Today the Snipping Tool betrayed me three times at the worst possible moment. I’ve lost at least four hours because of these little jokes and earned myself a mandatory anger‑management course.
Riccardo Corna
@itspecialist.cloud
👨🏻💻 Endpoint Cloud Solution Architect @ Microsoft ❤️ Punk & Indie music, travels, photography, coffee, chips in a bag
Last stop of the Copilot Developer Camp: Milan! Being kicked off right now by Paolo Pialorsi. Deep dive on building agents for M365 Copilot in the morning, hackathon in the afternoon. #CopilotDevCamp #Microsoft365
Windows Passwordless Experience hides the password from the lock screen via Intune, pushing users toward Windows Hello. The password still exists, just not visible by default. Full guide and demo: www.itspecialist.news/p/windows-pa...
Windows Passwordless Experience
Watvch now | Windows Passwordless Experience: a complete guide on what it is, how to configure it via Intune, and its security benefits.
itspecialist.news
⚠️ Intune app filters: the "Managed" value of deviceManagementType will be replaced. No ETA, but existing filters will be remapped. Use specific values now for future-proof filters! 📖 learn.microsoft.com/en-us/intune...
Assignment filter properties and operators reference - Microsoft Intune
Reference guide for device and app properties, operators, and rule syntax when creating assignment filters in Microsoft Intune. Includes examples and supported values.
learn.microsoft.com
“Try looking into that place where you dare not look! You’ll find me there, staring out at you!” (Quote)
Hotpatch on Windows 11 goes default in May 2026 via Windows Autopatch. Result? Up to 75% fewer reboots/year, patches applied live, no restart needed. Are you already testing it? 🔄 #Intune #Windows11 #Hotpatch
Lock FileVault in at Setup Assistant, not after enrollment. With Intune, the Mac is encrypted before the user reaches the desktop, and the recovery key is escrowed automatically. 📌 Read the full post: 📎 www.itspecialist.news/p/configurin...
Configuring macOS FileVault at Setup Assistant with Microsoft Intune
Watch now | Encrypting Mac disks with FileVault right from the beginning of their lifecycle in the company is a good security practice. Let’s see how to do this with Microsoft Intune.
itspecialist.news
If your help desk can't read BitLocker keys, support slows down fast. A custom role in Microsoft Entra gives just the right privilege, no more, no less. Full guide on ITSpecialist.News. How are you handling recovery key access today? www.itspecialist.news/p/bitlocker-...
BitLocker Key Readers Custom Role in Microsoft Entra
Watch Now | Viewing BitLocker keys from Intune requires a specific permission in Microsoft Entra: a practical guide to creating it
itspecialist.news
What would you do with an old first‑gen Surface Go that doesn’t support Windows 11? I tried bringing mine back to life with Linux. Can anyone guess the distro? Everything works great, even touch, except the pen. Still figuring out if it’s dead or just out of battery. #Microsoft #Surface #Linux
Resizing a Windows 365 Cloud PC? Good news: data is preserved. But "painless" ≠ "no precautions." Licensing, Entra groups, user side. Miss one, and routine becomes a headache. Full guide 👉🏻 itspecialist.news
🚀 Windows Secure Boot certificate expiration: the Log Analytics dashboard #MEMPowered #MSIntune #Microsoft #SecureBoot #LogAnalytics www.systanddeploy.com/2026/04/wind...
Windows Secure Boot certificate expiration: the Log Analytics dashboard
In this post, I will share a dashboard allowing you to monitor Windows Secure Boot certificate expiration on your Intune devices.
systanddeploy.com
New issue out now: Intune FAQ, Microsoft Radar, community picks, events, and a personal note about van life. Read it here: www.itspecialist.news/p/have-you-t...
Have you tried restarting? #11
Intune in a mystic crisis, Microsoft radar, community gems, a wave of events, nerd-friendly books and music, existential van life crisis.
itspecialist.news
if you do not have a hater, one will be provided for you; that’s the online promise
ITSpecialist.News is now in English too! Same content, two languages, avoid reading it twice. Pick your preferred language on Substack: itspecialistnews.substack.com/account → Notifications 🇬🇧 English only or 🇮🇹 Italian only.
