Jörgen Nilsson

Senior Consultant at @onevinn working with Enterprise Mobility, Intune, Windows 11, Windows 365, EUC. Microsoft MVP - Security & Windows & Devices.

[Jörgen Nilsson @ccmexec]

@crock23a Stabile changed to a 2 week release cycle, security baselines is now released together with extended stable… extended stable is the enterprise choice!?

[Jörgen Nilsson @ccmexec]

Known issue in #MSedge 155, After upgrading to MS Edge some users cannot launch Edge. Rollback of service side change temporarily fixed the problem..
Time to move to Extended Stable?
https://t.co/XjMb8U9mD7
#MSintune

[Jörgen Nilsson @ccmexec]

Great work!!

[ariaupdated @ariaupdated]

PSA The one restart a month feature is currently only turned on for Consumers. We are working on bringing this to commercial soon - updating the blog to clarify now. We are just waiting until we have the appropriate commercial controls in place to manage such. :)

[MMS Minnesota @mmsmoa]

It’s T-minus 13 days or Lucky Number 13 for #MMSMidway Conference. We can’t wait to see you there soon!

Register ASAP:
https://t.co/DUUXRA4WpO
October 25-28

#MMSMOA #SanDiego #ITpros #MSIntune

[Jörgen Nilsson @ccmexec]

Security baseline for #Windows11 26H2 is updated with a v2 release, now including Administrator Protection settings.
https://t.co/09do0ZCam9

[Intune Support Team @IntuneSuppTeam]

🎆 ICYMI: All done with the September (2609) @MSIntune service release for all regions! 🎆

🆕 What's new docs: https://t.co/E2deVTVJ42

▶️ What's new blog: https://t.co/sEmt1FkKMr

#MSIntune #AlwaysIntune #IntuneInspired

[Jörgen Nilsson @ccmexec]

Windows 11 26H2 Security baselines is released!
Two new settings to deploy:
✅Configure Windows Ready Print driver ranking
✅Internet Explorer\Internet Control Panel\Advanced Page\Turn off encryption support
https://t.co/09do0ZCam9
#Windows11

[Jörgen Nilsson @ccmexec]

Windows 11 26h2 is released!
✅Administrator Protection
✅Enablement package
✅Built-in Sysmon
And more!
https://t.co/VL77yFU9RO

[@rnabmitra @rnabmitra]

#Windows11 26H2 is here, check out the #ITAdmin guide

🚀 Uses small-sized fast-deployment Enablement Package for upgrade

https://t.co/DBvov1I5V4

[AppManagEvent @appmanagevent]

The browser is now your most important app.

Jörgen Nilsson - @ccmexec & @ronnipedersen go demo-heavy on the new Edge management service — what to configure, secure, enforce, and what not to do.
AME2026, Oct 9, Jaarbeurs Utrecht.
https://t.co/4Wfv9tFCft

[Jörgen Nilsson @ccmexec]

@Micke_K_72 Awesome work!!

[Micke Karlsson @Micke_K_72]

IntuneManagement 3.11.0 released - a small update ahead of the 4.0 beta. Sign in with the system browser, where passkeys and FIDO2 keys work. Fixed: GitHub links not opening, silent Bulk Compare.

https://t.co/pvJPdj29rz

[Per Larsen #MSFT #MSIntune #MSSecurity @PerLarsen1975]

🚀 Staged rollouts in Microsoft Intune just got released in public preview!
If you've ever had to manage multi-phase app or policy deployments by manually swapping Entra groups or building custom PowerShell automation, Deployment Plans in Microsoft Intune is a massive quality-of-life upgrade.
Instead of all-or-nothing rollouts or manual babysitting, Intune now gives us built-in orchestration to roll out payloads (apps & configuration policies) across staged rings.
Here are 3 reasons why this new feature is a game-changer:
1️⃣ Standardized, Reusable Rollout Templates
No more reinventing the wheel for every application or policy update. With Deployment Plans, you can define your organization's approved rollout pattern once (e.g., Pilot → Early Adopters → Broad → All Devices) with preset deferral intervals (hours/days). When you're ready to deploy, you just attach the payload to your plan.
2️⃣ Cumulative Phased Rings (With Virtual Group Smarts)
Each ring safely expands targeting cumulatively over time. Even better: if your final ring targets virtual groups like All Devices or All Users, Intune automatically handles the transition—clearing previous staging assignments and rolling up the deployment cleanly into a broad assignment.
3️⃣ Full Control with Pause, Resume & Collision Detection
Things don’t always go according to plan, and safety nets are essential. Active deployments can be paused, resumed, or cancelled on the fly. Plus, built-in assignment collision detection prevents conflicts before a ring activates, protecting production environments from accidental dual-targeting or configuration drift.
Native ring-based deployments have been on the community wishlist for a long time, and bringing this directly into the Intune Admin Center is a huge step forward for safer change management.
🔗 Read the full documentation: https://t.co/XWNJFGtP2h
Have you tested this out in preview yet? How are you handling staged rollouts today? 👇
#MicrosoftIntune #EndpointManagement #SysAdmin #ModernWorkplace #CloudManagement #MSIntune

[Jörgen Nilsson @ccmexec]

Managing a modern workplace today, is a lot about keeping up with what is happening. For example:
"If this policy is unset, Microsoft Edge will follow the default rollout process for the Process Isolation feature, which means that the feature will be gradually rolled out to an increasing number of users."
https://t.co/DhafPFoIYL
#MSedge

[Jörgen Nilsson @ccmexec]

Edge Security baseline review 152 - "no additional security settings that require enforcement."
Version 151 - remains the recommended baseline
https://t.co/1pXGpZutI2
#MSedge #Windows11 #MSintune

[MMS Minnesota @mmsmoa]

MMS Midway Edition session selection is OPEN.

This is your chance to start building your agenda, claim your must-see sessions, and make sure your Sched is loaded with all the technical goodness you can handle.

Deep dives, real-world lessons, community experts, and probably a few sessions where you’ll wish you could clone yourself.

Head over to Sched, browse the lineup, and start adding sessions to your schedule now: https://t.co/rugVstIveO

Pro tip: Don’t wait until you arrive in San Diego to figure out what you want to see. Future you will appreciate the planning.

See ya in San Diego!

Not signed up for #MMSMidway?
Register ASAP: https://t.co/vOp9z1nBKW
October 25-28, 2026

#MMSMOA #SanDiego #ITpros #MSIntune #ConfigMgr #PowerShell #Azure

[Jörgen Nilsson @ccmexec]

Note to self, AutoPilot device prep is a different beast to master, cleaning up static device group memberships is a new challenge compared to switching Group Tag.
#WIndows11 #MSIntune

[Jörgen Nilsson @ccmexec]

New post: "Windows 365 – Placing a Cloud PC Under Review"
This is something everyone that uses Windows 365 should setup BEFORE it is needed!
https://t.co/PJ9dNJNorG
#Windows365 #MSintune

[Jörgen Nilsson @ccmexec]

@acjuelich It is the future so it is time to start testing it out! And with the newly released features we can do that..
still miss Pre-provisioning and Bitlocker policy support...