Check This Out! (CTO!) Guide (October 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
Get-Articles -Tag "Azure"
Results: 185 articles ← Get-Tags
Easily enabling Sysmon in Windows 11
This week is all about Sysmon and about enabling Sysmon on the latest version of Windows 11. Sysmon itself is not new, but the direct integration within Windows 11 is. Starting in February 2026, Sysmo…
Finding the Elusive MDE PUA Audit Events on Linux
<P>Potentially Unwanted Applications, or PUA, they aren't necessarily malware, but they are applications you probably don't want running across your environment either. </P> <P><SPAN data-…
Easily managing Windows App on Windows devices
This week is all about easily managing the Windows App on Windows devices. In the early days, the Windows App was pretty straightforward. There were some configuration settings available within the Wi…
MS Entra ID Introduce CSP Protections to Block Unauthorized external Script Injection and Help Prevent XSS Attacks
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Centrally manage Admin Tasks - Microsoft Intune
Centrally manage admin tasks in Microsoft Intune. Use the unified Admin tasks view to organize and act on administrative tasks from Device Offboarding, Endpoint Privilege Management, and more.
From Domain Lists to Decisions: Scaling WHOIS Threat Intelligence with MDTI and Microsoft Graph
<P><STRONG>The real problem isn't WHOIS. It's what WHOIS costs you at scale.</STRONG></P> <P>Ask any SOC analyst whether WHOIS data is useful and they'll say yes without hesitation. Registrant emails…
CoreDNS in AKS: service discovery, upstream DNS, and failover
<DIV class="mce-toc"> <H2>Table of Contents</H2> <UL> <LI><A href="#community--1-mcetoc_1k3cldkgu_1" target="_self">1. Where CoreDNS fits in AKS</A></LI> <LI><A href="#community--1-mcetoc_1k3cldkg…
Unified User-Centric Access Reviews Across Multiple Resources in Microsoft Entra ID
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Microsoft Entra ID Ends SMS First-Factor Sign-In for Workforce Tenants
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Moving from Windows Autopilot to Windows Autopilot device preparation
<P><STRONG>By: Maggie Dakeva, Senior Product Manager - Microsoft Intune</STRONG></P> <P>Organizations have spent years refining Windows Autopilot deployments. Profiles, Enrollment Status Page setting…
Locking down PAWs internet access when GSA drops
<P><STRONG>By: Christian Friedel-Jain - Sr. Security Consultant | James Noyce - Sr. Security Solution Engineer </STRONG></P> <H1><SPAN class="lia-text-color-15">Introduction</SPAN></H1> <P>Priv…
Deploy Azure Virtual Desktop Agents for Remote Help using Intune
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Microsoft Entra Connect Sync – Mandatory Upgrade to Version 2.5.79.0 Before 30th September 2026
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Check This Out! (CTO!) Guide (September 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
Azure Virtual Desktop Hybrid to Run Session Hosts On-Premises Without Full Cloud Migration
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
From GPO to Microsoft Intune: A practical guide to cloud-first policy management
<P><STRONG>By: Per Larsen - Senior Product Manager | Microsoft Intune</STRONG></P> <P>For many organizations, Group Policy Objects (GPOs) remain an important part of Windows configuration. As device …
Introducing device association for Windows Autopilot device preparation
<P><STRONG>By: Maggie Dakeva, Senior Product Manager - Microsoft Intune</STRONG></P> <P>We’ve heard organizations want Windows deployment to be simple for employees and predictable for IT admins. But…
Remote Help on Windows: Unattended Support with Remote Sign-In Is Here
<P><STRONG>By: Rodolfo Bermudez | Sr. Product Manager & Kara Wang | Product Manager 2 - Microsoft Intune</STRONG></P> <P>Helpdesk teams have long asked for a way to remotely troubleshoot Windows …
Configure Delivery Optimization for Windows to save bandwidth and speed up deployments
<P><STRONG>By: Carlos Diaz - Sr. Product Manager and Jason Sandys - Principal Product Manager | Microsoft Intune<BR /><BR /></STRONG></P> <P><A class="lia-external-url" href="https://learn.microsoft.…
Automating Bulk Graph API Permission Assignment in Microsoft Entra App Registrations
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Migrate Entra memberOf-Based Configurations to Protect Teams SharePoint Conditional Access Group-Based Licensing etc
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Check This Out! (CTO!) Guide (August 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
Securing Enterprise AI Agents with Microsoft Sentinel
<H3>1. Introduction</H3> <P>Enterprise adoption of Generative AI is accelerating rapidly through Microsoft 365 Copilot, Copilot Studio, Azure AI Foundry Agents, Security Copil…
Using Azure Virtual Desktop single-session with Microsoft Intune - Microsoft Intune
Guidelines for using Azure Virtual Desktop single-session with Microsoft Intune.
