Arshad (@Ash_MEMCM) profile picture

Endpoint Platform Manager focusing on modern solutions to manage endpoints. Intune/Autopilot/Windows11

London, England
Joined March 2014
Photo by Arshad (@Ash_MEMCM)Photo by Arshad (@Ash_MEMCM)Photo by Arshad (@Ash_MEMCM)Photo by Arshad (@Ash_MEMCM)Photo by Arshad (@Ash_MEMCM)Photo by Arshad (@Ash_MEMCM)Photo by Arshad (@Ash_MEMCM)Photo by Arshad (@Ash_MEMCM)Photo by Arshad (@Ash_MEMCM)
Maintenance Window Settings for OS, Drivers, and Updates This new Settings Catalog policy lets you decide when update work is allowed to run for OS, drivers, and firmware, instead of only trying to avoid restarts during active hours. And even though the Settings Catalog entry is not there yet, you can already configure it with the Update CaSP. I had a look at what it does, how it works, and why it is more than just active hours. patchmypc.com/blog/windows-u… #Intune #WindowsUpdates #Windows11 #MSIntune
4
48
4
193
34,616
Anyone know why this AppLocker rule would fail to block Quick Assist but successfully block Zoom? @TheWMIGuy @TomDegreef
6
4
24
6,140
👋 Folks, I'm super excited to announce the launch of the Microsoft Zero Trust Assessment! I've been working on this project for the past year at Microsoft with an extended team including our security researchers, product feature teams and docs Here's what it does 🧵👇
35
167
17
787
58,163
We just released "Support for user account context in Endpoint Privilege Management Elevation Rules" let us know what you think #MSIntune #EPM #MSSecurity learn.microsoft.com/en-us/in…
2
14
41
4,546
Blog post: A Mini Dive into the Microsoft Entra #PowerShell Module: An Intune Administrator’s Perspective msendpointmgr.com/2025/02/15… #MicrosoftGraph #AzureAD #GraphAPI
7
29
2,959
How to deploy @Microsoft New Teams the right way with @MasterPackager #PSADT @PatchMyPC
1
11
73
5,125
Device check-ins are the backbone of Intune's management model—and they don’t just happen on a fixed schedule! Some admin actions, payload updates, or assignment changes go through the “fast lane". Intune sends push notifications to affected devices to initiate a check-in, helping you maintain security and compliance with minimal lag. Learn more > msft.it/6017SPL1v #MicrosoftIntune #Latency #DidYouKnow
2
27
3
119
10,678
Replying to @AdamGrossTX
I cannot explain why the data seems odd, but it is there. @bytenerd might can give more info.
1
1
3
468
As part of our #Windows 11 24H2 rollout, we wanted to get an idea of how many devices were in their reboot grace period. I wrote a script that can be deployed as a Proactive Remediation in #MSIntune which will output the expected datetime that the device will reboot. I think it's accurate, but still tweaking things. Let me know if you have any issues or suggestions for improvement. I'm a bit rusty :-) github.com/AdamGrossTX/Toolb… #MVPBuzz @winadmins
2
24
1
90
6,562
My 3 line Win 10 to 11 migration script has grown to over 1500 lines so I decided to blog it and post it to GitHub. If update rings aren’t working for you I strongly suggest you take a look at this script. :-) #MSIntune powerstacks.com/empowering-s…
9
28
1
112
8,029
#CIS Benchmark v4 for #Intune and #Windows11 has been published as of two days ago! I recommend you check out the changes as soon as you get access to it. This has been in the work for months! #cybersecurity
54
237
19,641
Ever wondered why your device keeps failing Device health attestation checks despite having BitLocker and Secure Boot enabled? Windows now runs the Tpm-PreAttestationHealthCheck task, which drops a detailed JSON file in the MeasuredBoot logs folder. That file contains all the info you need: TPM version, BitLocker state, Secure Boot, EK certificate presence, and more. You no longer need to dig through obscure logs to guess what's going wrong. call4cloud.nl/health-attesta… The blog also includes the breakdown of the JSON output and how it maps to the Device Health Attestation settings in Intune. #Intune #MSIntune #Windows #Windows11 #DHA #Compliance #Attestation #TPM #Microsoft #Security
1
33
2
112
9,981
Good solution for those without Entra, but I believe we have better options if you are willing to set up Entra Kerberos and/or hybrid join servers For Server 2022+, it doesn't get much easier than this - check the box and get Conditional Access too! learn.microsoft.com/en-us/wi…
Enable secure, passwordless RDP access to on-prem servers using Smart Cards with FIDO2 Security Keys. techcommunity.microsoft.com/…
5
43
233
26,621
What's the difference between a $250 and $2,500 suit jacket? Let me show you. 🧵
214
718
88
14,738
2,297,553
Performing a remote wipe from Intune? And now your devices won’t boot, stuck on “There was a problem resetting your PC”? There’s a reason this keeps happening, especially on Dell devices. And no, it’s not just bad luck. Please read this blog at @PatchMyPC to ensure that won't happen the next time you wipe a device! patchmypc.com/intune-remote-… #Intune #MSIntune #Windows #WindowsAutopilot #Windows11 #Security #Dell #Raid #patchmypc
11
38
125
15,549
🆕 Drivers inventory dashboard updated with: ✅ Optional drivers updates available for a device ✅ Devices count by optional update & model ✅ Possibility to filter on device class #MEMPowered #MSIntune @Hoorge
1
6
50
3,839
Blog post: An easy way to get started with Certificate Based Authentication for AAD applications msendpointmgr.com/2023/03/11… #IntuneGraphAPI #Automation #Azure #AzureAutomation #GraphAPI #Intune #MicrosoftGraph #ModernManagement #PowerShell
13
38
2,839
Working on something cool. Adhoc and Scheduled Intune Reports!
3
10
1
63
4,584
Wild stuff 🤯 Microsoft partners with Edgio for Azure CDN. Edgio files for bankruptcy, Akamai buys selected assets, deadline of Jan 15 to migrate everything So we get 3 days to make changes during holidays... Why so late when docs updated 4 days ago? github.com/MicrosoftDocs/mem…
⚠️ Action required by Dec 27 If you are using #MSIntune to deploy PowerShell scripts or Win32 apps, you will need to grant access to the updated endpoints for your location. admin.microsoft.com/Adminpor…
10
51
2
146
42,668