Intune Community Digest

Unable to optimize Teams in Windows 365 on macOS

Introduction A colleague of mine got his hands on a new Windows 365 Cloud PC and had issues getting Teams optimized using his Apple Mac. This was weird…

Sat 31 Oct WindowsApple

Doctor DO – A Delivery Optimization Troubleshooting Solution

DoctorDO: where did that update actually come from? If you manage Windows updates and Win32 apps at any scale, someone has asked you “Is peering working?” The honest…

Fri 30 Oct ConfigMgrScripting & Graph

PowerShell Preview v7.7.0-rc.1 Release

Today, Microsoft released Release Candidate 1 of PowerShell Preview v7.7. In this small blog post, I will show you the updates and how to install it.

Fri 30 Oct Scripting & GraphNews

Windows 11 KB5127936 Update: 41 Fixes and Improvements for 25H2 and 26H2

Fri 30 Oct Windows

Minimizing Active Directory

Microsofts provisioning of users from Entra ID to Active Directory has been released in Preview and is supposed to help organizations move user and group administration to Entra…

Fri 30 Oct Entra & securityNews

Migrating Apple Enrollment Profiles to Enrollment Time Grouping Policies

Notes from the Field Microsoft is moving Apple Automated Device Enrollment (ADE) from the older Profiles experience to the newer Enrollment policies experience. The new policies support enrollment-time…

Fri 30 Oct Apple

Microsoft 365 DMARC: Audit Your Domain Before Enforcement

Audit Microsoft 365 email authentication with real DNS and Defender screenshots, task-specific permissions, an explained DMARC XML example and a read-only diagnostic kit.

Fri 30 Oct Entra & security

Weekly Newsletter – 24th of October 2026 to 30th of October 2026

Welcome to the 226th edition of the Windows 365 Community newsletter! This week, we bring you the latest Windows 365 news, free events, and expert tips & tricks…

Fri 30 Oct Windows

Intune New Elevation System Settings Policy in EPM to Enable Network Changes Without Admin Privileges

Configure User Confirmed EPM Elevation Settings Policy using Microsoft Intune #msintune #EPM ============= More Blog posts related to SCCM/Intune/Windows 11/...

Fri 30 Oct Intune

Intune Newsletter – 30th October 2026

Welcome back and to those at MMS, I hope it was great fun. Next week I’m off to Experts Live Switzerland, hopefully I’ll see some of you there.…

Fri 30 Oct Intune

Microsoft Entra Passkeys on iPhone: Configure, Test and Recover

Configure a scoped Microsoft Authenticator passkey pilot on iPhone, verify fresh sign-ins and Conditional Access, and rehearse recovery.

Fri 30 Oct Entra & securityApple

Microsoft disables public contributions to Entra docs

Microsoft Entra documentation now has public contributions disabled in its publishing configuration. See what changed and where to send documentation feedback.

Fri 30 Oct Entra & security

Lock the back door: Recovery Lock for macOS in Intune

You've done everything right. Users are standard, LAPS rotates the managed admin password, your EPM software handles elevation, and the compliance policy is green across the board. Then…

Fri 30 Oct Entra & securityApple

Microsoft Entra Agent ID: Building a Safer Lifecycle for AI Agent

Microsoft Entra Agent ID: Building a Safer Lifecycle for AI Agent Identities :root { --bg: #ffffff; --bg-alt: #f6f7f9; --text: #1c1e21; --text-muted: #5b6270; --border: #e1e4e8; --accent: #2563eb; --accent-soft: #eaf1ff;…

Thu 29 Oct Entra & security

Your guide to Intune at Microsoft Ignite 2026

If you manage and secure endpoints, you are already on the front line of your organization’s AI transformation. Trusted, cloud native endpoint management and protection across Windows, macOS,…

Thu 29 Oct IntuneNews

What’s new in Microsoft Intune – October

Most changes to a device happen without the admin watching. A user turns off BitLocker to troubleshoot something. Patch Tuesday arrives. An agent starts working on a Cloud…

