Filter by topic, or search everything.
The first post in “It’s Not Just You”, a series on the Intune and Windows problems that make you think you broke something. Here’s what we found, how we caught it, and where to start if App Control burned you before. If you’ve clicked through Endpoint security in Intune, you’ve seen App Control for Business…
If you’ve tested the new ADE enrollment policies in Intune and Company Portal fought you afterward, you’re not alone. I was testing the new policies and hit the same issue on every device. Setup Assistant finished, Intune managed the device as expected, and device-level apps installed and removed without a problem. Then Company Portal tried…
If you started patching Macs, iPhones and iPads in Intune in the last year or so, you’re probably already using Apple’s declarative device management (DDM) update policies in favor of the old MDM-based software update policies. Apple has deprecated those and Microsoft has said Intune will soon end support for them, but if you’ve moved…
Autopatch picks your Edge channel, and that’s about it. Here’s how to control when Edge checks for updates, how users are told to restart, and when that restart actually happens. One thing Intune’s native Autopatch groups and policies still lack is real control over the Microsoft Edge update deadline and the notification experience your users…
Have you ever bought a new machine for your organization, set everything up cloud native and cloud first, and then watched a user log in for the first time only to find their primary security software is McAfee with a one year free trial? Loaded at the OEM level, of course. And you didn’t buy…
After roughly a year of writing deep-dive Intune content here on malinoski.me — posts on Assigned Access kiosks, Intune-based McAfee removal, policy conflicts, Autopatch deployments, and the eternal “why isn’t this device getting what I assigned?” question — I kept running into the same fundamental friction. Intune’s admin center is fantastic for creating policy, but…
Intune Suite Features Started Activating in Tenants This Week — Remote Help, Enterprise App Management, and EPM. Is It Time to Rethink Parts of Your Stack? Below we take a look at these new capabilities that are activating in your tenant and how to start piloting them now. If you run Intune day-to-day, you’ve probably…
Zero Trust essential configuration + real demo of the script approval flow In the aftermath of the Stryker incident earlier this year, enabling Intune’s Multi-Admin Approval feature (MAA) has become a non-negotiable Zero Trust control. If you’re not familiar with what happened, threat actors gained access to Intune and were able to execute mass wipe…
If you’ve been following along, you know I spend a lot of time thinking about shared and kiosk-style devices — especially the kind frontline workers and shift teams rely on every day. Managed Home Screen (MHS) on Android Enterprise has been a game-changer for locking those experiences down while still giving users seamless Microsoft Entra…
Hey everyone – I hope you had a great May the Fourth (if you’re into that sort of thing — may the force be with you). While a lot of us were celebrating Star Wars Day, Microsoft quietly dropped something that’s going to make daily life better for every Intune admin out there: the new…
If you’ve been following along this month, you already know the story: we’ve spent the entire month of April diving deep into Assigned Access—the Windows 11 technology that powers reliable, locked-down kiosks for public-facing, frontline, and general-use devices. From the very first kickoff post (where we looked at why the old Intune Kiosk Templates don’t…
That’s right—Assigned Access April is taking a quick breather this week. We’ve packed the month with deep dives into cloud-native Intune management for both internal and public-facing kiosks, and we’re building toward a strong grand finale before the month ends. Before we wrap up the series, I wanted to share something special that happened this…
Welcome back to Assigned Access April! If you’re just joining us, we’re spending the entire month of April geeking out over everything Assigned Access on Windows 11. Haven’t caught up yet? Start here with the earlier posts in the series: Today we’re tackling one of the most critical pieces of a production kiosk: the CSP…
Hi everyone and welcome to the first full week of Assigned Access April here at malinoski.me & I’m excited to kick things off with something brand new for the blog… an interview! In this exclusive interview, I sat down with Nicholas Pilzner, Senior Technical Support Engineer at Microsoft and the voice behind the excellent technical…
If you’ve followed the blog, you know I’ve spent a lot of time working with kiosk-style deployments on Windows devices. This month we’re going all-in on the technology that has become the proper way to lock down Windows 11 devices in public and shared environments. We’re calling it Assigned Access April — an entire month…
