Use Multi Admin Approval with the Microsoft Graph API - Microsoft Intune
Learn how to update your automation scripts and applications to work with Multi Admin Approval enforcement on app-authenticated API calls in Microsoft Intune.
Get-Articles -Tag "PowerShell"
Results: 72 articles ← Get-Tags
Redefining Security for an AI Driven World
<P class="lia-align-justify">Vendors are being challenged to help customers address these challenges not as a point-solution vendor but as an <STRONG>end-to-end security and AI platform partner</STRON…
Sign up or sign in to Microsoft Intune - Microsoft Intune
How to sign up for a Microsoft Intune subscription or sign in to start with your subscription.
Create discovery scripts for custom compliance policy in Microsoft Intune - Microsoft Intune
Create scripts for Linux or Windows devices to discover the settings you define as custom compliance settings for Microsoft Intune.
Build a Local Microsoft Sentinel Triage Agent in VS Code (Copilot + MCP)
<P>Modern SOC work is not limited by data—it’s limited by the friction of collecting it. This post shows a local-first workflow that lets you investigate Microsoft Sentinel incidents from inside VS Co…
New Platform SSO with registration during Automated Device Enrollment on macOS
<P><STRONG>By Iris Yuning Ye, Product Manager – Microsoft Intune & Justin Ploegert, Principal Product Manager – Microsoft Entra</STRONG></P> <P>A new setting ‘Enable Registration During Setup’ fo…
Check This Out! (CTO!) Guide (April 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
Dynamically removing preinstalled Microsoft Store apps using native functionality
This week is all about a really nice addition to the native functionality to remove preinstalled Microsoft Store apps. That nice addition is the ability to dynamically remove any preinstalled MSIX/APP…
Fix Upgrade Issues in Specific Microsoft Intune Tunnel Versions using mstunnel-patch-2602 Script
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Triggering Azure Functions from Blob Storage Using Event Grid
<H1>Overview</H1> <P>Modern workloads increasingly rely on reacting to files as soon as they arrive in Azure Blob Storage. While Azure provides multiple ways to trigger computing from blob operations…
Known issue: Upgrading Microsoft Tunnel version 20260129.1
<P>We identified an upgrade issue with the early March release of Microsoft Tunnel version 20260129.1 that caused servers to become stuck and unable to complete the upgrade. The issue can be resolved …
Device management - Microsoft Intune
Run remote actions, manage scripts and remediations, view device inventory, and export reports in Microsoft Intune.
Use Remediations to Detect and Fix Support Issues - Microsoft Intune
Learn more about Remediations in Microsoft Intune, including what Remediations are and view any prerequisites and licensing requirements. Also, learn how to deploy built-in and custom remediation scri…
Introducing selective response actions for high-value assets in Microsoft Defender
<P>Deploying Microsoft Defender on high-value assets (HVAs) such as domain controllers, ADFS servers, and other Tier-0 systems, requires a thoughtful approach to balance strong protection with operati…
What’s new in Microsoft Intune – April
<P><SPAN data-contrast="auto">April's Intune updates focus on three areas administrators have consistently asked us to improve: fresher device data, streamlined identity foundations across platforms, …
Speed where it matters: How Microsoft Intune helps IT prioritize time-sensitive actions
<P><STRONG>By: Albert Cabello Serrano | Principal Product Manager - Microsoft Intune</STRONG></P> <P><EM>A closer look at how Intune delivers updates to devices and the investments we’re making to he…
Use Shell Scripts on macOS Devices in Microsoft Intune - Microsoft Intune
Create, assign, monitor, and troubleshoot shell scripts for macOS devices in Microsoft Intune.
Hardening OpenClaw on AKS: Mitigating Container Escapes with Kata microVM Isolation
<H2>What is OpenClaw, and what security challenges does it pose with container escapes?</H2> <P>OpenClaw is an open-source autonomous AI agent designed for power users and developers to automate task…
How to Manage RC4 Hardening – Definitive Guide
<H1>How to Manage RC4 Hardening – Definitive Guide</H1> <P>This article is a technical continuation of the RC4 deprecation / Kerberos hardening work I covered in my <A class="lia-internal-link lia-in…
Use custom compliance settings for Linux and Windows devices in Microsoft Intune - Microsoft Intune
Manage custom compliance settings for Linux and Windows devices by using JSON files and discovery scripts in Intune.
