Kari Riepponen

MCSA (MCITP) Solution Architect (Windows OS, Application packaging, Systems management, ITILv3), WRC, Ice Hockey, Liiga, Mestis, Snooker

[Peter van der Woude @pvanderwoude]

New blog post: Customizing the power options in Start layout
https://t.co/GjHP66eLi7
#MSIntune #EMS #MDM #Windows11 #Start

[@rnabmitra @rnabmitra]

#Windows11 26H2 devices will have the backup function on by default with #Windows settings backup and restore
https://t.co/LWQtR22Qg7

[Demitrius Nelon @DenelonMs]

Lots of goodies in the latest WinGet release:

I'm loving the sorted output!

https://t.co/sHDmHl6d3S

[Rudy Ooms @Mister_MDM]

@IntuneSuppTeam @MSIntune Does that mean i am allowed to talk about it :)?

[Microsoft Intune @MSIntune]

Hear directly what Microsoft MVPs have to say about the advanced Microsoft Intune capabilities coming to Microsoft 365 E3 and E5.

Read the full community round-up: https://t.co/jQ7y4f6lLh

[Rudy Ooms @Mister_MDM]

Intune Engineering fixed the IME Config issue!!... Nice job @IntuneSuppTeam

Do you remember when an IME update deleted the application config file and Win32 app installations suddenly stopped?

The Company Portal stayed stuck on “Downloading,” but underneath, the IME could no longer load the assemblies needed to validate the user token.

Microsoft has now returned to that config file in IME 1.103.101.0, and this time the fix goes further. The installer keeps a clean backup, restores the config when it is missing, and even replaces it when the contents have drifted.

It took a few attempts, but this finally appears to close both sides of the problem. I updated the original investigation with the new custom actions and exactly how the repair works.

Read the updated blog below!!!

#Intune #MSIntune #Windows11

https://t.co/K3HdksZFLw

[Per Larsen #MSFT #MSIntune #MSSecurity @PerLarsen1975]

If you are using #MSintune Multi Admin Approval and using graph API for automation - please take a look at the new updated doc

https://t.co/y5dIWa2nqO

[Microsoft Intune @MSIntune]

Microsoft Intune named a leader in The Forrester Wave™: Endpoint Management Platforms, Q2 2026. Recognized with the highest scores in the current offering and strategy categories, Intune leverages seamless integration and cost efficiencies for organizations using Microsoft 365.

Read the blog: https://t.co/0s4iuWxEKB

[Bryan Dam @bdam555]

PSA: Microsoft is going to enforce MAA on Graph calls using Enterprise App Registrations.
If that sounds like March when it broke everything, you would be correct.

Read @Mister_MDM's writeup here: https://t.co/m4mI0xu3Yg

[Fabian Bader @fabian_bader]

Entra Connect v2.6.79.0 was just released and contains undisclosed security fixes and @Microsoft recommends to update fast. On the bright side, it will finally support FIDO2 based authentication!

[Rudy Ooms @Mister_MDM]

Autopatch Client Broker + Autopilot Pre-Provisioning: What could possibly go wrong?

Well… the Enrollment Status Page can break on a 1603, even though the installer has already left just enough behind for Intune to think the app is installed. That is the fun part.

The bad part? Autopatch / Microsoft Support seems to "ignore" the broken MSI behavior and instead points customers to the newer readiness experience. But the MSI issue is still there....Breaking Autopilot

A custom action checks the CloudDomainJoin registry key, which is removed during Autopilot Pre-Provisioning.

When that key is gone, the installer crashes. And because the detection key was already created, Intune may never try again. Fun right?

https://t.co/nDXj8sci4H

#Intune #MSIntune #WindowsAutopilot #Autopatch

[Richard Hicks @richardhicks]

The public #tls certificate for the #Microsoft website https://t.co/zouf8SxcIs expired over the weekend. 🤪 https://t.co/PRv32CvJ2X

[Richard Hicks @richardhicks]

An update for the #Microsoft #Entra Private Network Connector for Global Secure Access adds a system tray status indicator icon with quick access to diagnostics and logs. #gsa #mobility #security #zerotrust #ztna #mvpbuzz https://t.co/IbstrNJ6Wf

[SystemCenterDudes @scdudes]

This post explains what is really happening under CVE-2023-24932 (BlackLotus vulnerability), the 4 mitigations and how to apply them manually with #PowerShell, and much more - https://t.co/Zr8ab7FCwP

#CyberSecurity #BlackLotus #MSIntune

[Microsoft Intune @MSIntune]

If you want to secure and manage your macOS devices with Microsoft Intune, watch this walk-through video showing you how to configure compliance policies that help make your devices and data more secure: https://t.co/egAuHLDs7O

[Microsoft Intune @MSIntune]

At #MicrosoftBuild, we introduced faster, preconfigured Cloud PCs and support for agent workloads. For IT, that means quicker provisioning, controlled policies, and built-in compliance—managed end to end with Microsoft Intune. See all the updates: https://t.co/b7HTQjcWxJ

[Rudy Ooms @Mister_MDM]

After the May Windows update, the Company Portal started failing during Autopilot pre-provisioning when assigned in system context.

The app files were already on the device, but #Windows had not completed the registration needed for ESP to recognize the app as installed. Autopilot therefore returned error 0x87D1041C and blocked the enrollment.

The root cause pointed to a flight that was added and enabled with the May update: FixInstallUnderSystemContext.

Which is pretty funny when you think about it...
A fix that ended up breaking the system context installation it was meant to improve.

Full technical breakdown and fix in the blog:
https://t.co/xlQIt8wTuV

#WindowsAutopilot #Intune #MSIntune #WindowsUpdates @PatchMyPC

[Richard Hicks @richardhicks]

Chatting with @merill about migrating from legacy #VPN to #Microsoft #Entra Private Access on the https://t.co/QL51nOfcSc podcast. #Windows #Windows11 #mobility #security #ztna #identity #aovpn https://t.co/RmSkmprsqu

[Martin Bengtsson @mwbengtsson]

📢 From July 1, Remote Help is included in M365 E3/E5.

I updated my PowerShell script to create four least-privilege custom RBAC roles + groups in seconds.

It now includes -AssignRoles to assign roles to groups automatically, plus full Multi Admin Approval (MAA) support.

https://t.co/JRD1XpvZyh

#MicrosoftIntune #MSIntune #RemoteHelp #PowerShell

[Mike Terrill [MVP] @miketerrill]

Microsoft Configuration Manager (aka #ConfigMgr, #SCCM, #MEMCM, #MECM, #SMS) Version 2409 goes end of life on Saturday, June 6, 2026. If you are still running this version, it is time to upgrade.