Configure MS Entra Kerberos TGT Retrieval During Windows Sign-In using Intune for Entra-Joined and Hybrid-Joined Devices
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Device Code Flow: The Gift That Keeps on Giving — To Attackers
<P><STRONG>Tags:</STRONG> Microsoft Entra ID, Conditional Access, Device Code Flow, OAuth, Azure Arc, Azure Migrate, Identity Security, Zero Trust</P> <H2 id="introduction">Introduction</H2> <P>Devi…
Designing Intune enrollment for frontline workers: Choosing the right path for real-world devices
<P><STRONG>By: Shawn Catlin – Senior Product Manager | Microsoft Intune and Sucheta Gawade, Microsoft MVP (Azure & Security / Intune)</STRONG></P> <P><EM>Practitioner perspective from Sucheta Gaw…
Understanding Microsoft 365 Copilot Risk Surface and Mitigations
<P>It’s a shift that carries important security implications organizations should understand before scaling deployment. Customers with Microsoft 365 E5 licensing may already have access to m…
Should You Use the New Microsoft Entra Tenant Governance or Azure Lighthouse? (part 3 of 3)
<P>In <A href="https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/implementing-azure-lighthouse-a-technical-guide-for-service-providers-and-enterp/4490592" target="_blank"…
How to Evaluate Third-Party Patching Solutions Beyond Price
Comparing third-party patching solutions based solely on licensing cost can lead to expensive mistakes. This article explores the key questions IT teams should ask when evaluating patching vendors and…
Company Portal: Error Loading Apps
Some time ago, the Company Portal suddenly failed to load its apps. In this blog, I explain what happened behind the scenes, how the IWService path works, why the issue could affect only one Intune Az…
Azure Lighthouse: Bring Your Partner In, Without Letting Their Identities In (part 2 of 3)
<P>See part 1 – <A href="https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/implementing-azure-lighthouse-a-technical-guide-for-service-providers-and-enterp/4490592" target="_b…
New Privileged Token Context Telemetry Boosts Advanced Hunting in Microsoft Defender
<BLOCKQUOTE> <P><STRONG>In brief:</STRONG> Defenders can now easily identify <STRONG>logons involving high-privilege identities or special logon flags</STRONG> to better hunt threats and fine-tu…
Customer Offerings: Solution Optimization for GitHub Copilot
<H1>Introduction</H1> <P>As Microsoft Cloud Solution Architects, we are increasingly asked by engineering leaders, platform teams, finance stakeholders, and GitHub administrators how they can scale G…
Check This Out! (CTO!) Guide (July 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
When Arc Goes Silent: Turning Visibility Gaps into SOC Action
<P>Hybrid blind spots rarely announce themselves. They appear when an <STRONG>Azure Arc-enabled server</STRONG> drops out, health signals go stale, and the SOC loses confidence in monitoring…
Build a patch strategy for today’s threat pace with Microsoft
<P>AI-accelerated vulnerability discovery and remediation are changing how organizations manage risk. As discussed in Pavan Davuluri’s recent <A class="lia-external-url" href="https://blogs.windows.co…
Azure Database Security Newsletter - July 2026
<P>AI agents are changing how applications interact with data, and database security needs to evolve with them. In this July 2026 edition of the Azure Database Platform Security Newsletter, we focus o…
Turning Azure Policy Signals into Actionable Governance Insights
<P><EM>Most Azure Policy reporting stops at compliance status. Useful, yes — but not enough. When a control fails, teams need to know what failed, why it matters, and who should act.</EM></P> <P>That…
Windows 365 Boot
<P>Hi folks – Mike Hildebrand here! It’s the July 4<SUP>th</SUP> holiday here in the good 'ol USA and happens to also be our country’s 250<SUP>th</SUP> birthday … and where I live, that means it…
Restore Deleted Microsoft Entra Devices Without Losing BitLocker or LAPS Data using Device Soft Delete
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Building C# and C++ Apps with GitHub Copilot CLI and Visual Studio 2026
<P>Most engineers learned Visual Studio through a mouse-driven workflow — <EM>New Project</EM> — open a project, click through a few dialogs, press F5. The GitHub Copilot <STRONG>CLI</STRONG> inverts …
Overview of Windows LAPS with Microsoft Intune - Microsoft Intune
Learn how you can use Microsoft Microsoft Intune and application protection policy to manage the local administrator accounts on Windows devices. Through the Windows LAPS CSP, back up accounts and pas…
Migrating frontline mobile devices: Identity considerations for assigned and shared devices
<P><STRONG>By: Carol Burns - Principal Product Manager | Microsoft Intune and Sucheta Gawade, Microsoft MVP (Azure & Security / Intune)</STRONG></P> <P><EM>Practitioner perspective from Sucheta G…
Advanced Microsoft Intune capabilities now available in Microsoft 365 E3 and E5
<P>Across industries, customers are already using advanced Microsoft Intune Suite capabilities to solve real endpoint challenges, such as reducing standing privilege, improving IT response times, mode…
Streamlining macOS security: Automatically enable AutoFill after Platform SSO registration
<P><STRONG>By: Chris Kunze - Principal Product Manager | Microsoft Intune</STRONG></P> <P>Platform single sign-on (SSO) improves how macOS devices establish identity with Microsoft Entra ID, enabling…
Entra ID SSPR Improves Security with Registered Authentication Methods | Impact on Unregistered Users Starting September 2026
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Authenticating AWS Workloads to Azure Functions using Workload Identity Federation
<P> </P> <H5><SPAN data-contrast="none">What you will learn:</SPAN></H5> <UL> <LI>What Workload Identity Federation is and how it works</LI> <LI>How to set up trust between AWS and Microsoft …
What’s new in Microsoft Intune – June
<P>AI agents are beginning to act on behalf of users, interact with company data, and even make decisions independently. Trusting AI depends on three endpoint fundamentals: they must be compliant, up …
Update Windows BIOS features using DFCI MDM policies - Microsoft Intune
Learn more about the Device Firmware Configuration Interface (DFCI) profile to manage UEFI settings in Microsoft Intune. To use DFCI profiles, create Microsoft Entra security groups, the Windows Autop…
Email settings for Windows devices in Microsoft Intune - Microsoft Intune
Create a device configuration email profile that that uses Exchange servers, and retrieves attributes from Microsoft Entra ID. You can also enable SSL, and synchronize email and schedules on Windows 1…
Android Enterprise email settings in Microsoft Intune - Microsoft Intune
Create device configuration email profiles that use Exchange servers, and retrieve attributes from Microsoft Entra ID. Enable SSL or SMIME, authenticate users with certificates or username/password, a…
Configure Email settings for iOS/iPadOS devices in Microsoft Intune - Microsoft Intune
See a list of all the email settings you can configure and add to iOS and iPadOS devices in Microsoft Intune, including using Exchange servers, and getting attributes from Microsoft Entra ID. You can …
Set up Microsoft Entra ID - Microsoft Intune
Learn how to create and prepare your Microsoft Entra tenant for an education environment.