Extracting and Auditing Azure DevOps Permissions at Scale with PowerShell
<H1>Introduction</H1> <P>Azure DevOps organizations accumulate permissions over time. Groups are created, users are added, Entra (Azure AD) groups are nested into project groups, and team structures …
Device Action: Quick Scan - Microsoft Intune
Learn how to initiate on demand Microsoft Defender quick scan with Microsoft Intune.
Strengthening Identity Resilience: A Deep Dive into Microsoft Entra Backup and Recovery
<P>In the modern security landscape, we often say that "Identity is the new perimeter." We spend significant resources on Conditional Access, Phishing-Resistant MFA, and Identity Protection to keep th…
Running Text to Image and Text to Video with ComfyUI and Nvidia H100 GPU
<P>This guide provides instructions on how to set up and run <STRONG>Text to Image</STRONG> and <STRONG>Text to Video</STRONG> generation using <STRONG>ComfyUI</STRONG> with an <STRONG>Nvidi…
Running multimedia AI models on Container Apps with Serverless GPU (A100 & T4)
<P>A video format is available for watching.</P> <div data-video-id="https://www.youtube.com/watch?v=WMYlQNLkMJQ/1776705195051" data-video-remote-vid="https://www.youtube.com/watch?v=WMYlQNLkMJQ/1776…
What Changed in RC4 with the January 2026 Windows Update and Why it is Important
<P>In case you haven’t heard, RC4 is not secure and has been deprecated. In this article, I will discuss what changed with the January 2026 Windows Update and why it is important to start auditing and…
Error and status codes in Microsoft Intune - Azure - Intune
See a list of the errors, status code, descriptions, and resolutions when using MDM managed devices, getting access to company resources, errors on iOS/iPadOS devices, and OMA response errors in Micro…
Troubleshoot the Microsoft Intune certificate connector and event IDs - Intune
Troubleshoot the Microsoft Intune certificate connector by reviewing Event IDs and descriptions, and review diagnostic codes for the Intune connector service.
Maintaining Azure Public IP Inventory by Retrieving Exact Deleted Public IP Using Activity Logs
<P><SPAN data-contrast="auto">Azure Activity Logs provide strong visibility into resource lifecycle operations across a subscription. Among these are lifecycle events related to </SPAN><SPAN data-cont…
Microsoft Defender for Endpoint (MDE) — Custom Role Design for Troubleshooting Mode–Only Access
<P><STRONG>1) Introduction</STRONG><STRONG> </STRONG></P> <P>In customer environments, <STRONG>Security Operations (SOC)</STRONG> teams and <STRONG>Windows infrastructure</STRONG> teams frequent…
Auditing FIDO2 authentication for Windows Sign-in
<P>Hello everyone, my name is Liju and I am a Cloud Solutions Architect helping customers secure their cloud and hybrid identities. With this post, I would like to show how FIDO2 security key authenti…
How to enable HTTPS support for Microsoft Connected Cache for Enterprise and Education
<P><STRONG>By: Aditya Middha | Product Manager 2 - Microsoft Connected Cache<BR /><BR /></STRONG></P> <P>Starting on <STRONG>June 16<SUP>th</SUP>, 2026</STRONG>, or soon after, Intune will enfor…
Intune my Macs: Accelerating macOS proof of concepts with Microsoft Intune
<P><STRONG>By: Neil Johnson and Chris Kunze - Principal Product Managers | Microsoft Intune</STRONG><BR /><BR /></P> <P><SPAN data-contrast="auto">Intune provides a broad and mature set of capabiliti…
Check This Out! (CTO!) Guide (March 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
Implementing Intune RBAC and Scope Tags for Zero Trust and Least Privilege
<P>If you’re rolling out Microsoft Intune at scale, the hardest part usually isn’t creating policies—it’s making sure the <EM>right</EM> people can manage the <EM>right</EM> things, without turning ev…
Secure apps: Where people, data, and AI intersect
<P><SPAN data-contrast="auto">At RSAC, Microsoft is highlighting a foundational truth: more and more AI interactions—whether through Copilot, an agent, or an automated workflow—ultimately run through …
Support tip: Upcoming Microsoft Intune network changes
<P><STRONG>3/18/2026 Update: </STRONG><EM>The rollout of the Intune network changes described in this blog are in progress across each workload. Additionally, we are beginning to slowly rollout to eac…
Announcing three new partners for multi-tenant management with Microsoft Intune
