Intune

Intune – A single view to consolidate administrators tasks

You probably know that with Intune you can get administrators to approve, execute some tasks requiring special/temporary elevation/permission through multi-admin approvals, elevation requests or Defender security tasks. Unfortunately, until now all of these administrative requests were being handle from different Intune blades, making it a bit difficult and/or generating overhead by forcing switching from one […]

Intune – A single view to consolidate administrators tasks Read More »

Intune – Collect device hardware information

If you use Microsoft Intune to manage your devices fleet, you already know that it can gather some device hardware details. Well, good news as now you can get more detailed hardware information from your Windows devices, covering more details about CPU, battery, hard drives, BIOS version or SIM information. To enable this capability you

Intune – Collect device hardware information Read More »

Intune – Remove preinstalled Windows Store apps

As IT administrator, you may want/need to remove preinstalled/default Windows Store apps (such as Solitaire, Feedback hub or Clipchamp). Until now, you had either to use script or deploy these applications from Intune in uninstall mode. Unfortunately, this does not block end-user to install again these applications (even if they eventually will be uninstalled again).

Intune – Remove preinstalled Windows Store apps Read More »

Intune – You can now run a remediation script on demand and per device basis (preview)

If you are Intune administrator, you should already know (and hopefully using) remediation scripts capability which allows you to run detection and remediation scripts on device to maintain specific configuration which are not available through profiles (see Use Remediations to Detect and Fix Support Issues – Microsoft Intune | Microsoft Learn). Until now, remediation scripts

Intune – You can now run a remediation script on demand and per device basis (preview) Read More »

Windows – Windows 11 25H2 is now available

Windows 11 25H2 is now available from Intune, My Visual Studio (aka MSDN), SCCM Software Update/WSUS but apparently not yet through Windows Update.   You can learn about known issues from there Windows 11, version 25H2 known issues and notifications | Microsoft Learn As part of the improvements: Support for Wi-Fi 7 for enterprise connectivity

Windows – Windows 11 25H2 is now available Read More »

Intune – Windows Security Updates can now be installed during autopilot enrollment

By now you should already know about the autopilot enrolment in Intune (Overview of Windows Autopilot | Microsoft Learn). Well, autopilot enrolment just got a good improvement as it can now install Windows security updates during the enrolment. The configuration to enable or disable the security updates installation during enrollment is managed from the enrollment

Intune – Windows Security Updates can now be installed during autopilot enrollment Read More »

Windows / Intune – Phone Link has been blocked by your system administrator

Phone Link, previously known as Your Phone, is a Windows app that allows connecting Android or iOS phones to Windows computers. It enables access and manage various phone features directly from their PC, such as texts, calls, notifications, and photos. Well, recently, I faced the “This feature has been blocked by your system administrator” error

Windows / Intune – Phone Link has been blocked by your system administrator Read More »

Intune – New attributes and S/MIME baseline requirements for SCEP certificate profiles

If you use Intune SCEP to generate and deliver user certificate, you need to review and update accordingly before July 16 your SCEP profile to use new required attributes for the certificate subject name: Given name – G={{GivenName}} Surname – SN={{SurName}} This new requirement is following the enforcement new S/MIME baseline requirements for public certificate

Intune – New attributes and S/MIME baseline requirements for SCEP certificate profiles Read More »

Intune / Windows – Hotpatching now enabled by default for new Windows quality update policies

By now, you are probably aware about the hotpatching for Windows 11 and Windows Server (see Hotpatch updates | Microsoft Learn and Hotpatch for Windows Server | Microsoft Learn). As hotpatch has been available for Windows 11 clients for few months already, Microsoft has announced that it will now be enable by default for all

Intune / Windows – Hotpatching now enabled by default for new Windows quality update policies Read More »

Intune – Changes in supported OS architecture for Win32 apps

If you are using to manage your client devices fleet, you already know that you can package and deploy custom Windows applications (aka Win32 apps). When deploying this type of application, you have to define the supported Windows architecture (x86 or x64) and version. Well, good news as there has been few changes to configure

Intune – Changes in supported OS architecture for Win32 apps Read More »