There's some companion apps coming to #Windows11 via the M365 Desktop Apps that might catch admins or users off-guard, so I've put some thoughts and information together in a mini-blog. skiptotheendpoint.co.uk/m365-compani...

M365 Companion Apps: A (P)review

M365 Companion Apps are coming! What are they, what does this mean as an admin, and what do I think?

skiptotheendpoint.co.uk

📰 #OIB Windows v3.6 - Post-MMS Edition! - More 24H2 baseline settings - New LAPS account management - M365 Apps Baseline! Check out the release notes below: github.com/SkipToTheEnd...

Release windows-v3.6 · SkipToTheEndpoint/OpenIntuneBaseline

Windows v3.6 - 2025-05-13 - Post-MMS Edition Added Settings Catalog Win - OIB - SC - Microsoft Office - D - Device Security - v3.6 Win - OIB - SC - Microsoft Office - U - User Security - v3.6 By po...

github.com

#MMSMOA is almost upon us! Start your conference right with a dose of the #OpenIntuneBaseline, and asking a good question may reward you with a special shiny SkipToTheEndpoint sticker! 8am, Lakes B! Sign up here: stte.me/mmsoib

📬 #Windows Recall had a rocky start, but where do we stand now as it moves into GA? With a complete security overhaul, fresh admin controls, and a default-off strategy, the improvements are promising! Interested to read a more optimistic view? stte.me/recallisgreat

From Criticism to Confidence: Windows Recall

Windows Recall is a powerful tool, but is it secure, should you be concerned, and how do you manage it?!

stte.me

After picking up a Surface and having some time to play with #Windows #Recall, I'm working on a blog all about it, but am already fed up with seeing posts about policy not working. So let me make this as clear as I can:

It's an absolute pleasure to be invited back to the @mmsmoa.bsky.social to talk all about the #OpenIntuneBaseline! Interested in how it all started? Not sure how to get the most of it in your environment? I'm stoked to be able to tell you all about it! sched.co/1uF7c

I am deeply unhappy that these things now qualify as being "dad rock". And that I'm the dad.

📰 OIB Windows v3.5 - 24H2 Baseline Edition! A surprise drop of some settings and an updated 24H2 Intune baseline brings some of those additions (and some extra goodies) to the Windows OIB. Check out the changelog below! github.com/SkipToTheEnd...

Release windows-v3.5 · SkipToTheEndpoint/OpenIntuneBaseline

Windows v3.5 - 2025-02-20 - 24H2 Baseline Edition (Mostly) Added Settings Catalog Win - OIB - SC - Device Security - D - Windows Package Manager - v3.5 Added configuration that will be being adde...

github.com

📬 It's been a quiet couple of months on the #Intune front, so what's better than getting Intune 2501 in February! New Edge settings, more Apple DDM, and CSP control over the upcoming #Windows #Recall feature. skiptotheendpoint.co.uk/settings-run...

Intune Settings Rundown - 2501

Intune 2501 - Stay informed of the latest Intune settings policy and UI changes!

skiptotheendpoint.co.uk

🚨 #OpenIntuneBaseline Windows v3.4 Released! New additions and some things to be aware of, such as the fact all policy names have been updated. Thanks for all the community input. You guys rock. Check out the release changelog below: github.com/SkipToTheEnd...

Release windows-v3.4 · SkipToTheEndpoint/OpenIntuneBaseline

Windows v3.4 - 2025-01-24 ImportantA UI change in November '24 has made all policy types visible in the Configuration blade. This has caused a lot of confusion when trying to identify policies conf...

github.com

📰 OIB 3.4 News! I'm busy finalising changes/updates to v3.4 of the #OpenIntuneBaseline. Some forewarning of a "breaking change" in that all policies have been renamed to show where they actually exist (ES - Endpoint Security, SC - Settings Catalog). I still don't like it :(

Another day, another "x policy/remote action isn't working on our iOS devices" issue. Just because you used Corp Identifiers, or switched it from Personal to Corp doesn't mean that device is Supervised. Stuff won't work as you expect. Enrol your devices properly, guys!

Is this another hilarious #Windows en-GB install media localisation issue where "checked" has been replaced with "ticked"? 24H2 26100.2605

Copy > Paste > Scale

📬 Following from last week, Part 2 in the story of #Windows CSP and #Intune policy deployment. ControlPolicyConflict, Policy Scope and MMP-C, oh my! Happy Holidays! skiptotheendpoint.co.uk/windows-csp-...