Add PowerShell Scripts to Windows Devices in Microsoft Intune - Microsoft Intune
Create and run PowerShell scripts, assign the script policy to Microsoft Entra groups, and use reports to monitor the scripts. See the steps to delete scripts you add on Windows devices in Microsoft I…
Understand Intune and Microsoft Entra device limit restrictions - Microsoft Intune
Learn the differences between Intune device limit restrictions and Microsoft Entra device limit restrictions.
Jamf Managed Device Compliance with Microsoft Entra ID - Microsoft Intune
Integrate Jamf Pro with Microsoft Intune to report device compliance to Microsoft Entra ID.
Check This Out! (CTO!) Guide (May/June 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
Microsoft Security Copilot: AI-Driven Security Operations at Greater Scale
<P class="lia-align-justify">At its core, Security Copilot is <STRONG>built to enhance every facet of security operations at machine speed</STRONG>. It translates a vast array of inputs (Microsoft’s c…
Redo Workplace Join for Android Enterprise devices in Intune - Microsoft Intune
Learn how to redo Workplace Join (re-WPJ) on an Android Enterprise device that's already enrolled in Intune but needs Azure AD registration completed.
Deploying Platform SSO for pre macOS 26 with Microsoft Intune: Lessons Learned
<P><STRONG>By: Naveen Akkugari, Sr. Service Engineer and Michael Griswold, Principal Service Engineering Manager | Microsoft Intune</STRONG></P> <H1><STRONG>Who we are</STRONG></H1> <P>Our internal …
IT experts weigh in: Advanced Intune capabilities coming to Microsoft 365 E3 and E5
<P>Back on December 4th, we shared that <A class="lia-internal-link lia-internal-url lia-internal-url-content-type-blog" href="https://techcommunity.microsoft.com/blog/microsoftintuneblog/microsoft-36…
Security Copilot RBAC for Embedded Experience in Unified Security Platform
<P><STRONG>Introduction</STRONG></P> <P>The evolution of Security Operations Centers (SOC) is increasingly driven by AI-powered capabilities that improve efficiency, accuracy, and response time. Micr…
Triage vulnerabilities with the Vulnerability Remediation Agent, now in public preview
<P>As automation and AI accelerate the pace of vulnerability discovery, the window between disclosure and exploitation continues to shrink. For IT and security teams, the challenge is no longer just <…
Automating Daily MDE Compliance Monitoring Across Azure VMs
<H2>The Problem We’re Solving</H2> <P>Most security teams have no automated way to know when a VM silently falls out of MDE coverage, whether because the agent stopped, the VM was newly provisioned w…
Reduce unnecessary internet exposure with Microsoft Defender
<P>In today’s threat landscape, <STRONG>internet exposure</STRONG>, i.e. devices that allow inbound connectivity from the public internet, continues to be a major vector for initial access and comprom…
At-Scale Failure Reporting for Azure Update Manager
<H3><STRONG>Introduction</STRONG></H3> <P>Azure Update Manager simplifies patching across Azure virtual machines and Azure Arc-enabled servers by providing a centralized platform for patch assessment…
Introducing scheduled antivirus scans on Microsoft Defender Linux
<P>Security teams rely on scheduled scans to ensure consistent coverage across devices, detect dormant or missed threats, and meet compliance requirements. However, managing scans on Linux has traditi…
MDOP is out of support: What to do next with Microsoft Intune
<P><STRONG>By: Joe Lurie – Sr. Product Manager | Microsoft Intune</STRONG></P> <P>On April 14, 2026, the <A class="lia-external-url" href="https://learn.microsoft.com/microsoft-desktop-optimization-p…
Route logs to Azure Monitor using Microsoft Intune - Microsoft Intune
Use Diagnostics Settings to send audit logs and operational logs in Microsoft Intune to Azure Storage account, Event Hubs, or Log Analytics. Choose how long you want to keep the data, and see some est…
What’s new in Microsoft Intune – May
<P>Whether it's Android app deployment, identity setup on macOS, certificate authority renewal, or faster compliance evaluations, the throughline is the same: less friction for the IT admins doing the…
Explicit Forward Proxy in Microsoft Entra Internet Access Helps Secure VDI BYOD and Clientless Browsing
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Redefining Security for an AI Driven World
<P class="lia-align-justify">Vendors are being challenged to help customers address these challenges not as a point-solution vendor but as an <STRONG>end-to-end security and AI platform partner</STRON…
Microsoft Enables Entra Writeback for Cloud-Managed Remote Mailboxes to Help Remove Last Exchange Server
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Using Azure Virtual Desktop multi-session with Microsoft Intune - Microsoft Intune
Guidelines for using Azure Virtual Desktop multi-session with Microsoft Intune
Add users to Microsoft Intune - Microsoft Intune
Learn how to add and managing Microsoft Entra user accounts from within Microsoft Intune.