<H4 aria-level="3"><SPAN data-contrast="none"><SPAN data-ccp-parastyle="heading 3">The challenge: </SPAN><SPAN data-ccp-parastyle="heading 3">S</SPAN><SPAN data-ccp-parastyle="heading 3">caling&n…
Remove Unnecessary Azure Storage Account Dependencies in VM Diagnostics
<P>In a recent engagement with a customer willing to decrease Shared Access Signature (SAS) tokens usage in their Storage Accounts, we found out that a good amount of SAS token-based requests was asso…
Best practices for securing Microsoft Intune
<P>Microsoft Intune gives IT and security teams a powerful way to manage endpoints at scale - deploying apps, enforcing security baselines, and configuring the settings that keep users productive and …
Bulk enable Azure Arc Connected Machine Agent Automatic Upgrade (Tag Scoped) with Azure Cloud Shell
<P><STRONG>Overview</STRONG></P> <P>Keeping the <STRONG>Azure Arc Connected Machine agent</STRONG> current is a foundational hygiene task for any hybrid server estate, especially when you’re operatin…
Check This Out! (CTO!) Guide (February 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
The Nightmare of renewing NDES Enrollment Agent Certificates
<H1>NDES EA Certificates – Quick Recap</H1> <P>By default, three version 1 certificate templates are assigned to your Certification Authority by the configuration routine of the NDES service:</P> <O…
Transparent and customizable onboarding for modern and legacy Windows devices
<P>Onboarding all devices in your estate is paramount for strong security posture. In fact, Microsoft Threat Intelligence research shows that in the majority of ransomware attacks, the spreader machin…
What's New in Microsoft Intune – February
<P><SPAN data-contrast="auto">Every IT environment has workarounds. Policies are duplicated instead of edited because there's no approval process. Apple software updates are pushed to every …
Protect browser-based work on agency-managed Windows PCs
<P><SPAN data-contrast="auto">From SaaS apps and internal web portals to AI-powered tools, the browser is now a major workspace for many employees and contractors alike. This shift has introduced new …
Managed Identity on SQL Server On-Prem: The End of Stored Secrets
<H4>The Problem with Credentials in SQL Server</H4> <P>For an On-Premises SQL Server to access Azure services, you traditionally need to store secrets:</P> <H5>Common Scenarios Requiring Credentials…
Windows Hello for Business - Registered Methods and Last-used Method
<P>Hi folks – Mike Hildebrand here! Today, I bring you a short post about gaining more awareness of Windows Hello for Business (WHFB) configuration information from across your fleet of Windows …
Introducing library management in Microsoft Defender
<P>In dynamic investigation environments, preparation and agility are key. Security analysts working with live response in Microsoft Defender often rely on scripts and tools to triage, investigate, an…
Check This Out! (CTO!) Guide (January 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
What's New in Microsoft Intune – January 2026
<P><SPAN data-contrast="auto">When trees lose their leaves, you see the structure beneath. The branches you couldn’t see. The shape that was always there.</SPAN></P> <P><SPAN data-contrast="auto">Jan…
Admin tasks in Microsoft Intune: Centralized control today, AI-ready for tomorrow
<P><SPAN data-contrast="auto">IT admins make daily, quiet decisions that determine whether an organization stays secure, compliant, and productive. They review privilege requests, security remediation…
What's in store for Intune at Microsoft Technical Takeoff 2026
<P><SPAN data-contrast="auto">It’s almost time for Microsoft Technical Takeoff, our month‑long digital skilling event designed to help IT admins and technical decision-makers go deeper with …
What's new in Microsoft Intune: December 2025
<P>Following Microsoft Ignite 2025, I caught up with colleagues and Intune MVPs who made the trip to San Francisco. There was a lot to talk about, but one conversation stood out: When I asked what sur…
Essential Intune reading list: MVP community content for 2025
<P>As we head into the holiday season, I wanted to take a moment to celebrate something truly special: the incredible contributions from our Microsoft Intune MVP community this year. Last year, I rele…
What's new in Microsoft Intune at Ignite
