As IT administrator, you may want/need to remove preinstalled/default Windows Store apps (such as Solitaire, Feedback hub or Clipchamp). Until now, you had either to use script or deploy these applications from Intune in uninstall mode. Unfortunately, this does not block end-user to install again these applications (even if they eventually will be uninstalled again).
Intune – Remove preinstalled Windows Store apps Read More »
If you are Intune administrator, you should already know (and hopefully using) remediation scripts capability which allows you to run detection and remediation scripts on device to maintain specific configuration which are not available through profiles (see Use Remediations to Detect and Fix Support Issues – Microsoft Intune | Microsoft Learn). Until now, remediation scripts
Intune – You can now run a remediation script on demand and per device basis (preview) Read More »
By now you should already know about the autopilot enrolment in Intune (Overview of Windows Autopilot | Microsoft Learn). Well, autopilot enrolment just got a good improvement as it can now install Windows security updates during the enrolment. The configuration to enable or disable the security updates installation during enrollment is managed from the enrollment
Intune – Windows Security Updates can now be installed during autopilot enrollment Read More »
Phone Link, previously known as Your Phone, is a Windows app that allows connecting Android or iOS phones to Windows computers. It enables access and manage various phone features directly from their PC, such as texts, calls, notifications, and photos. Well, recently, I faced the “This feature has been blocked by your system administrator” error
Windows / Intune – Phone Link has been blocked by your system administrator Read More »
If you use Intune SCEP to generate and deliver user certificate, you need to review and update accordingly before July 16 your SCEP profile to use new required attributes for the certificate subject name: Given name – G={{GivenName}} Surname – SN={{SurName}} This new requirement is following the enforcement new S/MIME baseline requirements for public certificate
Intune – New attributes and S/MIME baseline requirements for SCEP certificate profiles Read More »
By now, you are probably aware about the hotpatching for Windows 11 and Windows Server (see Hotpatch updates | Microsoft Learn and Hotpatch for Windows Server | Microsoft Learn). As hotpatch has been available for Windows 11 clients for few months already, Microsoft has announced that it will now be enable by default for all
If you are using to manage your client devices fleet, you already know that you can package and deploy custom Windows applications (aka Win32 apps). When deploying this type of application, you have to define the supported Windows architecture (x86 or x64) and version. Well, good news as there has been few changes to configure
Intune – Changes in supported OS architecture for Win32 apps Read More »
Well, another one bit the dust but this time is more related to a third party security product – ThreatLocker (Enterprise Cybersecurity Solutions | ThreatLocker) – wrongly blocking DLL’s patched with Hotpatch. If you have read my previous post (Intune / Windows ARM – Issue with May 2025 Patch Tuesday on ARM devices) about Hotpatch
Intune / Windows – Bad interaction between ThreatLocker and Windows Hotpatch Read More »
As you know, when publishing a Win32 application with Intune, you can define dependencies with other applications (Win32 too). However, it can be challenging to identify the dependencies between applications. Well, good news, you can now see those dependencies by access the Relationship Viewer blade of the application. You can use filter too to view
Intune – You can now easily see relationship between applications (Win32) Read More »
You may have been aware of a major overhaul for Windows Update to allow deploying Windows Updates without having to restart (see Hotpatch for Windows Server | Microsoft Learn). This ‘hotpatch’ capability has been introduced first for Windows Server (2022, 2025) running in Azure and then started to be extended to Windows Server running on-premises
Intune – Hotpatch is becoming available for client devices Read More »
