I often see User Administrator role given to helpdesk and sometimes support staff, like secretaries or librarians to help with password reset / user creation and attribute updates ⚠️ User Administrator has many paths to Global Admin or equivalent ⚠️ learn.microsoft.com/en-us/entra/id…

You should disable Seamless SSO in Microsoft Entra Connect as soon as possible! Here is how to do so safely > ourcloudnetwork.com/why-you-should… Seamless SSO enables single sign-in for Active Directory joined devices. It is now legacy and relies on Kerberos tickets being sent to Entra ID,

A policy to remove Windows apps... oofhours.com/2025/06/28/a-p…

👋 Bye bye Azure Portal, hello Unified Security Portal. Microsoft announced the deprecation of #Sentinel in the Ibiza portal. It's time to start planning techcommunity.microsoft.com/blog/microsoft…

Microsoft's guidance for tenant-to-tenant Intune migrations (like, for corporate M&A scenarios, with the end goal being tenant consolidation): techcommunity.microsoft.com/blog/healthcar…

What's New in PSADT v4.1 (RC1) - 2025-07-08: psappdeploytoolkit.com/docs/next/gett…

Want to learn more about MCPs, VSCode and more? Sign up for two full days of MCP sessions from the MCP Community aka.ms/mcpdevdays Burke Holland, James Montemagno, Kent C. Dodds ⚡,

👋 Check out this new Microsoft Entra blog post 👇 A fresh look for the Microsoft authentication background techcommunity.microsoft.com/t5/microsoft-e…

Heads up!!! Reset this PC and RemoteWipe failures: Microsoft finally confirms it. It looks like the reset and recovery failures we warned about are now official. After the August 2025 updates, a Local reset or a Remote Wipe from Intune could brick your device. But here’s the

The Haag™ In conclusion... AppLocker Inspector = a tool to help sysadmins get AppLocker right. Because “we deployed AppLocker” should mean more than “we checked a box.” 👇 👇 👇 👇 github.com/techspence/App…

Remove Default Microsoft Store Packages in Windows 11 25H2 We finally have a built-in Intune policy to strip out inbox Store apps during provisioning. No Dunning Kruger PowerShell scripts needed! But what really happens under the hood? Do the apps just stop provisioning, or

One of the top ask we have heard from customers moving to #Autopilot - we have now delivered Windows quality updates out of the box #CloudNative #MSIntune techcommunity.microsoft.com/blog/windows-i…

Application Control. The Pros and Cons and much more in this one by Anders Ahl 🙏 #Intune #WDAC

The 8 Hour Intune Sync Myth: What Really Happens When You Change a Policy Everyone believes Intune policies only sync every eight hours… what if I told you that isn’t true? The moment you change a policy, Intune contacts the Windows Notification Service to send a push that

🚀 New Conditional Access Baseline (v2025-10) is now live on GitHub! 👉 github.com/kennethvs/caba… It includes: ✅ JSON export of all CA policies 📄 PDF overview via Merill’s CA Documenter 🧰 Export tooling by Mikael Karlsson Based on my earlier Conditional Access Demystified

🚀 Windows 11 25H2 + Intune: New Settings Unlocked! 🛬 36 new Windows 11 25H2 settings have landed in Intune’s settings catalog! 🛡️ From expanded controls for security and privacy, to device management, there are many settings available to configure today, with many more to come

Created a #powershell module for bootstrapping a fresh #Intune tenant. IntuneHydrationKit: automatically pulls in OpenIntuneBaseline configs, compliance policies, dynamic groups, device filters, app protection policies, Conditional Access policies, Autopilot/enrollment profiles

If you missed this live event, the recording is available: youtube.com/watch?v=ztKT2w… #WPNinjasUS #WPNinjas #WorkplaceNinjasUS #WorkplaceNinjas #PowerShell #GitHubCopilot #VSCode

❓ Do you have remediation scripts with Invoke-WebRequest cmdlet ? ⚠️ They may not work as expected because of CVE-2025-54100 💡 Use this script to list remediation impacted scripts with systanddeploy.com/2025/12/list-a…

Introducing AwesomeIntune.com linkedin.com/pulse/introduc…