With the upcoming February Patch Tuesday that may leave some orgs unprepared with strong mapping requirements for certs, I've posted some notes. timbeer.com/strong-mapped-… #Intune #pki #ndes #strongmapping

Thanks this week to Uriah Patton, Gary Blok [GARYTOWN.COM], Maurice Daly [MVP], Joost Gelijsteen | MVP, Steve Weiner | MVP, Andreas Stenhall, Aresh Sarkari, Tim Beer, Per Larsen #MSFT #MSIntune #MSSecurity, Jörgen Nilsson, Peter Klapwijk | MVP, Somesh Pathak, Jeroen Burgerhout ☁️ | MVP | MCT, Prajwal Desai, Peter van der Woude, Damien Van Robaeys [MVP], Shehan Perera | MVP & Thomas Marcussen - MVP 🇩🇰!

I've posted the #Intune windows 24H2 baseline as individual device configuration settings per category. This may make it easier for some to roll out and test with as it's not one giant baseline but split up into same categories the baseline uses. timbeer.com/intune-24h2-ba…

WOO! The updated #Windows #LAPS settings including automatic account management and the use of passphrases are in the #Intune In Development page! Can't wait to say goodbye to that .\Administrator argument!

VIDEO: Step-by-step configuration guide for configuring #Microsoft #Entra ID Conditional Access for Always On #VPN. #EntraID #identity #msintune #aovpn youtu.be/D1UF-bUsIOo

🚀 New week, new updates! This edition covers Windows 365 Link, Intune security baselines, Autopilot automation, Windows servicing updates, and more. 📖 Read here: danielengberg.com/newsletter-feb… #Msintune #intune #Windows365 #PowerShell #Autopilot

I've posted the #Intune #MSDefender baseline as individual configuration settings per category. This may make it easier for some to roll out and test with as includes a lot more restrictions. Also a Excel sheet with the main differences is there too. timbeer.com/defender-for-e…

Windows Policy Management is Evolving Intune’s traditional approach relied on scheduled sync, devices checked in, applied policies, and reported back. But enforcement only happened when they synced, leaving gaps in compliance. With Declared Configuration, Windows devices don’t

Exactly my thoughts, amazing and scary.

Discover, prioritize, and remediate vulnerabilities coming very soon with #Microsoft security Copilot agents The agents will then prioritize in #Intune for remediation techcommunity.microsoft.com/blog/microsoft…

With new vulnerabilities continually surfacing, keeping pace with threats is increasingly challenging. Introducing the Vulnerability Remediation Agent in Intune. It removes friction in identifying and remediating endpoint vulnerabilities, giving IT visibility into risks and a

Check out the roadmap for Azure Arc and Azure Update Manager, to close some of the gaps with #ConfigMgr and #MSIntune Patch My PC learn.microsoft.com/en-us/azure/az…

2 of the best on all things Purview

Just published my first blog on defender-sensei.com! A practical take on aligning NIST CSF 2.0, DORA, NIS2 & more with Microsoft Sentinel & Defender. It’s a try-out — all feedback welcome. DM me with tips, tricks, or ideas! defendersensei.com/posts/Navigati… #CyberSecurity

A great post, very useful.

Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) with Intune techcommunity.microsoft.com/blog/coreinfra…

Microsoft Store apps failing with 0x87D30017 during Autopilot Device Preparation? Everything was fine... until the device was set to Lebanon during the AP-DP enrollment. The result: no Company Portal, Package Not Found, and a broken AP-DP enrollment. We used Fiddler and traced

Thanks so much Rudy, another invaluable post. Now I just need to try and find Microsoft's standpoint on if any other countries are affected, which as your post shows may be shrouded in vagaries in the MS docs.

Mihai Simion Chapeau to Vout 😎

SwiftOnSecurity Eventvwr.msc: I’ve seen things you people wouldn’t believe … Attack scripts that fire off the shoulder of msiexec I’ve watched cscript.exe glitter in the dark near the RDP gateway All those events will be lost, like tears in rain. Time to right click clear log.