Thu 29 Oct Intune

Intel vPro Fleet Services Part 2: Deploying the Agent with Intune

In Part 1, we onboarded the Fleet Services tenant, connected Entra ID for sign-in and RBAC, and made a decision about the passphrase. The portal is ready, but…

Thu 29 Oct Entra & securityIntune

Microsoft Intune Introduces Bulk eSIM Activation and Removal for Corporate-Owned Android Devices

Thu 29 Oct AppleIntune

A new workaround for authentication strength Conditional Access policy loops: Microsoft Authenticator Credential Registration service principal

Microsoft has added a new workaround for a specific Conditional Access loop that can stop users from registering a passkey in Microsoft Authenticator. The loop can happen when…

Thu 29 Oct Entra & securityIntune

Microsoft offers free clean-up for inactive Agent IDs

Enable Microsoft's free Entra Agent ID inactivity policy without premium licences. Notify owners, disable stale identities and exclude seasonal agents.

Thu 29 Oct Entra & securityIntune

AgentDome Review: AI Cost Analysis and Optimization

AgentDome in detail: AI cost attribution, budgets, model evaluations, automation and reporting, with 28 real screenshots and an Intune example.

Thu 29 Oct Scripting & GraphIntune

Purview 2027: Kvar skal du starte? Del 1 – Finn ut kva du faktisk har

Det er måndag morgon hos Fjordvik Gruppen AS. Dagleg leiar har eitt spørsmål til den IT-ansvarlege: «Har vi eigentleg kontroll på informasjonen vår?» Det er ikkje eit urimeleg…

Thu 29 Oct Entra & security

Taming Microsoft Authenticator's Passkey Prompts: Architecting Granular FIDO2 & Device Biometric Enrollment Control in Entra ID

Address uncontrolled Microsoft Authenticator passkey prompts and device biometric enrollment. Learn to architect granular FIDO2 and device-bound passkey policy enforcement in Entra ID for enterprise environments, balancing security…

Thu 29 Oct Entra & securityIntune

ConfigMgr 2603 Hotfix Rollup KB39169655

Microsoft has released a new hotfix rollup KB39169655 for Configuration Manager version 2603 to enhance system security and resolve several critical...

Wed 28 Oct Entra & securityConfigMgr

Patch My PC Publisher Preview Version 3.26.10014.0 Released

This release contains a variety of features, improvements, and fixes, as noted below. Improvements Fixes

Wed 28 Oct News

Is this a new request or a extension?

When an Access Package extension looks like a new access request, how can an approver tell the difference? I investigated a request in Microsoft Entra ID Governance and…

Wed 28 Oct Entra & security

Copilot Credits: Taking Control of AI Spend with Spending Policies

Learn how a Copilot Credits spending policy in the Microsoft 365 admin center caps AI spend, with limits, alerts, billing methods and a real pilot case. Continue reading…

Tue 27 Oct Intune

Windows 365 Cloud PC Input protection

Microsoft has introduced Windows 365 Cloud PC Input Protection in preview as part of the Remote Connection Experience settings. Windows 365 Input Protection is a security feature that…

Tue 27 Oct Entra & securityWindows

Force Upgrade to Windows 11 26H2 Manually [3-Ways]

In this guide, I will show you how to force upgrade to Windows 11 26H2

Tue 27 Oct Windows

KB5127648 Sonrası Wi-Fi Bağlantı Sorunu: BlockNtlmv1SSO ve Intune ile Çözümü

KB5127648 güvenlik güncellemesiyle NTLMv1 türevli SSO varsayılan olarak engellendi. MS-CHAPv2 kullanan Wi-Fi, 802.1X ve VPN bağlantılarındaki etkisi ve Intune Remediations / Win32 (.intunewin) ile yönetimi.

Tue 27 Oct Intune

5 Things I Always Review in a Microsoft Intune Environment

Intune environments evolve over time, but old configurations and exceptions often remain. Here are five areas I always review in a Microsoft Intune environment.

