By now, you are probably aware about the hotpatching for Windows 11 and Windows Server (see Hotpatch updates | Microsoft Learn and Hotpatch for Windows Server | Microsoft Learn). As hotpatch has been available for Windows 11 clients for few months already, Microsoft has announced that it will now be enable by default for all
If you are using to manage your client devices fleet, you already know that you can package and deploy custom Windows applications (aka Win32 apps). When deploying this type of application, you have to define the supported Windows architecture (x86 or x64) and version. Well, good news as there has been few changes to configure
Intune – Changes in supported OS architecture for Win32 apps Read More »
Well, another one bit the dust but this time is more related to a third party security product – ThreatLocker (Enterprise Cybersecurity Solutions | ThreatLocker) – wrongly blocking DLL’s patched with Hotpatch. If you have read my previous post (Intune / Windows ARM – Issue with May 2025 Patch Tuesday on ARM devices) about Hotpatch
Intune / Windows – Bad interaction between ThreatLocker and Windows Hotpatch Read More »
As you may already know, Intune is offering a Hotpatch for Patch Tuesday to allow installing Windows Updates without having to restart devices (see Intune – Hotpatch is becoming available for client devices). Well, we (at the company I’m working for) found an issue with the May 2025 updates. After getting the May 2025 updates
Intune / Windows ARM – Issue with May 2025 Patch Tuesday on ARM devices Read More »
As you know, when installing Windows operating systems (client or server) you need a valid product key to enable to corresponding Windows Edition, also known as perpetual licensing. For Windows Server, the editions covered by such product key are either Standard or Datacenter. Well, that was true until Windows Server 2025 was released, as now
Windows – You can now use Windows Server 2025 in Pay As You Go Read More »
As you know, Windows devices with OneDrive client allows your end-users to redirect their personal folders (Documents, Desktop….) to OneDrive. This allows leveraging some security capabilities provided by SharePoint Online/OneDrive, such as versioning or ability to recover complete OneDrive space in case of corruption or encryption by malware. This also replace the ‘old school’ roaming
Intune – Enable Personal Data Encryption for added security Read More »
The wait is over, the latest release of Windows 11 is now available for download and deployment. With this release, this also marks the end of support for Windows 10. You still have few months anyway as the official end of support for Windows 10 is October 14th, 2025 after this date your Windows 10
Windows – Windows 11 24 H2 is now available Read More »
As you know, with Intune you can control when Windows Updates are being deployed using Update Rings profile. Well, starting October 2024, Windows 11 22H2 or later will start getting automatically any quality updates (aka Patch Tuesday updates) during the Out Of the Box Experience during the enrollment process. This means starting October, the enrollment
If you manage Windows/macOS devices fleet you already know that it is recommended to enable disk encryption on these devices (either through GPO or Intune) with recovery information saved in Entra ID. Then you also already know that administrators (global administrator, cloud device administrator, helpdesk administrator, Intune administrator or security administrator or reader) can read
Intune – End-user self-service BitLocker recovery key Read More »
As you know, we running workloads in the cloud cost management is an important part of your governance. In Azure, you have multiple ways to manage your spending (running) cost; one of them is setting up a spending limit at your subscription level (such as with developer subscription [aka Visual Studio subscription]). Well, if you
Azure – Windows 11 23H2 virtual machine requires a subscription with no spending limit Read More »
