Samuel Aspnes

The weird Swede with the crazy ideas ;) #SCCM #ConfigMgr #MEMCM #MSIntune #Windows10 #Windows11

[Daniel Bradley @DanielatOCN]

Soft-delete for Devices is in Microsoft Entra is now in Public Preview! Read more about the experience here > https://t.co/Yn4PvPE2Li 💻

Devices may get be deleted from a multitude of reasons. But now, when they are deleted, they simply get deregistered and moved to a soft-delete container for up to 30 days, during this time they can be restored. This way, the device cannot be used for authentication, or accessing cloud resources, but important data is preserved, such as the BitLocker key, LAPS password and Device Id.

#Microsoft #Entra

[Jörgen Nilsson @ccmexec]

If you haven't adopted a solution for 3rd party app patching, now is the time.
Keeping up with all the new vulnerabilities is way to expensive and to much work!
https://t.co/BRU9HmfhCy
#Msintune

[Merill Fernando @merill]

Stop playing "cat and mouse" with phishers 🐬😂.

It’s time to change the locks. 🔒

Entra ID - Hardening Tip #8

If your organization is still relying on traditional passwords - even with standard MFA - you’re leaving the door cracked for Adversary-in-the-Middle (AiTM) attacks and token theft.

Passkeys: The Un-Phishable Standard 🛡️

When Passkey authentication isn't enabled in Microsoft Entra ID, you’re vulnerable to:

🔻 Credential Theft: Traditional passwords can be phished, stolen, or guessed.

🔻 MFA Bypass: Attackers are getting smarter at intercepting "simple" MFA codes.

🔻 Persistent Access: Once an attacker has a token, they’re in and they’re staying.

Passkeys: The Un-Phishable Standard 🛡️

Passkeys provide phishing-resistant authentication through cryptographic proof. Because they are tied to a specific device and use public-key cryptography, there is nothing for an attacker to intercept, phish, or replay.

By enabling passkeys, you don't just add a layer of security; you eliminate the foundational vulnerability that enables most modern attack chains.

✅ Learn how to enable the passkey authentication method https://t.co/wpAUVRyntv

✅ Learn how to plan a phishing-resistant passwordless authentication deployment

https://t.co/ulqln2OFPn

[Patch My PC @PatchMyPC]

Something big is coming to the Publisher… any guesses?

The full reveal will happen during our session at @mmsmoa.

📅 Thursday, May 7th at 1pm

Be there to see what’s next ➡️ https://t.co/WqTIc697OZ

#MMSMOA #MMSMOA2026 #EndpointManagement #ITCommunity #PatchMyPC

[Fabian Bader @fabian_bader]

If you have a conditional access policy scoped to user action "Register security information" starting May 2026 the registration of Windows Hello for Business and macOS Platform SSO credentials will be in scope. #EntraID

[@mikko @mikko]

Time is a great way to show the scale of mega (million), giga (billion), and tera (trillion).

A megasecond ago was March 2026
A gigasecond ago was July 1994
A terasecond ago was 29,663 BCE in the Paleolithic era.

[MMS Minnesota @mmsmoa]

Yup 67 to go for #MMSMOA 2026. 😂
Note: Radisson Blu is sold out, so sign up quick for other hotel options. Don't get caught at the last minute. You don't want to miss this top notch technical event.

Register Now! 👉 https://t.co/YQ4Lo43clj
May 3-7, 2026

#Microsoft #ITpros #MSIntune #Windows #ConfigMgr #PowerShell

[Peter Klapwijk | MVP @inthecloud_247]

We often assume that configuring a 'Never persistent' browser session in Microsoft Entra ID means users cannot stay signed in on unmanaged devices.
Well… it turns out reality is more nuanced.

More in my recent blog post 👇

#Security #EntraID

https://t.co/6Cgk2ceGsI

[Sami Laiho @samilaiho]

Flaws in popular VSCode extensions expose developers to attacks
https://t.co/1prajqMtds

[Merill Fernando @merill]

Your PowerShell is probably full of stale Az modules.

I just fixed that.

You can now uninstall and clean up all Az modules in one go! Plus there’s a new Uninstall-All cmdlet that removes a stack of Microsoft modules safely.

