Microsoft 365 Endpoint Consultant working with #intune #autopilot #windows10 #windows11 #azure #entraid #migration #microsoft365 #macOS
New Jersey, USA
Joined August 2012
- Tweets3.1K
- Following170
- Followers1.4K
- Likes3K
Conference vendors: if you're giving out plush toys, bring two per person. They're for our kids. We have more than one.
Anyway, new video on patching Windows during Autopilot pre-provisioning.
youtu.be/qAQzPrfx5kQ
Dear @Apple
Stop. There is no way in hell that every year, at the exact same time, like clockwork, you come out with new phones, experience the exact same launch, and claim you don't have enough to match the demand that did not anticipate. That is, quite literally, insane.
If you're rebuilding pilot and broad rings every time you push an app, @MSIntune deployment plans fix that. Build the rings once, reuse them everywhere. Part 2 is up.
youtu.be/wMTVZZHDdN4
Intune can do deployment rings natively now. 🧅
Pilot → broad → All devices, on a schedule, without you editing assignments every Thursday.
New blog on how to set up your first deployment:
getrubix.com/blog/intune-dep…
If you're installing the Crucial CT64G75C2LP5X LPCAMM2 in a @FrameworkPuter Laptop 13 Pro and get a black screen with no POST: Check your interposer. Mine shipped with Type 1. The module needed Type 0. I swapped it and it booted instantly. Full walkthrough:
youtu.be/sZWXFvk0Nv8
The @azuread Entra ID passkey opt-out is one property: passkeyDynamicMigration.
It buys you time until February 1, 2027. It does not buy you out.
Here's how to set it, and what to do with the time:
youtu.be/O25lx74yi-c
YES!!!
Finally. Thanks, @FrameworkPuter
Glad I purchased a 64GB LPCAMM2 module in 2025...
Every tech conference hands you a backpack. The one thing everyone in the room already owns.
Now you have two and cannot ditch one without looking like a monster.
New video on @_Robopack keeping your Intune app customizations from pulling the same move on every update. youtu.be/6KoH0k5NJ9U
A device can look ready for Autopilot and still fail enrollment. Leftover @MSIntune object, dangling #Entra record, no profile assigned. I built a #PowerShell script that checks all four against Graph, for one serial or a whole CSV.
New video: youtu.be/isFwmz1XajY
Every tenant has a Global Admin who has been a Global Admin continuously since
2019.
That account is the most valuable phishing target you own.
Entra ID PIM makes the role eligible instead of active. Full walkthrough:
youtu.be/EULw10aYauo
The most dangerous apps in your @MSIntune tenant are the ones nobody deployed.
Installed by a user two years ago. Never patched. Still running. Not in any deployment you own.
@_Robopack Radar finds them. New video up.
youtu.be/v__xy6mgJx0
If your Intune inventory data looks stale, hitting Sync on the device does nothing.
The Device Inventory Agent does it's own thing.
New video breaks down the whole path, policy to portal.
@MSIntune
youtu.be/WMQJqPd8E9U
Steve Weiner | MVP retweeted
Why should you attend MMS Midway Edition?
It's THE Endpoint Management and Security event of the year, where industry-leading speakers and MVPs from around the globe connect with Microsoft PMs and developers for deep-dive technical sessions which you won't find anywhere else. And there are plenty of opportunities to network, swap stories, and maybe make some lifelong IT friends.
Register Today: mmsmoa.com/mms2026midway
October 25-28, 2026
#MMSMidway #MMSMOA #SanDiego #ITpros #MSIntune
The old @MSIntune device page was organized around where the data lived.
The new device view is organized around what you're actually trying to do at 11pm.
Public preview. One toggle. Full walkthrough: youtu.be/xKSJ70iRWOI
Most of your day is spent waiting on data you could have had instantly.
An inventory sync. An overnight report. A remote session to read one registry key.
@MSIntune device query: ask the device, get a live answer. It's in E3 and E5 now.
New video:
youtu.be/3VE8Ii3bng4
Quick Assist is fine for a one-off favor. But it has no RBAC and no audit log. Intune Remote Help has both, and as of July it is included in E3 and E5. You might already own it. Full setup video:
@MSIntune
youtu.be/HkNBWrl08uI
Starting tomorrow, let's get into @MSIntune Suite now that it's included with #Microsoft E3/E5
Steve Weiner | MVP retweeted
Intune Engineering fixed the IME Config issue!!... Nice job @IntuneSuppTeam
Do you remember when an IME update deleted the application config file and Win32 app installations suddenly stopped?
The Company Portal stayed stuck on “Downloading,” but underneath, the IME could no longer load the assemblies needed to validate the user token.
Microsoft has now returned to that config file in IME 1.103.101.0, and this time the fix goes further. The installer keeps a clean backup, restores the config when it is missing, and even replaces it when the contents have drifted.
It took a few attempts, but this finally appears to close both sides of the problem. I updated the original investigation with the new custom actions and exactly how the repair works.
Read the updated blog below!!!
#Intune #MSIntune #Windows11
patchmypc.com/blog/company-p…
You do not need to enroll a phone in Intune to protect company data on it. App protection policy plus one Conditional Access rule. The device stays unmanaged, the data stays protected. New video shows the full setup and the test that proves it.
youtu.be/UetCd8j6txw