Certificates are scary, But be sure to join the webinar tomorrow where @byteben.bsky.social and @call4cloud.nl and myself talk about the Intune MDM device certificate and what the Intermediate cert expiring could mean for you. Maybe a little bit of talk about 🧀 too 😋🍴

Patch My PC@patchmypc.com · 6mo ago

Everything can look healthy until things get weird. ❌ Scripts failing ❌ Apps not installing ❌ Policies acting inconsistently Some devices never properly renew their #Intune certificate expiry updates, and you may not know which ones yet. We’ll show you how to find them 👉 https://bit.ly/42futzM

Tired of your PowerShell scripts crashing when pulling Intune reports? 😩 Learn how to handle Microsoft Graph rate limits like a pro. 🛑 Understand global vs Intune limits 🚦 Respect Retry-After ⏱️ Use exponential backoff 👉 msendpointmgr.com/2025/11/08/g... #PowerShell #Intune #GraphAPI

A beginners guide to Microsoft Graph API rate limiting in Intune - MSEndpointMgr

Learn how to handle HTTP 429 rate limiting when working with Microsoft Graph API. Understand Retry-After, throttling limits, and exponential backoff for resilient PowerShell automation.

msendpointmgr.com

Most patch Windows. Few patch browsers. Extensions = mini-apps with major risk. 🕵️ Audit permissions ⚡ Classify risk 🛡️ Block/allow with Intune Stop “free coupon finders” from finding your data. Take back control today! #Intune msendpointmgr.com/2025/10/04/t...

🚀 Tired of Microsoft Graph PowerShell module headaches? 🤯 Say goodbye to dependency conflicts & endless auth prompts! 👋 I built Uninstall-Graph to completely remove all MS Graph PowerShell modules, giving you a clean slate. 🧼✨ Get it now: uninstall-graph.meri...

Struggling with app updates? We’ve got you covered! Join our upcoming webinar to master supersedence & dependencies in #ConfigMgr, #WSUS, and #Intune so your updates run smoothly every time! Let’s make patching easier 💪 Reserve your spot ⬇️ #PatchMyPC patchmypc.com/supersedence...

Configuring Supersedence and Dependencies in ConfigMgr, WSUS and Intune Webinar | Patch My PC

Join us on March 26 to dive into supersedence and dependencies in ConfigMgr, WSUS, and Intune. Gain practical insights on configuring app updates, managing dependencies, and optimizing deployments for...

patchmypc.com

I just published a deep dive on OAuth flows, from coding it yourself vs. using the Graph SDK. Do you know why PKCE is crucial? 🔐 #Intune admins, sometimes understanding stuff means playing with code you don't have to right? msendpointmgr.com/2025/02/23/u... #EntraID #MicrosoftGraph

Understanding OAuth: Coding the authentication flow yourself vs using an SDK - MSEndpointMgr

Dive into Microsoft Graph authentication with PowerShell. In this blog we explore OAuth flows, PKCE security, and token handling. Learn how to build a secure auth flow from scratch and why the SDK mig...

msendpointmgr.com

🔍 New Blog: "Diving into the Microsoft Entra PowerShell Module" Learn why #Intune admins might choose to skip it entirely. #Intune #Entra #MicrosoftGraph msendpointmgr.com/2025/02/15/a...

A Mini Dive into the Microsoft Entra PowerShell Module: An Intune Administrator's Perspective - MSEndpointMgr

In this post, we'll analyse the Entra PowerShell module's authentication implementation and discuss whether it's necessary for your Intune automation needs if you're already using the Microsoft.Graph....

msendpointmgr.com

Ever wondered how the Company Portal really works under the hood? 🌉 The secret lies in Jeff Bridges! (Yes, really!) 🧵 I dug deep, finding one answer is🧊 Igloo Water 🔎 Full deep dive: msendpointmgr.com/2025/02/09/c... #Intune #ConfigMgr

Struggling with Graph API calls to the Intune Reporting Endpoint or jumping through filters of doom in the Intune Admin Center? ✅This script is for you! github.com/byteben/MEM/... #Intune #PowerShell #MicrosoftGraph #EndpointManagement #Automation #ITAdmins

Engineers @byteben.bsky.social @mauricedaly.com @call4cloud.nl will be hosting our session 🙌 Don't miss it!