Azure Files Goes Cloud-Native with Entra-Only Identities and Managed Identities
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Microsoft Entra Global Secure Access Blocks Sensitive File Uploads to ChatGPT and Gmail
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Microsoft Entra ID Increases Conditional Access Policy Limit from 195 to 244 for Complex Security Environments
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Build a Local Microsoft Sentinel Triage Agent in VS Code (Copilot + MCP)
<P>Modern SOC work is not limited by data—it’s limited by the friction of collecting it. This post shows a local-first workflow that lets you investigate Microsoft Sentinel incidents from inside VS Co…
Complete Guide to Microsoft Entra ID Authentication Methods and Passkeys
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
New Platform SSO with registration during Automated Device Enrollment on macOS
<P><STRONG>By Iris Yuning Ye, Product Manager – Microsoft Intune & Justin Ploegert, Principal Product Manager – Microsoft Entra</STRONG></P> <P>A new setting ‘Enable Registration During Setup’ fo…
TLS Certificate Pinning and Best Practices in Azure Open-Source Relational Databases
<H2 aria-level="1"><SPAN data-contrast="none"><SPAN data-ccp-parastyle="heading 1">TLS certificate pinning in </SPAN><SPAN data-ccp-parastyle="heading 1">Azure Database for PostgreSQL and MySQL</SPAN>…
Platform SSO scenarios for macOS devices - Microsoft Intune
Use Microsoft Intune to configure common Platform SSO scenarios for macOS devices. You can enable Kerberos SSO to on-premises Active Directory and cloud-based Microsoft Entra ID, use Touch ID biometri…
Check This Out! (CTO!) Guide (April 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
MS Entra Face Check Strengthens Identity Verification for Onboarding Access Requests and Account Recovery
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Triggering Azure Functions from Blob Storage Using Event Grid
<H1>Overview</H1> <P>Modern workloads increasingly rely on reacting to files as soon as they arrive in Azure Blob Storage. While Azure provides multiple ways to trigger computing from blob operations…
EntraOps v0.7.0 Released with Improved Microsoft Entra Tenant Governance and Role Visibility
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Automate Passkey Adoption at Scale with Conditional Access Optimisation Agent in Microsoft Entra
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Require multifactor authentication for Intune device enrollment - Microsoft Intune
How to require multifactor authentication in Microsoft Entra ID for Intune device enrollment.
Unified Identity Risk Signals in Microsoft Entra ID Protection Enhance User Risk Detection
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Migrating frontline mobile devices: Aligning stakeholders before real-world testing
<P><STRONG>By: Carol Burns - Principal Product Manager | Microsoft Intune and Sucheta Gawade, Microsoft MVP (Azure & Security / Intune)</STRONG></P> <P><EM>Practitioner perspective from Sucheta G…
Modernised SSO for Linux in Microsoft Intune with Entra ID Integration
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Enable MDM automatic enrollment for Windows - Microsoft Intune
Enable Intune automatic enrollment for Windows devices joining or registering with your Microsoft Entra ID.
Set up automated device enrollment for shared device mode - Microsoft Intune
Learn how to set up Apple automated device enrollment for iOS/iPadOS devices in shared device mode, a feature of Microsoft Entra.
What’s new in Microsoft Intune – April
<P><SPAN data-contrast="auto">April's Intune updates focus on three areas administrators have consistently asked us to improve: fresher device data, streamlined identity foundations across platforms, …
Hardening OpenClaw on AKS: Mitigating Container Escapes with Kata microVM Isolation
<H2>What is OpenClaw, and what security challenges does it pose with container escapes?</H2> <P>OpenClaw is an open-source autonomous AI agent designed for power users and developers to automate task…
Add groups to organize users and devices for Microsoft Intune - Microsoft Intune
Create Microsoft Entra groups to organize users and devices for use with Microsoft Intune.
