Marco Sap

All comments are my own.

[Merill Fernando @merill]

Microsoft just moved Purview under the same exec who leads Intune.

What does it mean for Intune admins?

Time to start learning Purview?

@IAMERICAbooted says yes 😀

[Dave McCollough @davemccollough]

Microsoft’s Agent Governance Toolkit is worth checking out.

Don’t put your trust the prompt to enforce policy, put controls around the actions: tool calls, identity, approvals, and audit logs.
https://t.co/L4Izz4QQZu

[Kevin Kaminski @kkaminsk]

This extends Zero Trust into the AVD session layer:
• Identity + Device + Network
• Dynamic redirection decisions at connect time
• No client-side config needed
• No separate host pools

Server-side, session-aware. #AVD #ZeroTrust

[Orin Thomas @orinthomas]

Reducing NTLM Dependency: IAKerb and LocalKDC in Windows Insider Preview https://t.co/eOmGRJ4i7o

[Demitrius Nelon @DenelonMs]

MSIX Blog Post:

https://t.co/BYF6PKWdpU

[spencer @techspence]

More LolBins yay! @M_haggis @NathanMcNulty #microsoftbuild

[Cyber Security News @The_Cyber_News]

🛡️ Microsoft Tightens Entra ID Password Resets With New Authentication Change

Source: https://t.co/W4ADFFtXdm

Microsoft has announced a significant security update to its Entra ID Self-Service Password Reset (SSPR) feature, introducing stricter authentication requirements designed to reduce identity-based attacks.

The update mandates the use of explicitly registered authentication methods, removing reliance on directory-stored contact information that has not been formally verified. The change is part of Microsoft’s broader Secure Future Initiative, which aims to strengthen identity verification across its platforms.

#cybersecuritynews

[Jorgeasaurus @jorgeasaurus]

https://t.co/h3rV00rRJt got a UI tuneup.

Also, I added a blog post about the new features in the powershell module as well as the differences between the powershell version and the browser native hydration kit.
https://t.co/afgnNDTOwb

#Intune #MVPBuzz

[Cyber Security News @The_Cyber_News]

⚠️ Critical Notepad++ Vulnerabilities Allow Attackers to Execute Arbitrary Code

Source: https://t.co/iSort2Ikje

Notepad++, one of the most widely used open-source text editors for Windows, has released an urgent security update addressing three vulnerabilities, including two arbitrary code execution flaws that could allow attackers to silently run malicious programs on a victim's machine.

The most severe of the three is CVE-2026-48778, which targets the <GUIConfig name="commandLineInterpreter"> tag inside Notepad++'s config.xml file.

📌 CVE-2026-48770 - Crash via malformed XML structure

📌 CVE-2026-48778 - Arbitrary code execution via config.xml

📌 CVE-2026-48800 - Arbitrary code execution via shortcuts.xml

#cybersecuritynews

[Sandy Zeng 🌻［MVP］ @sandy_tsang]

@IntuneSuppTeam Hello, are you aware this issue? https://t.co/NX8zkKEn5X

I can confirm this, same issue with my customer. Company Portal is installed, but Intune can’t detect that. IME agents first said it is installed, results ok, then said No detection.

[Nathan McNulty @NathanMcNulty]

Nice to see these patched, and you likely already have it installed (check Get-MpComputerStatus)

Crazy this was signed on April 24th, took a while to make it here

If you don't have it yet, check Windows Updates

Or x64: https://t.co/g93tVpCaqV

Or arm64: https://t.co/fvQCZhNYUq

[NCSC-NL @ncsc_nl]

NCSC brengt een security-advisory voor Windows Defender. De kans en schade van deze kwetsbaarheid beoordelen wij als high/high. Wij adviseren u de security-advisory op te volgen. https://t.co/8paYPItWfb

[Adam G @AdamGell]

Stop alt-tabbing to Google every time you hit 0x80070005 in an Intune log. CMTrace Open has 739 error codes built in. Ctrl+E, paste the code, done. Wrote a quick start to get you from install to productive in 5 minutes: https://t.co/pGnRr5lA5k

#Intune #SCCM #MECM #SysAdmin #OpenSource #Rust #Tauri #MVPBuzz #MSIntune

[Adam G @AdamGell]

🚀CMTrace Open v1.0.0 is here — a free, open-source replacement for Microsoft's CMTrace.exe built with Tauri + Rust.

What's new:

- 411-code error database with inline highlighting. No more Googling hex codes. Covers Win32, HRESULT, ConfigMgr, and Windows Update errors
- Software Deployment workspace. Drop in a folder of MSI, PSADT, or WiX/Burn logs and get recursive scanning, exit code extraction, and error summaries with one click
- Diagnostics Collection tool (Windows). Collects 32 log patterns, 61 registry keys, 42 event log channels, and 30 command outputs. Presets: Full, Intune+Autopilot, Networking, Security, and Quick
- Registry file (.reg) viewer. Opens regedit exports in a two-pane tree UI with virtualized scrolling for 22 MB+ files
- 6 new log parsers: Windows DHCP Server, macOS Intune MDM, WiX/Burn, MSI verbose, PSADT, and .reg files. All auto-detected
- DSRegCmd MDM cross-reference. Eliminates false enrollment warnings
- 8 themes, multi-tab browsing with instant cached switching, inline Ctrl+F with regex, resizable columns
- Progressive folder loading fixes UI freeze on large log folders
- Zero-allocation severity detection + Rayon parallel parsing

Runs on Windows, macOS, and Linux. No telemetry. No accounts.

https://t.co/QixIauaHZ5

#Intune #SCCM #MECM #SysAdmin #OpenSource #Rust #Tauri #MVPBuzz #MSIntune

[Demitrius Nelon @DenelonMs]

Technically a breaking change, but I'd like to see if it would be OK to do this in a minor version increment.

Let me know your thoughts. I really don't want to violate semantic versioning, but it might be worth it. Comment at:

https://t.co/9frKE704XK

[Thomas Kurth | MVP @ThomasKurth_ch]

#M365Documentation 3.6.0 is now available!

https://t.co/sIdzrgJcIs

This release expands documentation coverage across #EntraID and #MSIntune with a strong focus on security, governance, and identity scenarios.

#Microsoft365 #EntraID #AzureAD #PowerShell #Security #mvpbuzz

[Adam G @AdamGell]

CMTrace Open v0.2.0 is out.

An open-source CMTrace-style log viewer with built-in Intune diagnostics, timeline analysis, download stats, error lookup, live tailing, and Windows signed release assets.

Release: https://t.co/65CvwlbRPU

#msintune #intune #sccm #configmgr #MEM

[Adam G @AdamGell]

@PJ_Marcum Windows build should be up soon! https://t.co/hTHB5XGpzF

[Speaker 25 @rodtrent]

Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services https://t.co/cyYVbBUkl5

#MicrosoftDefender #DefenderforCloud #Security #MicrosoftSecurity #Cybersecurity #DefenderXDR #MicrosoftThreatIntelligence