I wondered why Intune's Secure Boot Certificate numbers were soo off. I accidentally uploaded @MrTbone_se's Detect-SecureBoot script instead of Detect-Secureboot2023cert. 🤦🏿♂️
The new Intune Settings Catalog policy for removing Copilot from Windows 11 is a good start.
But the policy alone isn't enough. You'll want AppLocker on top of it.
Full walkthrough, XML included, in the video.
@MSIntune#copilot#m365
https://t.co/U586m0aTWx
@joe_lenovo Is there some special ritual needed to get Commercial Vantage auto update to actually run? 🫤 I've configured it for everyday @ 10AM and nothing has happened.
Before learning cloud tools, understand:
- networking basics
- identity & access
- cost implications
Which one of these three do you want to learn more of next? We’ll send you a link to a module!
@sha256manny@NathanMcNulty I literally had a couple users complain they didn't have necessary "permissions" on their new laptops. Come to find out by permissions they meant applications, and the application... "Adobe" (Reader not Acrobat/Pro).
@Moto_Support 40 minutes into my outdoor walk, and my watch tells me storage is full. I have no music saved to it. Is there a way to check the storage and/or recycle bin. #MotoWatch#Motorola
GetRubix is 178 subscribers from 10,000... can you believe it?
I'm also 32 days from #MMSMOA, 5 days from the next Daredevil episode, and 1 coffee short of being tuned up. Just got back from Redmond and apparently this is how I'm spending my Thursday.
https://t.co/UY62nx8HML
Intune remote help… unattended support…
Who wants me to post something about this? @IntuneSuppTeam :)?
(Please note… this picture is from an older ic3 blog… so not related to anything i could / would … have heard at the mvp summit… because thats all nda… :) )
#Intune #MSIntune
Did you know there is a CLI tool sitting in C:\Windows\System32 right now that can query and apply Secure Boot certificate configurations?
WinCsFlags.exe - Microsoft's Windows Configuration System. Been shipping since October 2025 in cumulative updates. Query, apply, or reset. No registry editing needed.
WinCsFlags.exe /query --key F33E0C8E002
Try it on your machine and see what it returns.
Register today for the upcoming workshop: https://t.co/8xwlycmCLm
Secure Boot fleet assessment update:
- Vendor BIOS catalog now covers nearly 3,000 device models across Dell, HP, and Lenovo
- Two deployment paths: SCCM and Intune
- Separate assessment reports for workstations and servers - different fleets, different concerns
Based on my current assessment states I can clearly say that companies are not ready for this at all.