Use third-party certification authorities (CA) with SCEP in Microsoft Intune - Microsoft Intune
In Microsoft Intune, you can add a vendor or third-party certificate authority (CA) to issue certificates to mobile devices using the SCEP protocol. In this overview, a Microsoft Entra application giv…
Microsoft Explains How Identity and Access Management is Scaling for AI Adoption in Entra
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Extracting and Auditing Azure DevOps Permissions at Scale with PowerShell
<H1>Introduction</H1> <P>Azure DevOps organizations accumulate permissions over time. Groups are created, users are added, Entra (Azure AD) groups are nested into project groups, and team structures …
Assess Secure Boot status with Microsoft Defender
<H4><STRONG>Understanding the Secure Boot certificate challenge</STRONG></H4> <P>Secure Boot is a foundational security feature that validates the integrity of your device's boot process, ensuring on…
What’s New in Microsoft Entra Agent ID for Managing and Governing AI Agents at Scale
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Microsoft Entra License Usage Insights Six-Month Trends Active vs Guest Reporting and Copilot Suggestions
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
Designing Outbound Connectivity for "Private Subnets" in Azure
<P><STRONG>Why Private Subnets Change Everything</STRONG></P> <P>Historically, Azure virtual machines relied on <EM>default outbound internet access</EM>, where the platform automatically assigned a …
Add Microsoft 365 Apps to Windows Devices Using Microsoft Intune - Microsoft Intune
Learn how you can use Microsoft Intune to install Microsoft 365 apps on Windows devices.
4 Key Ways Microsoft Intune Helps Reduce Vulnerability Risk and Improve Security Posture
Hello - Here is the new HTMD Blog Article for you. Enjoy reading it. Subscribe to YouTube Channel https://www.youtube.com/c/AnoopCNairSCCM?sub_confirmation=1 and LinkedIn page for latest updates htt…
As vulnerability discovery moves at AI speed, keeping current is foundational to reduce exposure
<P><STRONG>Note: There’s a known issue with the Microsoft 365 Apps card on the dashboard that we’re actively working to address.</STRONG></P> <P>Recent advances in automation and AI are accelerating …
Configure Platform SSO for macOS devices - Microsoft Intune
Use Microsoft Intune to configure Platform SSO and deploy the configuration to your macOS devices. Platform SSO enables single sign-on (SSO) using Microsoft Entra ID with the Secure Enclave, smart car…
Create an Intune Report From the OData Feed With Power BI - Microsoft Intune
Create a treemap visualization using Power BI Desktop with an interactive filter from the Intune Data Warehouse API.
Strengthening Identity Resilience: A Deep Dive into Microsoft Entra Backup and Recovery
<P>In the modern security landscape, we often say that "Identity is the new perimeter." We spend significant resources on Conditional Access, Phishing-Resistant MFA, and Identity Protection to keep th…
Manage and secure devices overview - Microsoft Intune
Get an overview of the concepts and features you should know when managing devices that access organization resources in Microsoft Intune. You can manage new and existing devices, including BYOD perso…
Get started with frontline worker (FLW) device management - Microsoft Intune
Learn how to manage frontline worker devices using Android, iOS/iPadOS, and Windows devices in Microsoft Intune. Get guidance on device use and Intune features built for FLW, like Remote Help. Also, l…
Tutorial-Get started with cloud-native Windows endpoints - Microsoft Intune
Set up secure cloud-native Windows endpoints that are Microsoft Entra joined, enrolled in Intune, and then deploy at scale with Windows Autopilot.
Use on-premises services with cloud-native endpoints - Microsoft Intune
For cloud-native endpoints to access on-premises resources, such as file servers, printers, and web servers, use Windows integrated authentication (WIA) and Microsoft Entra Connect.
Tutorial - Protect Exchange Online email on managed iOS devices - Microsoft Intune
Secure Exchange Online email on iOS devices by using Microsoft Intune compliance policies and Microsoft Entra Conditional Access to require managed devices and the Outlook app.
Running Text to Image and Text to Video with ComfyUI and Nvidia H100 GPU
<P>This guide provides instructions on how to set up and run <STRONG>Text to Image</STRONG> and <STRONG>Text to Video</STRONG> generation using <STRONG>ComfyUI</STRONG> with an <STRONG>Nvidi…
Running multimedia AI models on Container Apps with Serverless GPU (A100 & T4)
<P>A video format is available for watching.</P> <div data-video-id="https://www.youtube.com/watch?v=WMYlQNLkMJQ/1776705195051" data-video-remote-vid="https://www.youtube.com/watch?v=WMYlQNLkMJQ/1776…
Error and status codes in Microsoft Intune - Azure - Intune
See a list of the errors, status code, descriptions, and resolutions when using MDM managed devices, getting access to company resources, errors on iOS/iPadOS devices, and OMA response errors in Micro…
Troubleshoot use of Simple Certificate Enrollment Protocol (SCEP) certificate profiles to provision certificates with Microsoft Intune - Intune
Troubleshoot the use of SCEP by devices to request certificates for use with Intune, including communication from devices to Network Device Enrollment Service (NDES), NDES to certification authorities…
Windows failed to apply the MDM Policy settings error - Intune
Information about the error message "Windows failed to apply the MDM Policy settings" when you force a Group Policy update on Intune-enrolled Microsoft Entra hybrid joined devices.
Intune Company Portal apps don't appear as Available - Intune
Fixes an issue in which applications aren't displayed as Available in the Intune Company Portal app on a Windows 10 device.
Troubleshoot Android Enterprise device enrollment in Microsoft Intune - Intune
Suggestions for troubleshooting some of the most common problems when you enroll Android devices in Intune.