Tue 27 Oct Intune

STIG audit baseline in Intune: auditing what is actually on the device

Every security baseline in Intune has worked the same way. You pick a baseline, assign it, and Intune pushes settings to the device. The STIG audit baseline does…

Tue 27 Oct Entra & securityIntune

Certificate-Based Authentication ile Intune ve Conditional Access Entegrasyonu

Bir SCEP veya PKCS profiliyle cihazlara sertifika dağıttıktan sonra bu sertifikaların çoğu zaman tek bir amacı oluyor: Wi-Fi veya VPN tarafında 802.1X kimlik doğrulaması. Ama aynı sertifika, Microsoft…

Tue 27 Oct Entra & securityIntune

BitLocker Recovery Key Missing in Intune? Find It, Fix It and Catch the Keys That Lie

BitLocker recovery key missing in Intune or Entra ID? Find every device without a key, back it up, and catch the dead keys a Graph report still marks…

Tue 27 Oct Entra & securityIntune

Optimizations for passkey registration experience you might have missed

In my earlier post about the passkey onboarding experience, I discussed MC1440968. That update has now rolled out, and the registration wizard includes a useful improvement: end users…

Tue 27 Oct Entra & security

Microsoft 365 Compliance for SMBs: GDPR, Audit Logs, and a Strategy That Scales

What SMBs need to configure in Microsoft 365 for GDPR: audit log retention, retention policies, data subject requests and how to use Compliance Manager.

Tue 27 Oct Intune

Microsoft Defender for Endpoint: Beyond default telemetry with Custom Data Collection Rules

Microsoft Defender for Endpoint (MDE) is one of the most widely deployed endpoint detection and response platforms in enterprise environments. It provides security teams with extensive visibility into…

Mon 26 Oct Entra & security

Intune STIG Audit: What Happens After You Click Create

A security baseline normally tells Windows how it should be configured. The STIG Audit baseline asks a different question: how is this device configured right now? It compares…

Mon 26 Oct Intune

Getting started with AI agent runtime protection

This week is all about AI agent runtime protection in Defender for Endpoint. As more AI agents become available on Windows devices, they are also becoming more capable…

Mon 26 Oct Intune

From Helpdesk Tickets to Proactive IT: Automating Microsoft Teams Update Checks with Intune

Stop Repeating Teams Support Tickets: A Proactive Update-Health Check with Microsoft Intune :root { --bg: #ffffff; --bg-alt: #f6f7f9; --text: #1c1e21; --text-muted: #5b6270; --border: #e1e4e8; --accent: #2563eb; --accent-soft: #eaf1ff;…

Mon 26 Oct Intune

Creating AD CS Certificate Templates with PowerShell

Creating a certificate template usually starts with opening certtmpl.msc, duplicating an existing template and working through the tabs. Give it a name, select the cryptographic settings, configure the…

Mon 26 Oct Entra & securityScripting & Graph

Managing Windows 11 STIG Audits in Intune Security Baselines to Elevate Endpoint Security

Mon 26 Oct Entra & securityWindows

Windows settings backup and restore with Microsoft Intune

Introduzione Quando sostituiamo un dispositivo aziendale, reinstallare Windows e completare l’enrollment in Microsoft Intune è soltanto una parte del lavoro. The post Windows settings backup and restore with…

Mon 26 Oct Intune

Microsoft Intune Adds Unlimited Apple VPP App Licenses to Simplify App Deployment

Mon 26 Oct AppleIntune

Azure Automation Workflows für IT-Teams zugänglich machen, ohne dass jeder Zugriff aufs Runbook braucht

Azure Automation ist eines dieser Microsoft-Produkte, die technisch extrem stark sind und trotzdem in vielen mittelständischen Unternehmen kaum jemand außerhalb eines kleinen Kreises von Cloud-Admins wirklich nutzt. Der…

Mon 26 Oct Scripting & Graph

Entra License Usage: Finally Find Out Who’s Using the P1 and P2 You Pay For

Entra license usage report tested: how it counts P1 and P2 usage, guest users and the 50,000 figure, plus a PowerShell check against your sign-in logs.