Stop fighting version conflicts 🤩

Get it 👉 https://t.co/n1dmWN86rX

[Microsoft Edge Dev @MSEdgeDev]

Cross-platform policies are now generally available in the Edge management service! Configure Edge for Business across Windows, MacOS, iOS, and Android today.

Configure today: https://t.co/p1XO1QVKW3

[Jörgen Nilsson @ccmexec]

This is great!

[Trond Eirik Haavarstein @xenappblog]

Notepad CVE-2026-20841. Make sure to push to all Devices in @MSIntune to remediate.
https://t.co/A3PD7LFOzD

[Jörgen Nilsson @ccmexec]

Finally we got EPM support for AVD single-session virtual machines! That was the last piece in the Windows Support puzzle
#Windows11 #Msintune
https://t.co/5Hyc6B3xhs

[Sami Laiho @samilaiho]

CISA flags critical Microsoft SCCM flaw as exploited in attacks
https://t.co/ptqTpC9yVj

[Rudy Ooms @Mister_MDM]

Allow my organization to manage my device....

That single prompt has caused more unintended enrollments than most policies ever will. A user adds a work account, clicks the wrong button, and suddenly, the device is managed. Fun!!!

For years, the only defense was telling users to click No and hoping they actually did (or blocking personal devices).

Now there is real control over that behavior.

This blog walks through what changed, how to disable automatic MDM enrollment during account registration, and what is happening behind the scenes before the option fully lands in the portal.

With the feature now finally working, you may want to read the blog for all the details!

https://t.co/SXGfmyzf5P

#Intune #MSIntune #Windows #Windows11

[Merill Fernando @merill]

🔥 Maester 2.0 is LIVE! 🚀

And this one’s big.

💥 Over 1,000,000 Microsoft tenants have now used Maester 🤯.

An insane milestone that shows what happens when open-source meets real enterprise impact. Yes, that's not a typo. Maester has been used in over 1 million tenants.

[MMS Minnesota @mmsmoa]

Sami Laiho is a world recognized Windows Security expert and a legend in the tech industry. Welcome @samilaiho as #MMSMOA Speaker and see ya at the Mall of Americal.

Register Today 👉 https://t.co/YQ4Lo43clj
May 3-7, 2026

#Microsoft #ITpros #MSIntune #Windows #ConfigMgr #Windows365

[Merill Fernando @merill]

🚨 Microsoft just changed Microsoft 365 governance → permanently

For years, tenant governance has meant:

🔺 Scripts
🔺 Manual processes
🔺 PowerShell
🔺 Documentation
🔺 Drift
🔺 Inconsistency
🔺 Risk
🔺 Tribal knowledge

That model is officially over.

In the latest episode of https://t.co/YTVmebsh6k, I sat down with @NikCharlebois (Principal PM at Microsoft) to unpack Microsoft’s new Tenant Configuration Management platform - the official move to Tenant Config as Code.

This is a new operating model for Microsoft 365:

✅ Tenant snapshots as structured config
✅ Governance as code
✅ Drift detection
✅ Auto-remediation
✅ Dev/Test/Prod alignment
✅ API-first
✅ Graph-native
✅ Microsoft-managed execution
✅ Official support
✅ Platform-level governance

We’re moving from:

“Admin-driven configuration” 👉 “Platform-governed tenants.”

This is your new best friend if you work with:

�� Microsoft Entra
🌀 Microsoft 365
🌀 Security architecture
🌀 Cloud governance
🌀 Identity platforms
🌀 Enterprise IT
🌀 DevOps
🌀 Platform engineering

Thanks to ENow Software - AppGov Score for sponsoring this episode.

Get a free App Governance Benchmark Report for your Entra tenant 👉 https://t.co/Q1vpct6W80

Listen/watch the episode at https://t.co/Ds1VofJdUS

[WPNinjasNO @WPNinjasNO]

🚀Last call for speakers!
The Workplace Ninjas Norway Call for Papers closes on February 28!

We already have many great submissions, but more is always better 🙌

👉Submit your session here: https://t.co/l3GMlqn81c
#WPNinjasNO #CFS