Troubleshoot "Set up for work or school" enrollment in Intune - Intune
Troubleshoot blocked Microsoft Intune enrollment for Windows devices when the user chooses "Set up for work or school" and signs in with Microsoft Entra ID. The device is recognized as a personal devi…
Troubleshoot Microsoft Entra device registration and Windows Autopilot - Intune
Provides tips for troubleshooting Microsoft Entra device registration and Windows Autopilot.
MDM enrollment error 0xcaa9001f for co-managed Windows devices - Intune
Describes an issue in which MDM enrollment fails and generates error 0xcaa9001f for co-managed Windows devices that are Microsoft Entra hybrid joined and managed by using Configuration Manager.
Maintaining Azure Public IP Inventory by Retrieving Exact Deleted Public IP Using Activity Logs
<P><SPAN data-contrast="auto">Azure Activity Logs provide strong visibility into resource lifecycle operations across a subscription. Among these are lifecycle events related to </SPAN><SPAN data-cont…
Migrating Frontline Mobile Devices: Understanding the reality of your estate
<P><STRONG>By: Carol Burns - Principal Product Manager | Microsoft Intune and Sucheta Gawade, Microsoft MVP (Azure & Security / Intune)</STRONG></P> <P><EM>Practitioner perspective from <STRONG>S…
Microsoft Defender for Endpoint (MDE) — Custom Role Design for Troubleshooting Mode–Only Access
<P><STRONG>1) Introduction</STRONG><STRONG> </STRONG></P> <P>In customer environments, <STRONG>Security Operations (SOC)</STRONG> teams and <STRONG>Windows infrastructure</STRONG> teams frequent…
Customer Offerings: Hyper-V - Implementation, Migration, and Management
<P>Happy April everyone!</P> <P> </P> <P>Brandon here, back once again to talk to you about a couple of new offerings that have just been released to assist our Unified customers with their on-…
Customer Offerings: Azure Local - Implementation, Migration, and Management
<P> </P> <P>Hi everyone!</P> <P>Brandon here, back once again to talk to you about a couple of new offerings that have just been released to assist our Unified customers with their on-premises …
Auditing FIDO2 authentication for Windows Sign-in
<P>Hello everyone, my name is Liju and I am a Cloud Solutions Architect helping customers secure their cloud and hybrid identities. With this post, I would like to show how FIDO2 security key authenti…
How to enable HTTPS support for Microsoft Connected Cache for Enterprise and Education
<P><STRONG>By: Aditya Middha | Product Manager 2 - Microsoft Connected Cache<BR /><BR /></STRONG></P> <P>Starting on <STRONG>June 16<SUP>th</SUP>, 2026</STRONG>, or soon after, Intune will enfor…
Create historical reports using Azure Log Analytics and Microsoft Intune diagnostic data
<P><STRONG><SPAN data-contrast="auto">By: Janusz Gal – Sr Product Manager | Microsoft Intune</SPAN></STRONG></P> <P>Azure Log Analytics gives Intune admins a flexible way to create custom reports fro…
Windows 365 + Intune Advanced Endpoint Management Capabilities: Better Together
<H4 aria-level="2"><SPAN data-contrast="none"><SPAN data-ccp-parastyle="heading 2">Overview</SPAN></SPAN></H4> <P aria-level="2"><SPAN data-contrast="auto">Windows 365 and Microsoft Intune form a tig…
Azure Database Security Newsletter - April 2026
<P>Welcome to the quarterly edition of Azure Database Platform Security Newsletter. In this newsletter we highlight the importance of strong encryption for data security, and call out recent encryptio…
What’s new in Microsoft Intune – March
<P><SPAN data-contrast="auto">In a typical week, IT admins are enrolling devices, deploying apps, enforcing policies, and making a hundred small decisions that keep their organizations running. This m…
Intune my Macs: Accelerating macOS proof of concepts with Microsoft Intune
<P><STRONG>By: Neil Johnson and Chris Kunze - Principal Product Managers | Microsoft Intune</STRONG><BR /><BR /></P> <P><SPAN data-contrast="auto">Intune provides a broad and mature set of capabiliti…
Check This Out! (CTO!) Guide (March 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
Migrating frontline mobile devices: A frontline-first approach to moving to Microsoft Intune
<P>Frontline organizations consistently tell us that unified management is the goal but the challenge is getting there without disrupting day-to-day operations. Smartphones, Android handhelds, rugged …
Implementing Intune RBAC and Scope Tags for Zero Trust and Least Privilege
<P>If you’re rolling out Microsoft Intune at scale, the hardest part usually isn’t creating policies—it’s making sure the <EM>right</EM> people can manage the <EM>right</EM> things, without turning ev…
Secure apps: Where people, data, and AI intersect
<P><SPAN data-contrast="auto">At RSAC, Microsoft is highlighting a foundational truth: more and more AI interactions—whether through Copilot, an agent, or an automated workflow—ultimately run through …
Support tip: Upcoming Microsoft Intune network changes
<P><STRONG>3/18/2026 Update: </STRONG><EM>The rollout of the Intune network changes described in this blog are in progress across each workload. Additionally, we are beginning to slowly rollout to eac…
Announcing three new partners for multi-tenant management with Microsoft Intune
