A side-by-side against Proactive Remediations with the limits Microsoft buried in a bullet point. Intune 2607 added native Windows registry collection to the properties catalog. It retires a specific class of detection script, the ones…
Microsoft renamed the .rdp trusted-publisher policy and added SHA-2 support in the July 2026 update and Intune still shows the old SHA-1 label. Here is the complete deployment, signing, and audit playbook. Timeline: what changed,…
Because “Windows Update Says We’re Fine” Isn’t a Report If you manage a Windows fleet through Microsoft Intune, you’ve probably had a version of this conversation with a client or a security team: “Are all…
Hunting unregistered TDI transports with Intune before they reach your broad ring. Microsoft shipped a record 570 CVE fixes on 14 July 2026. Every blog on earth is busy counting them. The change that will…
Public preview as of June/July 2026. Verify current entitlement and supported agents in Microsoft Learn before deploying, since preview behaviour changes. Antivirus has spent thirty years asking one question: is this file or process malicious?…
What changed in June 2026, why your certificate-based automation suddenly returns 403, and how to build a script that submits retire and delete the right way through the MAA approval workflow. If you run certificate-based…
How to prove it’s a Microsoft Defender Vulnerability Management reporting artifact not a real exposure and what to do about 400+ “exposed” devices. Defender Vulnerability Management (MDVM) started showing CVE-2023-36010, a December 2023 Microsoft Defender…
From Frontier enrollment to a signed-in user – every gate, every policy, every gotcha. Microsoft Scout is the new Frontier desktop app that lets end users delegate real work to an AI agent, it can…
Browser extensions have quietly become one of the least-governed attack surfaces in the modern enterprise stack. They run with broad permissions, update outside your normal patch cycle, and until now, most admins running Microsoft Edge…
A practical, production-ready approach to keeping your device inventory clean. If you’ve administered a Microsoft Entra ID (formerly Azure AD) tenant for any length of time, you’ve seen it, hundreds and sometimes thousands of stale…