Andrew Johnson

Systems Management, M365, and some things in between. ViaMonstra Academy Office Hours Live! Wed @ 4:30PM CST

[Ars Technica @arstechnica]

The Internet goes on high alert after discovery of 8 compromised TLS certs https://t.co/MjeEwDmNht

[SystemCenterDudes @scdudes]

Preparing for end of support for CNAME auto-discovery in Windows MDM-only enrollment - Starting January 15, 2027 -https://t.co/9sLWwVPR8w

#MSIntune #ConfigMgr #Windows

[SystemCenterDudes @scdudes]

Here's how to automate Windows activations with PowerShell - https://t.co/eY8PcIzcwG

#Windows #MSIntune #Microsoft

[Guy Leech @guyrleech]

How to leave breadcrumbs for yourself when using PowerShell interactively ...

As in you typed in/pasted something long/complex, how do you find it again in your persistent PowerShell history (so survives reboots)?

If you can't remember the cmdlet, parameter text, etc, leave your own breadcrumb in a # comment on the command - to find it again, hit ctrl r then type the breadcrumb text to find that command

I use ## instead of # as part of my coding "style" - there is no difference in functionality/commentness

[Nathan McNulty @NathanMcNulty]

Don't see it in the portal? You can do it via Graph ;)

$body = @{
"defaultUserRolePermissions"= @{
"allowedToCreateAgentIdentityBlueprints"= $false
}
}
Invoke-MgGraphRequest -Method PATCH -Uri "/beta/policies/authorizationPolicy/authorizationPolicy" -Body $body

[Carmen Forsmann @cmknox]

DO Troubleshooter 1.3.1 is live 🚀 One script to check your Delivery Optimization, P2P and Connected Cache health. Get it: https://t.co/8x6zKr4e1E #Windows #SysAdmin #DeliveryOptimization

[Patch My PC @PatchMyPC]

Microsoft dropped the patches. Now comes the fun part. 🙃

What needs attention? What can wait?

We're breaking it all down at October's #PatchTuesday Support Group, plus industry news and live Q&A.

Join us ➡️ https://t.co/RRMlqPTXKx

#MSIntune #ITCommunity #PatchMyPC

[Daniel Bradley @DanielatOCN]

Change is coming, and you should turn this setting off in Microsoft Entra > https://t.co/EgHiYHd9Ra

Soon, Microsoft are giving us all a reason to need to buy Agent 365, by making Agent Identity Blueprints (which serve as the foundation of Agent properties and policies) able to be created by standard Microsoft 365 users.

While we encourage users to self-service create their own Agents, Blueprints, which should be governed and controlled by those defining and managing your AI governance, should not be self-service created.

#Entra #Microsoft #Agents

[MMS Minnesota @mmsmoa]

Here’s a night view of beautiful San Diego. If you’re attending #MMSMidway in just over 2 weeks, you’re in for a treat. If you’re having FOMO, then get your tickets now and join us there!

Register ASAP:
https://t.co/DUUXRA4WpO
October 25-28

#MMSMOA #SanDiego #ITpros #MSIntune

[Adam Bertram @adbertram]

ICYMI: Stop copying PowerShell module folders to file shares. Build a private feed in Azure Artifacts with pipeline publishing, GitVersion stamping, Key Vault signing, and JEA. https://t.co/wp5vr8hndX

[Per Larsen #MSFT #MSIntune #MSSecurity @PerLarsen1975]

Microsoft Intune Settings Catalog updated to support Windows 11, version 26H2 #MSIntune #Windows11
https://t.co/o6qNrv7Y8d

[@rnabmitra @rnabmitra]

#Windows11 26H2 is here, check out the #ITAdmin guide

🚀 Uses small-sized fast-deployment Enablement Package for upgrade

https://t.co/DBvov1I5V4

[@rnabmitra @rnabmitra]

Get a sneak peek of what’s rolling out in #MSIntune this month, the ability to Automatically or Manually #Approve #Windows #Updates
https://t.co/5ItEXFIxCc

[David Segura | MVP | Recast Software @SeguraOSD]

Windows 11 #26H2 went GA today and @RecastSoftware #OSDCloud 26.9.29.1 is #Community ready

Join me and @HarmVeenstra next week at our #OSD #WPNinjaS webinar to learn more #Intune #Autopilot

https://t.co/mPm935CFZF

[Sami Laiho @samilaiho]

https://t.co/ihGgN6GZpD

Download Administrative Templates (.admx) for Windows 11 2026 Update (26H2) from Official Microsoft Download Center

[Rudy Ooms @Mister_MDM]

That 60-minute wait for new Required Win32 apps is gone!!

In my previous blog, I explained how Microsoft already fixed it for Windows Autopilot.
Now Microsoft is taking the next step.
New Win32 app changes can also wake the IME sooner instead of waiting for the normal polling interval (60 minutes). So, of course, I tested it.

I assigned a new Required app and watched the device.
A couple of minutes later, the IME kicked off the Win32App Workload, and this is where it gets interesting.
So what actually changed, how does the push reach the IME, and what happens after intent 2 arrives?

Read the full blog:https://t.co/YiDUhJsMtF

#Intune #MSIntune #Windows11

@IntuneSuppTeam .... the Intune Eng team is on a rolll :)

[@rnabmitra @rnabmitra]

#MSIntune Service Release 2609 is here! Check out the What’s New docs
https://t.co/qXu3hLRiJh

[Nathan McNulty @NathanMcNulty]

Defender for Identity sensor v3 on ADFS, ADCS, and Entra Connect sync is now in preview! 🥳

Make sure you have at least one, reachable DC running the v3 sensor as well ;)

[Jeff Gilbert @JeffGilb]

I'm excited to speak at MMS 2026 Midway Edition! If you're coming, don't forget to sign up for my session https://t.co/hPtW9zvVTA @sched

[Micke Karlsson @Micke_K_72]

IntuneManagement 3.11.0 released - a small update ahead of the 4.0 beta. Sign in with the system browser, where passkeys and FIDO2 keys work. Fixed: GitHub links not opening, silent Bulk Compare.

https://t.co/pvJPdj29rz