<H4 aria-level="3"><SPAN data-contrast="none"><SPAN data-ccp-parastyle="heading 3">The challenge: </SPAN><SPAN data-ccp-parastyle="heading 3">S</SPAN><SPAN data-ccp-parastyle="heading 3">caling&n…
Remove Unnecessary Azure Storage Account Dependencies in VM Diagnostics
<P>In a recent engagement with a customer willing to decrease Shared Access Signature (SAS) tokens usage in their Storage Accounts, we found out that a good amount of SAS token-based requests was asso…
Best practices for securing Microsoft Intune
<P>Microsoft Intune gives IT and security teams a powerful way to manage endpoints at scale - deploying apps, enforcing security baselines, and configuring the settings that keep users productive and …
Bulk enable Azure Arc Connected Machine Agent Automatic Upgrade (Tag Scoped) with Azure Cloud Shell
<P><STRONG>Overview</STRONG></P> <P>Keeping the <STRONG>Azure Arc Connected Machine agent</STRONG> current is a foundational hygiene task for any hybrid server estate, especially when you’re operatin…
Rethinking “Allow my organization to manage my device” Why opt‑in enrollment works better for Intune
<P><STRONG>By: Ramya B Sharma – Senior Software Engineer | Microsoft Intune</STRONG></P> <P> </P> <P>A new public preview feature in Microsoft Intune, we’ve introduced a toggle that allows admi…
Check This Out! (CTO!) Guide (February 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
The Future of Identity: Self-Service Account Recovery (Preview) in Microsoft Entra
<P>In the modern enterprise, the "Help Desk" is paradoxically both a vital resource and a massive security liability. As organizations move toward phishing-resistant, passwordless environments using p…
Protect browser-based work on agency-managed Windows PCs
<P><SPAN data-contrast="auto">From SaaS apps and internal web portals to AI-powered tools, the browser is now a major workspace for many employees and contractors alike. This shift has introduced new …
Managed Identity on SQL Server On-Prem: The End of Stored Secrets
<H4>The Problem with Credentials in SQL Server</H4> <P>For an On-Premises SQL Server to access Azure services, you traditionally need to store secrets:</P> <H5>Common Scenarios Requiring Credentials…
Windows Hello for Business - Registered Methods and Last-used Method
<P>Hi folks – Mike Hildebrand here! Today, I bring you a short post about gaining more awareness of Windows Hello for Business (WHFB) configuration information from across your fleet of Windows …
Introducing library management in Microsoft Defender
<P>In dynamic investigation environments, preparation and agility are key. Security analysts working with live response in Microsoft Defender often rely on scripts and tools to triage, investigate, an…
Check This Out! (CTO!) Guide (January 2026)
<P><A href="https://techcommunity.microsoft.com/users/tysonpaul/322025" data-lia-auto-title="Member: TysonPaul | Microsoft Community Hub" data-lia-auto-title-active="0" target="_blank">Member: TysonPa…
What's New in Microsoft Intune – January 2026
<P><SPAN data-contrast="auto">When trees lose their leaves, you see the structure beneath. The branches you couldn’t see. The shape that was always there.</SPAN></P> <P><SPAN data-contrast="auto">Jan…
Admin tasks in Microsoft Intune: Centralized control today, AI-ready for tomorrow
<P><SPAN data-contrast="auto">IT admins make daily, quiet decisions that determine whether an organization stays secure, compliant, and productive. They review privilege requests, security remediation…
Microsoft 365 adds advanced Microsoft Intune solutions at scale
<BLOCKQUOTE> <P><STRONG>Note</STRONG>: <EM>New capabilities will begin to roll out CY26 Q3. Customers will receive a 30‑day notice in Message Center before the update becomes available in their tenan…
Sensor Disconnection Notifications with Microsoft Defender for IoT and Microsoft Sentinel 🚀
<H3><STRONG>What Does This </STRONG><STRONG>Playbook</STRONG><STRONG> Do?</STRONG></H3> <P>This new <STRONG>automated playbook</STRONG> sends real-time <STRONG>email notifications</STRONG> whenever a…
What's new in Microsoft Intune: December 2025
<P>Following Microsoft Ignite 2025, I caught up with colleagues and Intune MVPs who made the trip to San Francisco. There was a lot to talk about, but one conversation stood out: When I asked what sur…
Essential Intune reading list: MVP community content for 2025
<P>As we head into the holiday season, I wanted to take a moment to celebrate something truly special: the incredible contributions from our Microsoft Intune MVP community this year. Last year, I rele…
What's new in Microsoft Intune at Ignite
<P><SPAN data-contrast="auto">Welcome to Microsoft Ignite, where the future of IT is being reimagined. Today we’re unveiling how Microsoft Intune is transforming endpoint management by putting AI at i…
From the frontlines: Empowering call center agents with Windows 365 Frontline
<P><STRONG>By: Tania Lima – Sr Product Manager | Windows 365</STRONG></P> <P> </P> <P><EM>Editor’s Note - Updated 11/19/25: The new <STRONG>User Experience</STRONG> <STRONG>Sync </STRONG>f…
Debunking the myth: Cloud-native Windows devices and access to on-premises resources
<P><STRONG>By: Roger Southgate - Sr. Product Manager | Microsoft Intune</STRONG></P> <H2>Myth vs reality</H2> <P><STRONG>Myth</STRONG>: Cloud-native Windows devices can’t access on-premises resource…
Support tip: Aligning network policy with Microsoft Intune and Zero Trust
