Windows

Intune – Remove preinstalled Windows Store apps

As IT administrator, you may want/need to remove preinstalled/default Windows Store apps (such as Solitaire, Feedback hub or Clipchamp). Until now, you had either to use script or deploy these applications from Intune in uninstall mode. Unfortunately, this does not block end-user to install again these applications (even if they eventually will be uninstalled again). […]

Intune – Remove preinstalled Windows Store apps Read More »

Exchange / AD – Heads up Exchange and Active Directory administrators, AD extension issue

Well, even if it has been generally available for months, seems Windows Server 2025 is in fact still not yet ready for production use. After multiple core services issues, from DHCP services to authentication with Windows Hello, we now have a new issue which is impacting another system, in this case Exchange server on-premises. As

Exchange / AD – Heads up Exchange and Active Directory administrators, AD extension issue Read More »

Windows – Windows 11 25H2 is now available

Windows 11 25H2 is now available from Intune, My Visual Studio (aka MSDN), SCCM Software Update/WSUS but apparently not yet through Windows Update.   You can learn about known issues from there Windows 11, version 25H2 known issues and notifications | Microsoft Learn As part of the improvements: Support for Wi-Fi 7 for enterprise connectivity

Windows – Windows 11 25H2 is now available Read More »

Windows / Intune – Phone Link has been blocked by your system administrator

Phone Link, previously known as Your Phone, is a Windows app that allows connecting Android or iOS phones to Windows computers. It enables access and manage various phone features directly from their PC, such as texts, calls, notifications, and photos. Well, recently, I faced the “This feature has been blocked by your system administrator” error

Windows / Intune – Phone Link has been blocked by your system administrator Read More »

Intune / Windows – Hotpatching now enabled by default for new Windows quality update policies

By now, you are probably aware about the hotpatching for Windows 11 and Windows Server (see Hotpatch updates | Microsoft Learn and Hotpatch for Windows Server | Microsoft Learn). As hotpatch has been available for Windows 11 clients for few months already, Microsoft has announced that it will now be enable by default for all

Intune / Windows – Hotpatching now enabled by default for new Windows quality update policies Read More »

Intune – Changes in supported OS architecture for Win32 apps

If you are using to manage your client devices fleet, you already know that you can package and deploy custom Windows applications (aka Win32 apps). When deploying this type of application, you have to define the supported Windows architecture (x86 or x64) and version. Well, good news as there has been few changes to configure

Intune – Changes in supported OS architecture for Win32 apps Read More »

Intune / Windows – Bad interaction between ThreatLocker and Windows Hotpatch

Well, another one bit the dust but this time is more related to a third party security product – ThreatLocker (Enterprise Cybersecurity Solutions | ThreatLocker) – wrongly blocking DLL’s patched with Hotpatch. If you have read my previous post (Intune / Windows ARM – Issue with May 2025 Patch Tuesday on ARM devices) about Hotpatch

Intune / Windows – Bad interaction between ThreatLocker and Windows Hotpatch Read More »

Intune / Windows ARM – Issue with May 2025 Patch Tuesday on ARM devices

As you may already know, Intune is offering a Hotpatch for Patch Tuesday to allow installing Windows Updates without having to restart devices (see Intune – Hotpatch is becoming available for client devices). Well, we (at the company I’m working for) found an issue with the May 2025 updates. After getting the May 2025 updates

Intune / Windows ARM – Issue with May 2025 Patch Tuesday on ARM devices Read More »

Windows – You can now use Windows Server 2025 in Pay As You Go

As you know, when installing Windows operating systems (client or server) you need a valid product key to enable to corresponding Windows Edition, also known as perpetual licensing. For Windows Server, the editions covered by such product key are either Standard or Datacenter. Well, that was true until Windows Server 2025 was released, as now

Windows – You can now use Windows Server 2025 in Pay As You Go Read More »

Intune – Enable Personal Data Encryption for added security

As you know, Windows devices with OneDrive client allows your end-users to redirect their personal folders (Documents, Desktop….) to OneDrive. This allows leveraging some security capabilities provided by SharePoint Online/OneDrive, such as versioning or ability to recover complete OneDrive space in case of corruption or encryption by malware. This also replace the ‘old school’ roaming

Intune – Enable Personal Data Encryption for added security Read More »