Deep Dive: Microsoft Graph SDK Authentication Methods 🔑 Client secrets vs certificates 🏛️ Azure Key Vault 🤖 Automation with PowerShell 🌐 Cross-tenant & multi-cloud tips 🧀 Avoiding security "Swiss cheese" msendpointmgr.com/2025/01/12/d... #MicrosoftGraph #Intune #Automation

Deep Diving Microsoft Graph SDK Authentication Methods - MSEndpointMgr

Learn how to authenticate to Microsoft Graph using the Microsoft Graph SDK for secure automation workflows.

msendpointmgr.com

This is cool! 🎉 Did you know Microsoft Graph exposes Base64-encoded device data via the alternativeSecurityIds property? You can decode it to compute and verify a device's public key for secure validation. 🔐 #MicrosoftGraph #EntraID

🚀 Post Updated! Are you looking for a detailed and systematic examination of cert attributes, extensions, and associated metadata to validate the authenticity of your Entra/Intune devices? 🔐 #Intune #EntraID msendpointmgr.com/2024/10/12/u...

Unpacking the Microsoft Intune MDM and Entra ID Certificate - MSEndpointMgr

In this post we take a small deep-dive into the Intune MDM certificate and talk about OID's and how they can be leveraged to elevate your trust in the device identity.

msendpointmgr.com

🎄 Feeling festive? 🎅 Dive into our latest video @msendpointmgr.bsky.social with @mardahl.bsky.social and I where we unwrap the magic of the Graph SDK auth for Intune automation! 🔑 Authenticate securely. 📜 Use app registrations, delegated permissions, & cert-based auth. youtu.be/ExGEvkYz45M?...

Simplifying Intune Automation with Microsoft Graph SDK: Exploring Authentication Options

YouTube video by MSEndpointMgr - Jungling the Cloud

youtu.be

Warning - click bait heading here at its finest but also worth considering if you use Sentinel and Intune. "Fine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector" - MSEndpointMgr msendpointmgr.com/2024/12/24/f...

Fine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector - MSEndpointMgr

Learn how to fine-tune your data collection for Azure Sentinel when using Intune while carefully weighing the impact on security and compliance.

msendpointmgr.com

We're looking to hire another Purview expert for our team! :) $150-$200K base salary DOE 32 hour work weeks 100% remote work from home 100% employee health coverage 3% 401k (no contribution required) If you love learning and helping people, check it out: patriotconsultingtech.com/work-for-pat...

It exists. 2pintsoftware.com/products/dep...

2Pint Software - DeployR - Modern operating system deployment

2Pint Software specializes in advanced IT infrastructure solutions for large enterprises.

2pintsoftware.com

Playing with timestamping today. It’s always been a thing of the dark arts but now it’s much clearer to me. It’s also useful to know which URLs are being used during your cryptographic operations.

💭 Thinking about removing built-in #Windows Store #apps after #WindowsAutopilot? This blog will discuss the risks, rewards, and best practices for keeping your deployments clean and problem-free. patchmypc.com/uninstall-bu... #Intune #MSIntune #patchmypc

Anybody else find themselves being polite to ChatGPT incase it becomes sentient one day and remembers who you are?

a close up of a monster with the word friend written on it

ALT: a close up of a monster with the word friend written on it

media.tenor.com

If anyone is still struggling with update detection applicability after MS decided to remove DisplayName reg value for Edge WebView2 to hide it in ARP…these PR scripts will restore the reg values. github.com/PatchMyPCTea... Thankfully MS have now backtracked on doing that in the recent version.

Looking for a Quick reference to GREAT #Intune content providers. Here’s a list for you www.intuneqlinks.net/resources#cb...

Blogs are queuing up. We dive into the Intune StatelessIWService soon to understand how the Company Portal impersonates the logged on user to populate stuff like app statuses and user device information. #MSIntune

Come join us and learn all you need to know about the Company Portal - with a look at the Company Portal UI, nuances of co-management and a dash of packet inspection and bridges to our favourite MDM agents #MSIntune

Patch My PC@patchmypc.com · 2y ago

What's your confidence level when using the Company Portal? Join us in our upcoming webinar on Nov. 20th 📆 where we'll unravel its mysteries and help clarify how it functions from install to the logs under the hood. Register 👇 We'll see you there! #PatchMyPC patchmypc.com/intune-compa...

Are you a Workplace Ninja and you want to be added to this "Starters Pack" 👇 react to this message 👇 go.bsky.app/NyznxxH

We're excited to introduce ourselves to Bluesky! 👋 We develop a third-party patch and application management solution for Microsoft #ConfigMgr and #MSIntune. We exist to improve lives through customer-obsessed innovation. Learn more about us here 👉 patchmypc.com #PatchMyPC

Make sure you follow the MSEndpointMgr.com community 😎 go.bsky.app/Dceamkh

Interesting. When the Intune MDM certificate is saved to the SYSTEM profile during certain enrolment scenarios, it is exported, without the private key, to the enrolling users profile too 🧐 Blog coming… #DiggingTooDeep

Check out this great post by @byteben.bsky.social on MSEndpointMgr - Blog post: Unpacking the Microsoft #Intune MDM Certificate msendpointmgr.com/2024/10/12/u... #PowerShell #MSIntune