Endpoint Configuration Manager

Intune – Hotpatch is becoming available for client devices

You may have been aware of a major overhaul for Windows Update to allow deploying Windows Updates without having to restart (see Hotpatch for Windows Server | Microsoft Learn). This ‘hotpatch’ capability has been introduced first for Windows Server (2022, 2025) running in Azure and then started to be extended to Windows Server running on-premises […]

Intune – Hotpatch is becoming available for client devices Read More »

Intune – Enable Personal Data Encryption for added security

As you know, Windows devices with OneDrive client allows your end-users to redirect their personal folders (Documents, Desktop….) to OneDrive. This allows leveraging some security capabilities provided by SharePoint Online/OneDrive, such as versioning or ability to recover complete OneDrive space in case of corruption or encryption by malware. This also replace the ‘old school’ roaming

Intune – Enable Personal Data Encryption for added security Read More »

Intune – Get more detailed inventory from your Windows devices

As you know, with Intune you are able to gather some device hardware information but they were limited. Well, good news as now you can gather more hardware details from your devices. The new profile type is supported on the following Windows version: Windows 11, version 23H2 (22631.2506 or later) with KB5031455 Windows 11, version

Intune – Get more detailed inventory from your Windows devices Read More »

Intune – Creation of new Administrative Template profiles will no longer be possible

AS you know, Windows devices configuration with Intune is done by using Configuration Profile. For Windows, 2 profile types are available: Settings Catalog Templates Well, you need to prepare for the retirement of the Templates type starting the 2412 service release, scheduled for December. Starting this release, you will not be able to create new

Intune – Creation of new Administrative Template profiles will no longer be possible Read More »

Intune – New look for the Company Portal on Windows

If you are using Intune to manage your devices and/or applications, you know that the Company Portal application is playing a big part in deploying applications and registering devices. Well, the Company Portal application for Windows is getting refreshed to provide a better user experience. This new design is supposed to more intuitive by providing

Intune – New look for the Company Portal on Windows Read More »

Intune – Starting October 2024, Windows enrollment will automatically deploy quality updates

As you know, with Intune you can control when Windows Updates are being deployed using Update Rings profile. Well, starting October 2024, Windows 11 22H2 or later will start getting automatically any quality updates (aka Patch Tuesday updates) during the Out Of the Box Experience during the enrollment process. This means starting October, the enrollment

Intune – Starting October 2024, Windows enrollment will automatically deploy quality updates Read More »

Intune – You can now pause, revoke or delete your Cloud PKI

As you are probably aware, Microsoft has introduced a new Intune service – Cloud PKI – to deliver cloud based certification authority services (see https://blog.hametbenoit.info/2024/03/01/intune-new-cloud-pki-feature/). Well, this service has been updated to allow you to pause, delete or revoke your Cloud PKI. NOTE if you have create the Cloud PKI during the preview or before

Intune – You can now pause, revoke or delete your Cloud PKI Read More »

Intune – No more hardware hash requirement for Autopilot (preview)

Yes, you have been reading right, no more hardware hash pain for registering new device in Autopilot. If you are managing an Intune environment and using Autopilot, you already know that every new device must be registered in Autopilot using the hardware hash; which is painful if you can’t get this information from the manufacturer.

Intune – No more hardware hash requirement for Autopilot (preview) Read More »

Intune – End-user self-service BitLocker recovery key

If you manage Windows/macOS devices fleet you already know that it is recommended to enable disk encryption on these devices (either through GPO or Intune) with recovery information saved in Entra ID. Then you also already know that administrators (global administrator, cloud device administrator, helpdesk administrator, Intune administrator or security administrator or reader) can read

Intune – End-user self-service BitLocker recovery key Read More »

Intune – You can now get superseded Windows application (Win32) uninstalled

If you are managing a Microsoft Intune tenant, you know you can create Intune package for Win32 apps (exe installer, custom scripts…). For sometime already, this Win32 app feature has been supporting the configuration of supersedence to help ensuring always the latest version is made available and deployed. That said, there is situation when such

Intune – You can now get superseded Windows application (Win32) uninstalled Read More »