Mon 26 Oct Entra & security

Microsoft Graph Is a Maze. GraphLens Gives You the Map

GraphLens is a free site that checks Microsoft Graph every night. It shows which endpoints accept which permissions, which Entra and Intune roles go with them, and exactly…

Mon 26 Oct Entra & securityScripting & Graph

Autopilot Device Association: Third-Party MDM Integration

Introduzione Il 21 ottobre 2026 è stata pubblicata una nuova pagina Microsoft Learn dedicata all’integrazione di Windows Autopilot Device Association The post Autopilot Device Association: Third-Party MDM Integration…

Fri 23 Oct Autopilot

Intune Newsletter – 23rd October 2026

What a week it has been for the IT world between a PHP CVE which hit most of the internet to a certificate secured by the number 4…

Fri 23 Oct Intune

Entra ID Protection now flags suspicious credential additions

Entra ID Protection can now flag suspicious authentication method additions. Learn why this user risk detection matters and what to check in your tenant.

Fri 23 Oct Entra & security

Managing Generative AI on Android Enterprise Devices with Microsoft Intune

During the Workplace Ninjas Summit in Baden last September, I attended a Microsoft session by Anya Novicheva about new and upcoming Android Enterprise management capabilities. One topic immediately…

Thu 22 Oct AppleIntune

Export Windows Feature Update Reports from Intune

In this guide, I will show you how to generate and export Windows feature update reports from Intune. These reports are...

Thu 22 Oct WindowsIntune

Intel vPro Fleet Services Part 1: Onboarding the Tenant and Connecting Entra ID

There is a good chance your fleet already has Intel vPro. Enterprise customers have been buying vPro hardware for well over a decade, mostly because it is the…

Thu 22 Oct Entra & security

Intune Asset Management: What Intune Tracks – And What It Doesn’t

Intune keeps an accurate inventory of every device it manages. It does not know what anything costs, when the warranty ends, or who may maintain the record. Here…

Thu 22 Oct Intune

Learn Intune and PowerShell automation: field notes

How I automate Intune with Microsoft Graph and PowerShell, plus every field note on this site grouped by topic: Graph, Autopilot, BitLocker, tenant baselines, and endpoint careers.

Thu 22 Oct AutopilotEntra & security

Defender Monthly News – October 2026

If you work with Microsoft Defender, you probably know the Microsoft Defender Monthly News on the Microsoft Tech Community. Every month it summarizes the product updates and new…

Thu 22 Oct Entra & security

Agent 365 MCP Governance: Prove the Block, Not the Badge

Test Agent 365 MCP governance with API Management: compare gateway and direct access, inspect tool-level controls and use six concrete acceptance tests.

Thu 22 Oct Scripting & Graph

EPM Rule Creator: From a file to an Intune elevation rule

Meet EPMRuleCreator, my tool for inspecting files and signing certificates, preparing elevation rules, and uploading them to Microsoft Intune.

Thu 22 Oct Intune

Require Managed Google Accounts on Android Enterprise Devices

Require a Managed Google Account for Android Enterprise Devices with Microsoft Intune :root { --bg: #ffffff; --bg-alt: #f6f7f9; --text: #1c1e21; --text-muted: #5b6270; --border: #e1e4e8; --accent: #2563eb; --accent-soft: #eaf1ff;…

Wed 21 Oct AppleIntune

Livestream Recording: Windows Autopilot Deep Dive with Steve and Dean

**Re-uploaded with full-screen visible!** Join Steve Weiner and Dean Ellerby as they go deep on Windows Autopilot

Wed 21 Oct VideosAutopilot

Intune LAPS: Stop Sharing One Local Admin Password Like the Office Biscuit Tin

Intune LAPS set up and tested on Windows 11 25H2: Entra ID backup, passphrases, automatic account management, rotation, audit logs and the gotchas.

Wed 21 Oct Entra & securityIntune