Unattended Remote Help Comes to Windows
What actually changed, and how to govern it Intune service release 2608 shipped this week, and buried in the release notes is a capability that materially changes what your helpdesk can do to a corporate…
Blogs
Two Deprecations, One Sweep: Finding WMIC and VBScript Dependencies Before They Break Your Fleet
Windows has been logging every VBScript invocation on your estate for months, complete with the process tree that triggered it. Almost nobody is collecting it and it happens to be the fastest way to find…
Exchange Free/Busy Is Leaving EWS Soon
A practitioner’s guide to migrating Organization Relationships, Availability Address Spaces and Sharing Policies to Microsoft 365 Cross-Tenant Access Policy Microsoft has quietly moved one of the least glamorous but most load-bearing features in Exchange Online.…
Registry Inventory in Intune: What It Kills, What It Can’t Touch
A side-by-side against Proactive Remediations with the limits Microsoft buried in a bullet point. Intune 2607 added native Windows registry collection to the properties catalog. It retires a specific class of detection script, the ones…
Your April RDP Fix Is Already Legacy
Microsoft renamed the .rdp trusted-publisher policy and added SHA-2 support in the July 2026 update and Intune still shows the old SHA-1 label. Here is the complete deployment, signing, and audit playbook. Timeline: what changed,…
Real-Time Driver & Firmware Update Reporting for Intune
Because “Windows Update Says We’re Fine” Isn’t a Report If you manage a Windows fleet through Microsoft Intune, you’ve probably had a version of this conversation with a client or a security team: “Are all…
The July Update That Quietly Kills Your VPN
Hunting unregistered TDI transports with Intune before they reach your broad ring. Microsoft shipped a record 570 CVE fixes on 14 July 2026. Every blog on earth is busy counting them. The change that will…
Defender Now Inspects the Agent Loop & Runtime Protection for Local AI Agents
Public preview as of June/July 2026. Verify current entitlement and supported agents in Microsoft Learn before deploying, since preview behaviour changes. Antivirus has spent thirty years asking one question: is this file or process malicious?…
Automating Intune Device Retire & Delete When Multi Admin Approval Now Intercepts Your App-Only Scripts
What changed in June 2026, why your certificate-based automation suddenly returns 403, and how to build a script that submits retire and delete the right way through the MAA approval workflow. If you run certificate-based…
CVE-2023-36010 Won’t Go Away: Defender Flagging a 3-Year-Old, Already-Patched Vulnerability on a Fully Updated Fleet
How to prove it’s a Microsoft Defender Vulnerability Management reporting artifact not a real exposure and what to do about 400+ “exposed” devices. Defender Vulnerability Management (MDVM) started showing CVE-2023-36010, a December 2023 Microsoft Defender…