The Internet goes on high alert after discovery of 8 compromised TLS certs arstechnica.com/security/202…

Preparing for end of support for CNAME auto-discovery in Windows MDM-only enrollment - Starting January 15, 2027 -techcommunity.microsoft.com/… #MSIntune #ConfigMgr #Windows

Here's how to automate Windows activations with PowerShell - techcommunity.microsoft.com/… #Windows #MSIntune #Microsoft

How to leave breadcrumbs for yourself when using PowerShell interactively ... As in you typed in/pasted something long/complex, how do you find it again in your persistent PowerShell history (so survives reboots)? If you can't remember the cmdlet, parameter text, etc, leave your own breadcrumb in a # comment on the command - to find it again, hit ctrl r then type the breadcrumb text to find that command I use ## instead of # as part of my coding "style" - there is no difference in functionality/commentness

Don't see it in the portal? You can do it via Graph ;) $body = @{ "defaultUserRolePermissions"= @{ "allowedToCreateAgentIdentityBlueprints"= $false } } Invoke-MgGraphRequest -Method PATCH -Uri "/beta/policies/authorizationPolicy/authorizationPolicy" -Body $body

DO Troubleshooter 1.3.1 is live 🚀 One script to check your Delivery Optimization, P2P and Connected Cache health. Get it: aka.ms/do-fix #Windows #SysAdmin #DeliveryOptimization

Microsoft dropped the patches. Now comes the fun part. 🙃 What needs attention? What can wait? We're breaking it all down at October's #PatchTuesday Support Group, plus industry news and live Q&A. Join us ➡️ bit.ly/4hGkrPh #MSIntune #ITCommunity #PatchMyPC

Change is coming, and you should turn this setting off in Microsoft Entra > ourcloudnetwork.com/microsof… Soon, Microsoft are giving us all a reason to need to buy Agent 365, by making Agent Identity Blueprints (which serve as the foundation of Agent properties and policies) able to be created by standard Microsoft 365 users. While we encourage users to self-service create their own Agents, Blueprints, which should be governed and controlled by those defining and managing your AI governance, should not be self-service created. #Entra #Microsoft #Agents

Here’s a night view of beautiful San Diego. If you’re attending #MMSMidway in just over 2 weeks, you’re in for a treat. If you’re having FOMO, then get your tickets now and join us there! Register ASAP: mmsmoa.com/mms2026midway October 25-28 #MMSMOA #SanDiego #ITpros #MSIntune

ICYMI: Stop copying PowerShell module folders to file shares. Build a private feed in Azure Artifacts with pipeline publishing, GitVersion stamping, Key Vault signing, and JEA. adamtheautomator.com/deploy-…

Microsoft Intune Settings Catalog updated to support Windows 11, version 26H2 #MSIntune #Windows11 techcommunity.microsoft.com/…

#Windows11 26H2 is here, check out the #ITAdmin guide 🚀 Uses small-sized fast-deployment Enablement Package for upgrade techcommunity.microsoft.com/…

Get a sneak peek of what’s rolling out in #MSIntune this month, the ability to Automatically or Manually #Approve #Windows #Updates techcommunity.microsoft.com/…

Windows 11 #26H2 went GA today and @RecastSoftware #OSDCloud 26.9.29.1 is #Community ready Join me and @HarmVeenstra next week at our #OSD #WPNinjaS webinar to learn more #Intune #Autopilot recastsoftware.com/resources…

microsoft.com/en-us/download… Download Administrative Templates (.admx) for Windows 11 2026 Update (26H2) from Official Microsoft Download Center

That 60-minute wait for new Required Win32 apps is gone!! In my previous blog, I explained how Microsoft already fixed it for Windows Autopilot. Now Microsoft is taking the next step. New Win32 app changes can also wake the IME sooner instead of waiting for the normal polling interval (60 minutes). So, of course, I tested it. I assigned a new Required app and watched the device. A couple of minutes later, the IME kicked off the Win32App Workload, and this is where it gets interesting. So what actually changed, how does the push reach the IME, and what happens after intent 2 arrives? Read the full blog:patchmypc.com/blog/faster-wi… #Intune #MSIntune #Windows11 @IntuneSuppTeam .... the Intune Eng team is on a rolll :)

#MSIntune Service Release 2609 is here! Check out the What’s New docs learn.microsoft.com/en-us/in…

Defender for Identity sensor v3 on ADFS, ADCS, and Entra Connect sync is now in preview! 🥳 Make sure you have at least one, reachable DC running the v3 sensor as well ;)

I'm excited to speak at MMS 2026 Midway Edition! If you're coming, don't forget to sign up for my session mmsmidway.sched.com/event/f8… @sched

IntuneManagement 3.11.0 released - a small update ahead of the 4.0 beta. Sign in with the system browser, where passkeys and FIDO2 keys work. Fixed: GitHub links not opening, silent Bulk Compare. github.com/Micke-K/IntuneMan…