<P><STRONG>By: Jon Callahan – Sr Product Manager | Microsoft Intune</STRONG></P> <P> </P> <P>Cloud services don’t just rely on the network. They redefine it. As organizations adopt Microsoft In…
Your guide to Intune at Microsoft Ignite 2025
<img /> <P>The Microsoft Intune team is gearing up for Microsoft Ignite, happening November 17-21 in San Francisco! Whether you'll be joining in person or online, this guide is the best place to lear…
What’s New in Microsoft Intune: October 2025
<P>Last week, someone asked me what keeps me up at night when it comes to endpoint management. The answer surprised them; it was not the sophisticated threats or latest vulnerabilities we read about i…
10 ways Microsoft Intune supports a smooth upgrade to Windows 11
<P><EM>Upgrade to Windows 11 with confidence — 10 Intune tips from Microsoft engineers, MVPs, and guides.</EM></P> <P>Windows 10 reached end of support on <A href="https://aka.ms/Win10EOS-1014" targe…
Intune partner portal adds Intel vPro integration
<H2 style="margin-top: 36px; margin-bottom: 20px; font-family: 'Segoe UI', Segoe, Tahoma, Geneva, sans-serif; font-weight: 600; font-size: 26px; color: #333333;">Hardware-level management meets cloud-…
Deep dive into Windows Autopilot device preparation: How to deploy and when to use it
<P><STRONG>By: Maggie Dakeva - Sr. Product Manager | Microsoft Intune</STRONG></P> <P> </P> <P>Provisioning devices at scale used to be complex and time-consuming, especially with today’s remot…
Microsoft Intune Advanced Analytics in action: Real-world scenarios for IT teams
<P><STRONG><SPAN data-contrast="auto">By: Janusz Gal – Sr Product Manager | Microsoft Intune</SPAN></STRONG></P> <P> </P> <P>Microsoft Intune Advanced Analytics empowers IT admins and enterpris…
What’s New in Microsoft Intune: September 2025
<P>The most resilient IT environments aren't just reactive, they're built with hardware-level contingencies, flexible deployment methods, and automation that works asynchronously. Behind every new cap…
Support tip: Troubleshoot device cap reached when enrolling devices into Microsoft Intune
<P><STRONG>By: Premkumar N – Security Customer Experience Engineer | Microsoft Intune</STRONG></P> <P> </P> <P>When Microsoft Entra or Intune device limits are reached, users will encounter an …
From the frontlines: Managing common kiosk scenarios in your business
<P><STRONG>By: Saurabh Sarkar – Product Manager 2 | Microsoft Intune</STRONG></P> <P> </P> <P>I'm Saurabh Sarkar and I've had the opportunity to collaborate with several customers on effectivel…
Multi-tenant endpoint security policies distribution is now in Public Preview
<P>We’re excited to announce a key milestone in Defender’s multi-tenant management journey—Microsoft Defender for Endpoint security policies can now be distributed across multiple tenants from the Def…
Manage global exclusion policies for Linux across both AV and EDR
<P><U><STRONG><SPAN data-contrast="auto">Create and manage global </SPAN><SPAN data-contrast="auto">exclusions for </SPAN><SPAN data-contrast="auto">Linux</SPAN><SPAN data-ccp-props="{}"> </SPAN>…
Discover how automatic attack disruption protects critical assets while ensuring business continuity
<P aria-level="1"><U><STRONG><SPAN data-contrast="none"><SPAN data-ccp-parastyle="heading 1">Protecting</SPAN> <SPAN data-ccp-parastyle="heading 1">c</SPAN><SPAN data-ccp-parastyle="heading 1">ritical…
Defender for Endpoint extends support to ARM-based Linux servers
<P>As the demand for ARM64 servers continues to rise, we are thrilled to announce that Microsoft Defender for Endpoint now supports ARM64 based Linux servers in GA. This update marks a new milestone i…
Protect your single-core Linux servers with Defender
<P>In today’s rapidly evolving digital landscape, enterprises are increasingly relying on Linux-based servers to run their critical workloads. Securing your Linux servers is paramount to safeguarding …
The unified agent now combines protection across endpoints, OT devices, identities, and DLP
<P>Microsoft’s investments in Defender for Endpoint focus both on building industry-leading endpoint protection to stay ahead of increasingly sophisticated attackers and delivering on key fundamentals…
Security settings management is available for multi-tenant environments in Microsoft Defender XDR
<P>Several months ago, we released device <A href="https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/manage-security-settings-for-windows-macos-and-linux-natively-in/ba-p/3870617"…
Understanding the profile assignment of multi-app kiosk mode on Windows 11
This week is all about multi-app kiosk mode on Windows 11. That on itself is not something really new and to get started with that, have a look at this post around configuring multi-app kiosk mode on …
Managing Copilot in Microsoft Edge
This week is all about managing Copilot within Microsoft Edge. There were already some nice configurations available for a while and recently an additional configuration was added around sharing tenan…
Being careful with the ability to configure the preferred Entra tenant domain name
This week will be a relatively short blog post about a relatively often seen challenge with the configuration to set the preferred Entra tenant domain name. More specifically, this post will be about …