Welcome to the first of this new look Intune newsletter in its new home at admin.news
Lots of exciting content this week and hopefully you like the new setup here, not only is it the first, but it was also largely put together whilst travelling from Switzerland so apologies for anything I have missed.
Community Content
- 📦 App management | App Control for Business avec Intune > reprendre la main sur les applications autorisées • Jonathan Fievet
This end to end deployment guide for App Control for business is worth a read (in French) - ⚙️ Device configuration | Rotate Intune Wallpaper and Lock Screen Images with the Seasons using Azure Automation • Alex Durrant
I think by now we have all mastered setting static wallpapers on Intune no matter what licensing you have, but what if you need to rotate them? Alex has a clever solution here using Azure automation - 🚀 Device enrollment | Windows Autopilot device association Companion App for the QR Code • Michael Meier
There are some great tools to import Device Prep apps into your tenant via QR code, but what about industries where everything has to be internal? Learn how to deploy it yourself using a PowerApp here - 🚀 Device enrollment | Mapped Drives Without Group Policy: Turning an Intune Profile into a Data Channel • JJ Milner
If you are migrating to Intune and looking to replicate your drive mappings, this post and accompanying script from Jon are going to help you! - 🚀 Device enrollment | Jamf to Intune: Beyond the Migration Script • Lisa Berenberg
Are you currently managing devices with JAMF and looking to switch to Intune? This post and script from Lisa will help you on the path - 🛡️ Device security | Stop Handing Out Local Admin for an IP Address Change • Florian Salzmann and Jannik Reinhard
I have always had to use third party executables linked to EPM for those field users who need to change IP address. Fortunately that functionality is now native to EPM! - ✅ Compliance | Microsoft Entra Conditional Access Policy Plans: What Problem Do They Actually Solve? • Kenneth van Surksum
If you are unsure about conditional access policy plans in your environment and want to learn more about them, this post from Kenneth is well worth reading - ✅ Compliance | How to configure Protected Downloads in Microsoft Edge • Simon Hartmann Eriksen
If you are managing BYOD with Windows and Edge, blocking downloads was always a struggle. There is now functionality available to manage it as covered here by Simon - ✅ Compliance | Conditional Access Policy Plans – A First Look: Dub or Flop? • Sebastian Flæng Markdanner
Another look at Conditional Access Policy plans, this time from Sebastian with his thoughts on if they are worth implementing - 🔄 Device updates | Why Does Every IT Inventory Find Outdated Software? • Niclas Andersson
There has been a surge in CVEs with everyone using AI to find holes in software and I don’t see it getting better. This is why it’s critical you monitor your software estate as covered here by Niclas - 🔄 Device updates | Finally we can Ignore Windows Update Group Policies • Jorgen Nilsson
Unless you are a completely Entra only greenfield estate, this is a setting you all probably want to configure. Tell your devices to ignore any Windows Update groups policies, those pesky ones which you used to have to bodge with registry keys. Thanks Jorgen for finding this! - 🔄 Device updates | How Windows Autopatch Tattooed My Edge Settings • Sascha Stumpler
Who knew tattooing would still be an issue in 2026? This time the culprit is Autopatch with Edge settings and that annoying MDMWinsOverGPO setting - 📒 Tenant administration | Day 16: Just-in-time access • Dave Randall
Dave continues the RBAC series, this time looking at how to keep security tighter with just in time access rather than permanent - 📒 Tenant administration | Customer Case • David McWee
For those of you on E7 licenses, learn about co-ordinating, managing and securing your agents - 📒 Tenant administration | Day 17: Multi Admin Approval • Dave Randall
Dave’s deep dive into RBAC continues with a look at multi-admin approval - 🪟 Windows | Still using ConfigMgr? Read up on version 2609. • Michael Niehaus
For those of you still running SCCM, learn about everything added in the 2609 release here (warning, nothing good) - 🪟 Windows | Drive Mapping That Heals Itself: The Engine Behind the Data Channel • JJ Milner
Following on from last week, this post includes a script to comprehensively manage drive mappings on your Entra only devices - 🪟 Windows | Configuring Windows Ready Print driver ranking • Peter van der Woude
Printer installation on Windows is always changing, learn about how to configure Ready Print driver ranking in this post - 🤖 Android | What’s New for Android Enterprise in Microsoft Intune 2610: October 2026 Highlights • Nicky De Westelinck
For those of you managing Android devices, learn what has been added in the 2610 Intune release here - 🩺 Troubleshooting | Doctor DO – A Delivery Optimization Troubleshooting Solution • Maurice Daly
Delivery optimization is great, configuring it and checking it’s working, not so much. Fortunately Maurice has created yet another excellent tool to check everything is in place and let you monitor it’s success - ☁️ AVD & W365 | Unable to optimize Teams in Windows 365 on macOS • ncbrady
If some of your users are having issues getting Teams optimization working with Windows 365 on macOS, it could be their connection method, find out more here… - ☁️ AVD & W365 | AVD connection paths, part 5: the join type decides your sign-in firewall rules • Christoph Vollmann
- ☁️ AVD & W365 | The case of the failing W365 Flex SignIns • Ralph Eckhard
This post from Ralph looks at how to fix Windows 365 sign-in dropouts when using a VPN - ☁️ AVD & W365 | AVD connection paths, part 6: reading the logs without being fooled • Christoph Vollmann
Managing AVD? This in-depth post from Christoph digs into logs to review connection speed and issues
Video Content
- 📼 Video | 📺 Surface Laptop Ultra: Is Nvidia RTX Spark the Windows on Arm Moment? • Steve Weiner
Not strictly Intune related, but if you are still considering Windows ARM devices (or your execs are), Steve looks at the Surface Laptop Ultra to see if it’s enough to swing away from x64
Microsoft Content
- 🪟 Windows | Windows news you can use: October 2026 • Chris Morrissey
Always worth a read, the latest Windows news you can use for October - ☁️ AVD & W365 | Windows 365 “Enable local admin” Is Now GA: What Changes for Admins? • Vigneshwaran Velayudham
For those missing the dev boxes and needing to manage developer devices, you can now give W365 users local admin on their cloud machines - ☁️ AVD & W365 | What’s new in Windows 365: October 2026 recap • Sylvia Liu
For all of the latest updates in Windows 365, make sure to read this post from Sylvia
That’s all for this week, have an amazing weekend!
- Want to get featured on Intune News? → Submit your content 😎