<P><SPAN data-contrast="auto">Welcome to Microsoft Ignite, where the future of IT is being reimagined. Today we’re unveiling how Microsoft Intune is transforming endpoint management by putting AI at i…
Ignite 2025: Microsoft Defender now prevents threats on endpoints during an attack
<P>This year at Microsoft Ignite, Microsoft Defender is announcing exciting innovations for endpoint protection that help security teams deploy faster, gain more visibility, and proactively block atta…
From the frontlines: Empowering call center agents with Windows 365 Frontline
<P><STRONG>By: Tania Lima – Sr Product Manager | Windows 365</STRONG></P> <P> </P> <P><EM>Editor’s Note - Updated 11/19/25: The new <STRONG>User Experience</STRONG> <STRONG>Sync </STRONG>f…
Simplifying compliance remediation with Microsoft Intune and Defender on iOS/iPadOS
<P><STRONG>By: Harish S | Sr. Product Manager - Microsoft Defender & Rishita Sarin | Product Manager 2 - Microsoft Intune</STRONG></P> <P> </P> <P><STRONG>One tap to compliance:</STRONG> In…
10 ways Microsoft Intune supports a smooth upgrade to Windows 11
<P><EM>Upgrade to Windows 11 with confidence — 10 Intune tips from Microsoft engineers, MVPs, and guides.</EM></P> <P>Windows 10 reached end of support on <A href="https://aka.ms/Win10EOS-1014" targe…
Day zero support for iOS/iPadOS and macOS 26
<P>With Apple's release of iOS/iPadOS and macOS 26 Tahoe, we’ve been working hard to ensure that Microsoft Intune provides day zero support for Apple’s latest operating systems (OS) so that existing f…
Deep dive into Windows Autopilot device preparation: How to deploy and when to use it
<P><STRONG>By: Maggie Dakeva - Sr. Product Manager | Microsoft Intune</STRONG></P> <P> </P> <P>Provisioning devices at scale used to be complex and time-consuming, especially with today’s remot…
End of Windows 10 Support: What Defender Customers Need to Know
<P>As of today, October 14, 2025, Microsoft is officially ending support for Windows 10. This means that Windows 10 devices will no longer receive security or feature updates, nor technical support fr…
What’s New in Microsoft Intune: September 2025
<P>The most resilient IT environments aren't just reactive, they're built with hardware-level contingencies, flexible deployment methods, and automation that works asynchronously. Behind every new cap…
Support tip: Troubleshoot device cap reached when enrolling devices into Microsoft Intune
<P><STRONG>By: Premkumar N – Security Customer Experience Engineer | Microsoft Intune</STRONG></P> <P> </P> <P>When Microsoft Entra or Intune device limits are reached, users will encounter an …
Multi-tenant endpoint security policies distribution is now in Public Preview
<P>We’re excited to announce a key milestone in Defender’s multi-tenant management journey—Microsoft Defender for Endpoint security policies can now be distributed across multiple tenants from the Def…
Defender for Endpoint successfully passes the AV-Comparatives 2025 Anti-Tampering Test
<P aria-level="2"><U><STRONG><SPAN data-contrast="none"><SPAN data-ccp-parastyle="heading 2">The rise of tampering</SPAN><SPAN data-ccp-parastyle="heading 2"> attacks</SPAN></SPAN></STRONG></U></P> <…
Defender for Endpoint extends support to ARM-based Linux servers
<P>As the demand for ARM64 servers continues to rise, we are thrilled to announce that Microsoft Defender for Endpoint now supports ARM64 based Linux servers in GA. This update marks a new milestone i…
Block malicious command lines with Microsoft Defender for Endpoint
<P><SPAN data-contrast="auto">The modern </SPAN><SPAN data-contrast="auto">threat landscape </SPAN><SPAN data-contrast="auto">is rapidly evolving</SPAN><SPAN data-contrast="auto">, with new attack str…
IC3: From WNS to Real Time Device and IME Actions
IC3 introduces a real-time communication path in Intune, reducing reliance on WNS and timers and allowing apps, scripts, and device actions to execute immediately. The post IC3: From WNS to Real Time …
Adobe Acrobat Patching: A Practical Guide
A Brief History of Adobe Adobe was founded in 1982 with PostScript, laying the foundation for digital document rendering and enterprise printing. Early adoption through the Apple LaserWriter brought A…
Intune Timing Demystified: What Actually Happens Behind the Scenes
Policies, scripts, and Win32 apps do not follow the same path in Windows. Understanding those paths explains Intune timing. The post Intune Timing Demystified: What Actually Happens Behind the Scenes …