All Articles
112 articles
Architecting Secure Intune Loaner Devices: Shared PC Mode, Web Sign-In, and Passwordless Authentication
Learn how to architect a secure, zero-touch loaner device strategy using Intune Shared PC Mode, Web * Yes, it fits perfectly. Let's output only the continuation.-sign-in, and passwordless FIDO2 authentication. Build automated lifecycle flows with Microsoft Graph.
M365Migrating Enterprise Print Servers to Microsoft Universal Print & Intune: The Cloud Print Architecture
A comprehensive engineering guide to decommissioning legacy Windows Print Servers, deploying Microsoft Universal Print, packaging Universal Print Printer Provisioning tools, and automating printer queue assignment via Intune.
ExchangeExchange Online EWS Retirement 2026: EwsEnabled & EwsAllowedAppIDs Enforcement Timeline, Discovery Queries & Migration Playbook
October 2026 EWS enforcement begins. Master organization-wide discovery, mailbox-level policy controls, and phased migration using EwsEnabled & EwsAllowedAppIDs whitelisting.
M365Automating Microsoft 365 Employee Offboarding: Shared Mailboxes, Token Revocation & Intune License Reclaim
A battle-tested PowerShell & Graph API automation pipeline to convert user mailboxes to Shared Mailboxes, grant manager delegation, invalidate Entra ID refresh tokens (StsRefreshTokenValidFrom), hide from GAL, and safely reclaim Intune/M365 licenses.
IntuneDiagnosing & Fixing Slow or Failed App/Script Installs During macOS ADE Enrollment in Intune
Enterprise guide to resolving 1–12+ hour app/script install delays and failures during macOS Automated Device Enrollment (ADE) in Intune. Covers APNs, assignment scoping, and diagnostic automation.
IntuneEnterprise Microsoft Edge Governance in Intune: Eliminating SSL Warnings, Trusted Locations & Policy Conflicts
A definitive enterprise guide to configuring Microsoft Edge via Intune Settings Catalog, deploying corporate Root CAs, eliminating internal SSL warning bypass prompts, managing Trusted Sites, and resolving Edge Security Baseline policy conflicts.
IntuneCompany Portal Disappearing on Windows 24H2: Root Causes, AppX Re-registration & Intune Remediation
Diagnose and fix Company Portal disappearing after Windows 24H2 upgrades. Root causes include AppX de-provisioning, IME sync gaps, and Store for Business deprecation. Step-by-step remediation with PowerShell & Graph API.
EntraMastering Windows LAPS with Microsoft Entra ID & Intune: Native Cloud Architecture, Post-Auth Rotation & Incident Forensics
The definitive engineering blueprint for migrating from legacy AD LAPS to native Windows Cloud LAPS in Microsoft Entra ID & Intune, configuring post-authentication automated password rotation (PAA), role-based access control (RBAC), and monitoring event log telemetry.
PowerShellAutomating Intune Hardware & Managed App Inventory Telemetry Extraction to PowerBI via Microsoft Graph API
A production blueprint for engineering an automated telemetry data pipeline from Microsoft Intune to PowerBI using PowerShell 7, Microsoft Graph API pagination, and Azure Blob storage for executive asset & vulnerability reporting.
IntuneMicrosoft Copilot Pages: Streamlined Access via Slash Commands & Library Tab—September 2026 Rollout
Starting September 2026, access existing Copilot Pages via the '/' menu in chat or the Library tab. 'Edit in Pages' now focuses on creation only. No admin controls required—change management guidance included.
SecurityPackaging & Deploying Complex Win32 Apps in Microsoft Intune: Advanced Detection Rules, Silent Transforms & Exit Code Architecture
A deep enterprise guide to packaging challenging desktop applications (CheckPoint, FortiClient, legacy MSI/EXE installers) with Microsoft Win32 Content Prep Tool, custom multi-condition PowerShell detection scripts, MST transforms, and return code management.
IntuneMastering Usage Location: Syncing On-Premises Active Directory Countries to Microsoft Entra ID
Learn how to resolve identity licensing and security gaps by mapping on-premises AD 'Country' attributes to Microsoft Entra ID 'Usage Location' using custom Synchronization Rules.