Windows CSP: A Tale of Magic, Betrayal, and Intrigue - Part 2

Part 2 on how Windows handles policy, the 2 major reasons people struggle, as well as a taste of the future.

skiptotheendpoint.co.uk

📬 Do you administer #Intune or support Intune-managed devices? Do you know how policy gets delivered to devices, and how the OS handles them? Check out part 1 of 2 all about the nuance and intricacies of #Windows CSP's! skiptotheendpoint.co.uk/windows-csp-...

Windows CSP: A Tale of Magic, Betrayal, and Intrigue - Part 1

Creating an Intune policy is easy, but what happens then? How go they get there, and why you should know and care.

skiptotheendpoint.co.uk

Oh my I think it finally happened! The #Defender security "recommendation" to implement a now-defunct version of LAPS has disappeared! Can't seem to find any official changelog though. It's a Festivus miracle! 🎉

🚨You can now enable monitoring of channels and updates in the #Edge Management Service! learn.microsoft.com/en-us/deploy... You may also notice all #Intune Settings Catalog policies in the "Configuration policies" list. I'm writing a blog as there's some chance for danger here...

Is this #Defender #ASR recommendation notification new?! Incredibly cool that it's analysed the logs, seen no audit or warn events and actively suggesting to deploy it with as associated user impact!

#OIB hivemind - The #Intune UI change that dumps everything into the Configuration page makes it hard to know where a policy actually exists. Thoughts on adding "SC" for Settings Catalog and "ES" for Endpoint Security into the naming convention?

"Management" asks for changing default fonts, or right-click menu's, or moving the start button are unsustainable. Say "No". Empower your users with training or KB's. Stop assuming you know what every individual needs to be productive. #SomeExclusionsApply

Catch @shadykhorshed.bsky.social , @skiptotheendpoint.co.uk , @ugurkoc.de, and me this Thursday at 2 PM EST as we dive into all the biggest Intune and Windows updates from Ignite. youtu.be/msx-giuKfx4 #intune #autopilot

Intune at Ignite: a Thanksgiving Special

YouTube video by Get Rubix

youtu.be

One from the archive, but ever relevant for those embarking on their journeys into #Intune management. Names of things may have changed, but the sentiment has not. skiptotheendpoint.co.uk/haadj-stop-i...

HAADJ: Stop it, you're making it worse for yourself (mostly)

HAADJ. A blessing or a curse for the shift to Modern Management? What if it was actually both?

skiptotheendpoint.co.uk

📬 Another month and another #Intune SR means another Settings Rundown! UI changes, Hardware Inventory, Template Deprecation and WSL Compliance, oh my! skiptotheendpoint.co.uk/settings-run...

Intune Settings Rundown - 2411

Intune 2411 - Stay informed of the latest Intune settings policy and UI changes!

skiptotheendpoint.co.uk

🚨 #Intune 2411 has made a UI change that is showing any Settings Catalog-backed Endpoint Security policies in the Configuration page. BitLocker, Defender, Firewall, ASR, LAPS and even Security Baselines visible. Currently unsure if this change is intended.

#Edge is, and should be the only browser installed on your #Intune managed devices and allowed for BYOD. It's not about people's feelings. It's about manageability and security of Enterprise Identities and Data. These upcoming additions are excellent. blogs.windows.com/msedgedev/20...

Ignite 2024: Transform your workday with the latest Edge for Business features

Today's work environment doesn't look the same as it did a few years ago. You're supporting flexible work patterns, with remote users who are often using personal devices. Cybersecurity threats are mo...

blogs.windows.com

Hotpatching is amazing technology for business-critical devices, but should *NOT* form your default patching experience. How many issues magically "disappear" by making the user reboot their device? Perhaps have a think before deploying anything... techcommunity.microsoft.com/blog/windows...

Hotpatch for client comes to Windows 11 Enterprise | Microsoft Community Hub

Enhance security and increase productivity with hotpatching in Windows.  

techcommunity.microsoft.com

"When it comes to security, it's fundamentally a team sport" - Satya @ #MSIgnite Yes! Endpoint Management is Security. Identity is Security. Infrastructure is Security. Just cos you've got a "Security Team" doesn't mean they're looking at or understand everything holistically.

Heh. Nice 👌

It's frustrating starting from "scratch", but overall refreshing. It's almost like people enjoy a platform not overlorded by a nut-job with a God complex who sucks up to fascist dictators. Who knew?!