Since mid-Feb 2026, my daily setup: 💻 MacBook Pro + ☁️ Windows 365. Feedback? Feels native, fluid, responsive, no “cloud lag” vibe. Full Win env ready w/ company policies, best of both worlds. Windows/macOS dichotomy? So 20th century. Hybrid IT folks: try it! #Windows365 #CloudPC #MacBook
Configured SCEP, Trusted Certificate, Subject, SAN, Key Usage, yet certificates never reach devices? Check your assignments. SCEP and Trusted Certificate must target the same group type. Mixing user and device assignments? Intune stays silent. Full breakdown on ITSpecialist.News.
Microsoft 365 Copilot pinned to the taskbar is handy, but a single key press is faster. With Intune, on supported PCs, you can map the Copilot key to M365 Copilot. Video in Italian, with English captions.
Launching Microsoft 365 Copilot with a single key mapped via Microsoft Intune
Watch now | Streamline the Microsoft 365 Copilot user experience by using Microsoft Intune policies to map the physical Copilot key on newer PCs
open.substack.com
🚀 #External #MFA in Microsoft #EntraID is now Generally Available techcommunity.microsoft.com/blog/microso...
External MFA in Microsoft Entra ID is now Generally Available | Microsoft Community Hub
External MFA in Microsoft Entra ID is GA, enabling integration with third-party MFA while maintaining Conditional Access and risk-based policies.
techcommunity.microsoft.com
Intune policies showing "Not applicable" on AVD multi-session hosts? You're not doing it wrong, there are real limitations to know. 👉🏻 www.itspecialist.news/p/have-you-t... #AVD #Intune
Have you tried restarting? #8 (Happy new year!)
AVD multi-session and Intune pains, Microsoft news, calls for speakers everywhere, music and (somewhat) lazy thoughts to kick off 2026 with a bang.
itspecialist.news
I’ve been thinking a lot about the future of ITSpecialist.News and whether it should become a fully English, global project. I’d love your feedback: would that change how you follow it? open.substack.com/pub/itspecia...
A question that’s been stuck in my head for a while
I’ve got this idea stuck in my head: turning ITSpecialist.News into a global project in English. But what would that mean for you? I really want to hear your opinion.
open.substack.com
🎯 MVP Summit week is here! To all MVPs heading to Redmond: enjoy every single moment of it. It’s honestly one of the things I miss the most as a Microsoft FTE. Don’t take it for granted, not everyone gets that seat. Happy Summit! 🚀 📸 Photo from my last Summit, 2024. #MVPSummit
Hey IT Specialists! Is it true that Intune Suite features are now included in M365 E3/E5 licenses? Yes, but the rollout timeline and exact feature split per plan can be tricky. Get the full breakdown and subscribe for more answers right in your inbox at 👉🏻 ITSpecialist.News
Intune SCEP profile ok, Trusted Certificate ok… but certs never reach devices? The issue is often simple: mismatched group assignments between SCEP and Trusted Certificate. Full breakdown on itspecialist.news, subscribe for more!
Struggling with cryptic Intune error codes? Microsoft's official reference tables decode MDM configs & app installation failures, saving hours of troubleshooting. 📌 Config profiles: learn.microsoft.com/en-us/troubl... 📌 App errors: learn.microsoft.com/en-us/troubl...
Mixing Win32 & LOB apps in Autopilot? ⚠️ Traditional: Avoid it. ✅ Device Prep: Works. The Golden Rule: always standardize on Win32 apps. They offer better stability, dependency management, and support to new features. Love practical IT tips like this? Subscribe 👉🏻 ITSpecialist.News
Decommissioning on-prem AD? ☁️ Turning off Entra Connect isn't enough: users stay "Synced" (read-only). To truly go cloud-only and manage identities, you must disable directory sync via MS Graph. Here is how 👇 www.itspecialist.news/p/disable-sy...
Disable synchronization between Active Directory and Entra using Graph Explorer.
Disable synchronization between Active Directory and Entra ID: a practical step-by-step guide using Graph Explorer and PowerShell.
itspecialist.news
Intune keeps leveling up: smarter Win32 app automation, cleaner Apple enrollment with ACME, and stronger security with new Copilot agents + Android hardening. Source: learn.microsoft.com/en-us/intune... Want these kind of updates straight to your inbox? Subscribe at itspecialist.news
What's new in Microsoft Intune - Microsoft Intune
Find out what's new in Microsoft Intune.
learn.microsoft.com