Tim Beer retweeted
One restart a month for Windows updates via Microsoft Support.
Note: Currently only turned on for consumers. Commercial controls coming soon.
support.microsoft.com/en-us/…
#Windows #Windows11 #MSintune
Tim Beer retweeted
New Compliance Checks Are Coming to Intune
Intune is preparing to introduce a new set of Windows 11 health checks (This is NOT mentioned on the Intune roadmap!)
DHA only validates a limited part of the platform. The upcoming Microsoft Azure Attestation (MAA) based signals cover firmware protection, virtualization security, and memory integrity, and show how Intune will evaluate devices going forward.
If you want a clear look at what is coming, the blog below explains it..
patchmypc.com/blog/microsoft…
#Intune #MSIntune #Windows #Windows11 #Compliance
Nice idea vv cool, will have a play with this. Intune Devops
Replying to @AllwaysHyPe
Still in testing, but it’s a pattern anyone can use to manage Intune like any other Infrastructure as Code system.
github.com/AllwaysHyPe/Intun…
A secure set of defender for endpoint settings for most environments, contains reasoning and details
timbeer.com/microsoft-defend…
#mde #defender #Microsoftdefender
Tim Beer retweeted
#Intune "Windows Quality Update management policies" just dropped on the roadmap. This will allow you to control non-security and OOB updates more granular.
microsoft.com/en-us/microsof…
Tim Beer retweeted
🚨Huge #OpenIntuneBaseline News!
I've been busy working on a web-based, user-friendly tool to be able to deploy and version-check existing #OIB deployments, and it's finally ready!
Features:
- New Deployments: Allows granular control over policy deployment. Import as much or as little as you want!
- Existing Deployments: Validate your OIB policies against the latest version, allowing quick and easy views on what's outdated or new.
- Completely browser-based, using MSAL Authentication.
- MIT Licensed: Not comfortable using my Enterprise App? No problem! Grab the code and host it yourself or run it locally!
Website: deploy.openintunebaseline.co…
GitHub: github.com/SkipToTheEndpoint…
Huge thanks to the various people who have provided feedback, input and testing while I've been putting this together.
Even bigger thanks to everyone in the community who use, and provide feedback, bugs and requests for the OIB. I don't think it's possible to even estimate how many hours the project has been able to save Intune admins around the world.
Also, we're closing in on 1k Stars on GitHub!
#MayTheCapybaraBeWithYou
Tim Beer retweeted
Finally my Intune Diff tool is ready 🥳. If you want to compare one Securely Baseline to multiple Intune policies, to see if you missed some settings or misconfigured something, this tool will help you that. #msintune
intunediff.com/
Tim Beer retweeted
One cannot use open source projects in good conscience and not contribute to them in some way. I am lucky to be the largest recipient of @Github sponsors in the world. I want to make sure that creators like @PrzemyslawKlys get what they deserve. I hope others follow!
Wow… I just got sponsored on GitHub with a yearly donation by @KelvinTegelaar 🤯
I honestly didn’t expect this — such an amazing surprise and a huge motivation boost! I hope the things I create prove useful in your projects.
Tim Beer retweeted
Back to Basics – Using an AutoUnattend.xml file to Automate Windows 11 Setup from Media (With bulk enrollment to Microsoft Intune) #MSIntune #Windows11 #JurassicDeployment deploymentresearch.com/back-…
Reminder strong mapping bypass ends for certs in September 2025
timbeer.com/microsofts-certi…
Tend to agree with the added caveat comms and stakeholder comms are everything in I.T reduce the friction by engaging everyone with clear guides and why we are doing it, the technical part becomes the easier part.
Seeing lots of "Are you Windows 11 ready" posts both here and elsewhere, and I have to ask: Why are you leaving it so late?
This change isn't a surprise. It's been being communicated for YEARS.
I wrote the below blog in January of *2023*, mostly off the back of the conversations with customers I was having at the time, so there's more of the "why move" stuff.
But now you don't have a choice. There's now only 47 working days before it's unsupported.
So, my blunt but genuine question: Why has it taken a near-dangerous amount of time to make a change which shouldn't have been that big of a deal?
skiptotheendpoint.co.uk/wind…
Wow, this would be on my buy list once released. Any hint at how deep level they'll be?
In the process of writing two books on Defender and using dictation via @WisprFlow has really changed everything. It's more accurate than Windows' native transcribe feature (at least with my accent) and includes smart formatting like bullets and paragraphs.
Tim Beer retweeted
Replying to @SwiftOnSecurity
Eventvwr.msc:
I’ve seen things you people wouldn’t believe …
Attack scripts that fire off the shoulder of msiexec
I’ve watched cscript.exe glitter in the dark near the RDP gateway
All those events will be lost, like tears in rain. Time to right click clear log.
Thanks so much Rudy, another invaluable post. Now I just need to try and find Microsoft's standpoint on if any other countries are affected, which as your post shows may be shrouded in vagaries in the MS docs.
Microsoft Store apps failing with 0x87D30017 during Autopilot Device Preparation?
Everything was fine... until the device was set to Lebanon during the AP-DP enrollment. The result: no Company Portal, Package Not Found, and a broken AP-DP enrollment.
We used Fiddler and traced the issue back to the Microsoft Store backend.
It turned out to be all about region filtering.
If you're relying on Microsoft Store apps during Autopilot, you’ll want to read this.
patchmypc.com/when-region-se…
#Intune #MSIntune #WindowsAutopilot #PatchmyPC #Windows #Windows11 #Microsoft #CompanyPortal #Fiddler #Security
Tim Beer retweeted
Microsoft Store apps failing with 0x87D30017 during Autopilot Device Preparation?
Everything was fine... until the device was set to Lebanon during the AP-DP enrollment. The result: no Company Portal, Package Not Found, and a broken AP-DP enrollment.
We used Fiddler and traced the issue back to the Microsoft Store backend.
It turned out to be all about region filtering.
If you're relying on Microsoft Store apps during Autopilot, you’ll want to read this.
patchmypc.com/when-region-se…
#Intune #MSIntune #WindowsAutopilot #PatchmyPC #Windows #Windows11 #Microsoft #CompanyPortal #Fiddler #Security
Tim Beer retweeted
Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) with Intune techcommunity.microsoft.com/…
A great post, very useful.
Just published my first blog on defender-sensei.com!
A practical take on aligning NIST CSF 2.0, DORA, NIS2 & more with Microsoft Sentinel & Defender.
It’s a try-out — all feedback welcome.
DM me with tips, tricks, or ideas!
defendersensei.com/posts/Nav…
#CyberSecurity
Tim Beer retweeted
Just published my first blog on defender-sensei.com!
A practical take on aligning NIST CSF 2.0, DORA, NIS2 & more with Microsoft Sentinel & Defender.
It’s a try-out — all feedback welcome.
DM me with tips, tricks, or ideas!
defendersensei.com/posts/Nav…
#CyberSecurity


























