Jonathan

My jam is end-user computing; my other jam is remembering the real world exists.

[Jonathan @DevMgmtPro]

I wondered why Intune's Secure Boot Certificate numbers were soo off. I accidentally uploaded @MrTbone_se's Detect-SecureBoot script instead of Detect-Secureboot2023cert. 🤦🏿‍♂️

[Steve Weiner | MVP @getrubix]

The new Intune Settings Catalog policy for removing Copilot from Windows 11 is a good start.

But the policy alone isn't enough. You'll want AppLocker on top of it.

Full walkthrough, XML included, in the video.

@MSIntune #copilot #m365

https://t.co/U586m0aTWx

[Jonathan @DevMgmtPro]

@viamonstra @apps_mgr Great job @apps_mgr 👍🏿

[Jonathan @DevMgmtPro]

@xenappblog @MSIntune It will have limited use. Agreed central repo for all devices will be much more helpful

[Jonathan @DevMgmtPro]

@joe_lenovo Is there some special ritual needed to get Commercial Vantage auto update to actually run? 🫤 I've configured it for everyday @ 10AM and nothing has happened.

[SystemCenterDudes @scdudes]

Great discovery and acknowledgement from Microsoft. Thanks for sharing @Mister_MDM.

#MSIntune #Windows #Hotpatch

[Jonathan @DevMgmtPro]

@AdamGell 🔥🔥🔥 👍🏿

[Jonathan @DevMgmtPro]

How do I filter CMTrace to show only Errors and Warnings? Are there Error, Warning, Informational level views? @AdamGell

[Jonathan @DevMgmtPro]

@AdamGell Look what @JohnBryntze just uploaded 🙌🏿👏🏿👍🏿 https://t.co/ZwlYqSc6lh

[Microsoft Learn @MicrosoftLearn]

Before learning cloud tools, understand:
- networking basics
- identity & access
- cost implications
Which one of these three do you want to learn more of next? We’ll send you a link to a module!

[Jonathan @DevMgmtPro]

@sha256manny @NathanMcNulty I literally had a couple users complain they didn't have necessary "permissions" on their new laptops. Come to find out by permissions they meant applications, and the application... "Adobe" (Reader not Acrobat/Pro).

[Jonathan @DevMgmtPro]

@Moto_Support 40 minutes into my outdoor walk, and my watch tells me storage is full. I have no music saved to it. Is there a way to check the storage and/or recycle bin. #MotoWatch #Motorola

[Jonathan @DevMgmtPro]

@AdamGell Oooo.. lets also disable TRIM.🤦🏿‍♂️

[Jonathan @DevMgmtPro]

@AdamGell Leeetttsss Gooooo!!

[Jonathan @DevMgmtPro]

Go! Go! Go!

[Steve Weiner | MVP @getrubix]

GetRubix is 178 subscribers from 10,000... can you believe it?

I'm also 32 days from #MMSMOA, 5 days from the next Daredevil episode, and 1 coffee short of being tuned up. Just got back from Redmond and apparently this is how I'm spending my Thursday.
https://t.co/UY62nx8HML

[Rudy Ooms @Mister_MDM]

@AdamGell @IntuneSuppTeam https://t.co/Re30MTZqEH

[Jonathan @DevMgmtPro]

@Mister_MDM At this point, I'm not sure I understand how Intune works anymore 😂

[Rudy Ooms @Mister_MDM]

Intune remote help… unattended support…

Who wants me to post something about this? @IntuneSuppTeam :)?

(Please note… this picture is from an older ic3 blog… so not related to anything i could / would … have heard at the mvp summit… because thats all nda… :) )

#Intune #MSIntune

[Kaido Järvemets @kaidja]

Did you know there is a CLI tool sitting in C:\Windows\System32 right now that can query and apply Secure Boot certificate configurations?

WinCsFlags.exe - Microsoft's Windows Configuration System. Been shipping since October 2025 in cumulative updates. Query, apply, or reset. No registry editing needed.

WinCsFlags.exe /query --key F33E0C8E002

Try it on your machine and see what it returns.

Register today for the upcoming workshop: https://t.co/8xwlycmCLm

[Kaido Järvemets @kaidja]

Secure Boot fleet assessment update:

- Vendor BIOS catalog now covers nearly 3,000 device models across Dell, HP, and Lenovo
- Two deployment paths: SCCM and Intune
- Separate assessment reports for workstations and servers - different fleets, different concerns

Based on my current assessment states I can clearly say that companies are not ready for this at all.