – What’s Inside an intunewin File and How it Gets Into Intune?

Next, we have the third part of the EPM series from Mattias Melkersen Kalvåg and Simon Skotheimsvik, this one looking at how to create your file rules

EPM Part 3: Writing Intune Endpoint Privilege Management rules for the real world: File hash, certificate, and when each one is the wrong choice

Video Content

Now for this weeks video content and we start with some tips on how to get your customers/employers to uplift licenses for Intune licenses from Jonathan Edwards