Hey everyone – you might be watching NCAA College Basketball this week, but today we’ve got the biggest showdown of the year: Microsoft 365 Showdown – your main-card matchup: Autopilot vs. Autopilot Device Prep. I’m beyond excited to announce that this is the official launch of my YouTube channel – Malinoski.me’s very first internet broadcast,…
It’s been about six months since Windows 11 version 25H2 dropped as a feature enablement package update on top of 24H2 & now is the time to adopt the newest release through Intune. Hey folks, I’ve been running 25H2 in testing since mid-2025, and honestly? It feels like the stability and control bump Windows 11…
If you blinked (👀) this week, you might’ve missed it—perfect Read-Only Friday material. The new Windows Autopatch update readiness reports hit general availability, and honestly, these are the kind of insights Intune admins have been asking for forever. Cassidy Fein at Microsoft announced the welcome addition Intune on the Windows IT Pro Blog—definitely worth a…
Hey folks, yep—that’s right. Autopilot Device Preparation. Or as the community lovingly calls it, Autopilot V2. The thing you definitely have fully configured in your tenant… right? 😅 If you’re like most Intune admins I talk to (including myself a couple years back), you’ve been rocking classic Autopilot V1 for ages because, let’s be honest,…
You didn’t misread the title—that’s right. After what felt like months of back-and-forth (published in the changelog, then yanked, then back again?), we finally have native PowerShell script install support for Win32 apps in Microsoft Intune. If you’ve been using Intune for any length of time, you know this has been one of the most…
Hey folks, happy 2026! As we start the new year, one thing every Windows admin should check off the list is verifying that your endpoints are ready for the Microsoft Secure Boot certificate transition. The old 2011 certificates start expiring in June 2026, and without the new Windows UEFI CA 2023 in place, devices won’t…
Hey folks, if you’ve ever banged your head against the wall trying to get Assigned Access (aka Kiosk mode) working smoothly on Windows 11 via Intune, you’re not alone. Microsoft’s documentation is… let’s call it “sparse” when it comes to the unique differences from Windows 10. The current Intune Kiosk templates? They were built for…
If you’ve been following along, you know I’m all about diving into the Microsoft ecosystem in ways that make our IT lives easier, more efficient, and honestly, a bit more fun. After that AI-packed Microsoft Ignite last week, I’ve been geeking out over all the new features rolling out—especially those paving the way for agentic…
I’ve been glued to the (virtual) screen for Ignite this week, and while the Agentic AI + Windows 11 compatibility news and deeper Security Copilot integration in M365 E5 are super cool, the session that actually made me sit up straight was “The future of managing updates on Windows.” People, Windows Autopatch in 2026 is…
As Microsoft shifts us toward cloud-managed endpoints via Intune, questions about fine-tuning these policies keep popping up – specifically regarding feature updates; uncontrolled feature updates can cause unsanctioned releases, leading to instability and poor user experiences Hey everyone, it’s been a bit since my last post on leveraging Autopatch to smoothly transition from Windows 10…
If you’re wrestling with Windows 10 machines that just won’t budge to Windows 11 before the support deadline, you’re in the right place. I’ve spent the past few years helping organization of various sizes tackle this exact challenge, and with Windows 10’s end-of-support looming just months away (October 2025, anyone?), getting those systems upgraded to…
The modern workspace approach for detecting & remediating HP Wolf Security Antivirus through Microsoft Intune application packaging. This week we’re diving into HP Wolf Security antivirus, which comes preinstalled on all HP systems. If you’ve been following along, this is very similar to what we did in our previous blog posts on automating McAfee removal.…
Device check-ins are the backbone of Intune ensuring policies and apps stay in sync But when latency creeps in, it can throw a wrench in your plans. As an Intune admin, you know the stakes: keeping devices compliant, secure, and up to date across a sprawling enterprise is no small feat… Drawing from insights shared…
The modern workspace approach for detecting & remediating McAfee AV through Microsoft Intune application packaging. Managing Windows devices in an enterprise environment is challenging, particularly when devices from manufacturers like Dell, HP, and Lenovo come preinstalled with McAfee antivirus. This software can disrupt zero-touch provisioning, conflict with corporate security solutions, and degrade system performance, reliability,…
