Arshad retweeted
Maintenance Window Settings for OS, Drivers, and Updates
This new Settings Catalog policy lets you decide when update work is allowed to run for OS, drivers, and firmware, instead of only trying to avoid restarts during active hours.
And even though the Settings Catalog entry is not there yet, you can already configure it with the Update CaSP.
I had a look at what it does, how it works, and why it is more than just active hours.
patchmypc.com/blog/windows-u…
#Intune #WindowsUpdates #Windows11 #MSIntune
Arshad retweeted
Anyone know why this AppLocker rule would fail to block Quick Assist but successfully block Zoom? @TheWMIGuy @TomDegreef
Arshad retweeted
👋 Folks, I'm super excited to announce the launch of the Microsoft Zero Trust Assessment!
I've been working on this project for the past year at Microsoft with an extended team including our security researchers, product feature teams and docs
Here's what it does
🧵👇
Arshad retweeted
We just released "Support for user account context in Endpoint Privilege Management Elevation Rules" let us know what you think #MSIntune #EPM #MSSecurity
learn.microsoft.com/en-us/in…
Arshad retweeted
Blog post: A Mini Dive into the Microsoft Entra #PowerShell Module: An Intune Administrator’s Perspective msendpointmgr.com/2025/02/15… #MicrosoftGraph #AzureAD #GraphAPI
Arshad retweeted
Device check-ins are the backbone of Intune's management model—and they don’t just happen on a fixed schedule! Some admin actions, payload updates, or assignment changes go through the “fast lane". Intune sends push notifications to affected devices to initiate a check-in, helping you maintain security and compliance with minimal lag. Learn more > msft.it/6017SPL1v
#MicrosoftIntune #Latency #DidYouKnow
Arshad retweeted
Replying to @AdamGrossTX
I cannot explain why the data seems odd, but it is there. @bytenerd might can give more info.
Arshad retweeted
As part of our #Windows 11 24H2 rollout, we wanted to get an idea of how many devices were in their reboot grace period. I wrote a script that can be deployed as a Proactive Remediation in #MSIntune which will output the expected datetime that the device will reboot. I think it's accurate, but still tweaking things. Let me know if you have any issues or suggestions for improvement. I'm a bit rusty :-)
github.com/AdamGrossTX/Toolb…
#MVPBuzz @winadmins
Arshad retweeted
My 3 line Win 10 to 11 migration script has grown to over 1500 lines so I decided to blog it and post it to GitHub. If update rings aren’t working for you I strongly suggest you take a look at this script. :-)
#MSIntune powerstacks.com/empowering-s…
Arshad retweeted
#CIS Benchmark v4 for #Intune and #Windows11 has been published as of two days ago! I recommend you check out the changes as soon as you get access to it. This has been in the work for months! #cybersecurity
Arshad retweeted
Ever wondered why your device keeps failing Device health attestation checks despite having BitLocker and Secure Boot enabled?
Windows now runs the Tpm-PreAttestationHealthCheck task, which drops a detailed JSON file in the MeasuredBoot logs folder. That file contains all the info you need: TPM version, BitLocker state, Secure Boot, EK certificate presence, and more.
You no longer need to dig through obscure logs to guess what's going wrong.
call4cloud.nl/health-attesta…
The blog also includes the breakdown of the JSON output and how it maps to the Device Health Attestation settings in Intune.
#Intune #MSIntune #Windows #Windows11 #DHA #Compliance #Attestation #TPM #Microsoft #Security
Arshad retweeted
🚀🔒 Discover best practices for managing @Windows feature updates with Luke Ramsdale's expert tips and ensure your devices are secure and up-to-date using @MSIntune.
➡️ Learn more: aka.ms/Intune/Troubleshoot-f…
#MSIntune #Windows #WindowsUpdate #IntuneInspired
Arshad retweeted
Good solution for those without Entra, but I believe we have better options if you are willing to set up Entra Kerberos and/or hybrid join servers
For Server 2022+, it doesn't get much easier than this - check the box and get Conditional Access too!
learn.microsoft.com/en-us/wi…
Enable secure, passwordless RDP access to on-prem servers using Smart Cards with FIDO2 Security Keys. techcommunity.microsoft.com/…
Arshad retweeted
Performing a remote wipe from Intune?
And now your devices won’t boot, stuck on “There was a problem resetting your PC”?
There’s a reason this keeps happening, especially on Dell devices. And no, it’s not just bad luck.
Please read this blog at @PatchMyPC to ensure that won't happen the next time you wipe a device!
patchmypc.com/intune-remote-…
#Intune #MSIntune #Windows #WindowsAutopilot #Windows11 #Security #Dell #Raid #patchmypc
Arshad retweeted
🆕 Drivers inventory dashboard updated with:
✅ Optional drivers updates available for a device
✅ Devices count by optional update & model
✅ Possibility to filter on device class
#MEMPowered #MSIntune @Hoorge
Arshad retweeted
Blog post: An easy way to get started with Certificate Based Authentication for AAD applications msendpointmgr.com/2023/03/11… #IntuneGraphAPI #Automation #Azure #AzureAutomation #GraphAPI #Intune #MicrosoftGraph #ModernManagement #PowerShell
Arshad retweeted
Wild stuff 🤯
Microsoft partners with Edgio for Azure CDN. Edgio files for bankruptcy, Akamai buys selected assets, deadline of Jan 15 to migrate everything
So we get 3 days to make changes during holidays...
Why so late when docs updated 4 days ago?
github.com/MicrosoftDocs/mem…
⚠️ Action required by Dec 27
If you are using #MSIntune to deploy PowerShell scripts or Win32 apps, you will need to grant access to the updated endpoints for your location.
admin.microsoft.com/Adminpor…















![Adam Gross [MVP] - ASquareDozen.com (@AdamGrossTX) profile picture](https://pbs.twimg.com/profile_images/1454200017594486790/e_vrmMTf_400x400.jpg)












![Damien Van Robaeys [MVP] (@syst_and_deploy) profile picture](https://pbs.twimg.com/profile_images/1686796527799332894/JWEicRmW_400x400.jpg)
![Image from Damien Van Robaeys [MVP] (@syst_and_deploy)](https://pbs.twimg.com/media/Gki6N19WQAEtqrc.png?name=small&format=webp)
![Image from Damien Van Robaeys [MVP] (@syst_and_deploy)](https://pbs.twimg.com/media/Gki6N1-XcAANsOU.png?name=small&format=webp)
![Image from Damien Van Robaeys [MVP] (@syst_and_deploy)](https://pbs.twimg.com/media/Gki6N10XAAAcCgw.png?name=small&format=webp)




