If you started patching Macs, iPhones and iPads in Intune in the last year or so, you’re probably already using Apple’s declarative device management (DDM) update policies in favor of the old MDM-based software update policies. Apple has deprecated those and Microsoft has said Intune will soon end support for them, but if you’ve moved…
Autopatch picks your Edge channel, and that’s about it. Here’s how to control when Edge checks for updates, how users are told to restart, and when that restart actually happens. One thing Intune’s native Autopatch groups and policies still lack is real control over the Microsoft Edge update deadline and the notification experience your users…
Intune Suite Features Started Activating in Tenants This Week — Remote Help, Enterprise App Management, and EPM. Is It Time to Rethink Parts of Your Stack? Below we take a look at these new capabilities that are activating in your tenant and how to start piloting them now. If you run Intune day-to-day, you’ve probably…
Zero Trust essential configuration + real demo of the script approval flow In the aftermath of the Stryker incident earlier this year, enabling Intune’s Multi-Admin Approval feature (MAA) has become a non-negotiable Zero Trust control. If you’re not familiar with what happened, threat actors gained access to Intune and were able to execute mass wipe…
If you’ve been following along, you know I spend a lot of time thinking about shared and kiosk-style devices — especially the kind frontline workers and shift teams rely on every day. Managed Home Screen (MHS) on Android Enterprise has been a game-changer for locking those experiences down while still giving users seamless Microsoft Entra…
Hey everyone – I hope you had a great May the Fourth (if you’re into that sort of thing — may the force be with you). While a lot of us were celebrating Star Wars Day, Microsoft quietly dropped something that’s going to make daily life better for every Intune admin out there: the new…
If you’ve been following along this month, you already know the story: we’ve spent the entire month of April diving deep into Assigned Access—the Windows 11 technology that powers reliable, locked-down kiosks for public-facing, frontline, and general-use devices. From the very first kickoff post (where we looked at why the old Intune Kiosk Templates don’t…
That’s right—Assigned Access April is taking a quick breather this week. We’ve packed the month with deep dives into cloud-native Intune management for both internal and public-facing kiosks, and we’re building toward a strong grand finale before the month ends. Before we wrap up the series, I wanted to share something special that happened this…
Welcome back to Assigned Access April! If you’re just joining us, we’re spending the entire month of April geeking out over everything Assigned Access on Windows 11. Haven’t caught up yet? Start here with the earlier posts in the series: Today we’re tackling one of the most critical pieces of a production kiosk: the CSP…
If you’ve followed the blog, you know I’ve spent a lot of time working with kiosk-style deployments on Windows devices. This month we’re going all-in on the technology that has become the proper way to lock down Windows 11 devices in public and shared environments. We’re calling it Assigned Access April — an entire month…
It’s been about six months since Windows 11 version 25H2 dropped as a feature enablement package update on top of 24H2 & now is the time to adopt the newest release through Intune. Hey folks, I’ve been running 25H2 in testing since mid-2025, and honestly? It feels like the stability and control bump Windows 11…
Hey folks, yep—that’s right. Autopilot Device Preparation. Or as the community lovingly calls it, Autopilot V2. The thing you definitely have fully configured in your tenant… right? 😅 If you’re like most Intune admins I talk to (including myself a couple years back), you’ve been rocking classic Autopilot V1 for ages because, let’s be honest,…
You didn’t misread the title—that’s right. After what felt like months of back-and-forth (published in the changelog, then yanked, then back again?), we finally have native PowerShell script install support for Win32 apps in Microsoft Intune. If you’ve been using Intune for any length of time, you know this has been one of the most…
Hey folks, if you’ve ever banged your head against the wall trying to get Assigned Access (aka Kiosk mode) working smoothly on Windows 11 via Intune, you’re not alone. Microsoft’s documentation is… let’s call it “sparse” when it comes to the unique differences from Windows 10. The current Intune Kiosk templates? They were built for…
I’ve been glued to the (virtual) screen for Ignite this week, and while the Agentic AI + Windows 11 compatibility news and deeper Security Copilot integration in M365 E5 are super cool, the session that actually made me sit up straight was “The future of managing updates on Windows.” People, Windows Autopatch in 2026 is…
The modern workspace approach for detecting & remediating HP Wolf Security Antivirus through Microsoft Intune application packaging. This week we’re diving into HP Wolf Security antivirus, which comes preinstalled on all HP systems. If you’ve been following along, this is very similar to what we did in our previous blog posts on automating McAfee removal.…
