Daniel Ratliff

Daniel Ratliff

@potentengineer.com

Principal Systems Engineer with a focus on automation and AI for all endpoint technologies. #microsoft365 #msintune #configmgr #powershell #automation

495 followers680 following84 posts

The req has been updated with new locations! If you are near any of these areas, check it out! Arlington, VA Austin, TX Dallas, TX Fort Lauderdale, FL Louisville, KY Nashville, TN Remote NY NYC METRO Tampa, FL careers.humana.com/us/en/job/R-...

careers.humana.comLead Systems Engineer - Hybrid in Louisville, Kentucky | Technology and Digital Analytics at HumanaApply for Lead Systems Engineer - Hybrid job with Humana in Louisville, Kentucky. Technology and Digital Analytics at Humana
Daniel Ratliff@potentengineer.com

Come join our Cloud Solutions Engineering team as our Windows Endpoint Management SME! Includes things like #msIntune, #Autopilot, #Windows365, #configmgr and lots more. careers.humana.com/us/en/job/R-... #itpro #sysadmin #winadmin

Daniel Ratliff reposted

🆕 Introducing the Install Matrix an open source GitHub repo full of PowerShell scripts that help reduce duplicate work making it quick and easy to package apps and reducing overhead when updating them. Check it out! thedxt.ca/2026/01/inst... #PowerShell #Intune #EUC #GitHub #RMM

thedxt.caInstall MatrixAt EUC World Amplify 2025, I gave a presentation titled “Transforming Chaos into Control: Mastering Windows App Deployments with Intune“. The presentation covered the ways I’ve been deploying applicat...

Daniel Ratliff reposted

Something fun came across my desk today so I did my best Ugur Koc impression and wrote this script which will capture data from your PCs to tell you which ones need to update to the new secure boot certificates by June before all chaos breaks loose! :scream: mobile-jon.com/2025/12/19/l...

mobile-jon.comLeveraging Log Analytics to Query Secure Boot Certificate Update StatusMicrosoft doesn't have a way to query registry keys for your entire PC environment. This solution uses PowerShell and Log Analytics to solve that problem.

Daniel Ratliff reposted

Daniel Ratliff reposted

Hey #PowerShell people and #CyberSecurity professionals: I made a quick little module to search scripts, so we can find and fix potential CVE-2025-54100 related problems (or other dangerous anti-patterns, like Invoke-Expression). Hope this Helps! github.com/StartAutomat...

github.comGitHub - StartAutomating/SearchScript: Search PowerShell ScriptsSearch PowerShell Scripts . Contribute to StartAutomating/SearchScript development by creating an account on GitHub.

Daniel Ratliff reposted

No extra license. No extra work. Intune just boosted your M365. Microsoft is rolling advanced Intune features straight into M365 E3/E5. Remote Help, Advanced Analytics, EPM, Cloud PKI and more. Stronger security, easier management, and better support out of the box. #MSIntune #IntuneMVP #MVP

Daniel Ratliff reposted

Daniel Ratliff reposted

There's no controversy around the idea that you should not modify the default domain & default domain controller GPOs in Active Directory (except for setting account policies). Did you know you can use dcgpofix to reset them when they have been...mangled? learn.microsoft.com/...

Daniel Ratliff reposted

The Power in PowerShell is YOU. PowerShell makes YOU AWESOME!

Catelli@catelli.bsky.social

I just wrote a PowerShell script that anyone in the company can use to fix an ongoing issue. It works! I don't care if no one ever uses it, it works! And I didn't use AI to figure it out! Just old-fashioned forum hunting for the commands I needed. TAKE THAT COPILOT! I DID IT WITHOUT YOU!

Daniel Ratliff reposted

Right Click Tools v5.11.2511 is out! New in this release: • Migrate apps from #ConfigMgr → #Intune • Exclude external dependencies in deployment processes • Insights support for HP G4/G5 docks • Platform-wide stability + UX improvements Full notes: docs.recastsoftware.com/help/recast-...

docs.recastsoftware.comRecast Version 5.11.2511.1804 | Recast DocsRecast Software Version 5.11.2511 includes new Right Click Tools Patching and Insights features, plus a wealth of bug fixes resulting from a weeklong Bug Bash.

Daniel Ratliff reposted

Get ready, folks. 🌟 You’re about to witness ONE. BIG. BEAUTIFUL. ABSURDLY. EPIC. THREAD. 🧵🔥 Some say this might be the MOST EPIC and MOST RIDICULOUSLY LONG identity thread ever written 📗 Bookmark this Honestly… the cover image alone deserves a like + retweet DO IT 😂

Daniel Ratliff reposted

#Intune finally supports native PowerShell scripts for Win32 app installs. No more wrapping scripts inside .intunewin files. You can update scripts without repackaging and choose 32 or 64 bit. Way cleaner and easier to manage.

ourcloudnetwork.comPowerShell Script Support Added for Win32 Intune App DeploymentPowerShell script support has been added directly to the Intune app deployment Wizard. Learn why this is a great improvement.

I have a ton of work to do over there next year with as built documentation. These will save me so much time. 📄📄📄 Thanks for sharing Clate!

Clate@devclate.bsky.social

If you aren’t using these, definitely check them out! And they have more than just AD as well.

Daniel Ratliff reposted

Happy Birthday to #PowerShell ! It released 19 years ago today, and the shell has never been the same! Share your shell stories and celebrate! Release modules and scripts as presents! Put em on #GitHub or #Tangled, share em on #BlueSky. #MVPBuzz Also, Happy Birthday to my Dad!

Daniel Ratliff reposted

👋 Folks, I'm super excited to announce the launch of the Microsoft Zero Trust Assessment! I've been working on this project for the past year at Microsoft with an extended team including our security researchers, product feature teams and docs Here's what it does

Daniel Ratliff reposted

Heads-up, #ITPros! 🚨 Microsoft is rolling out a breaking change to Power Automate HTTP/Teams webhooks. If you use them for #PatchMyPC alerts, this affects you. ❗ Old URLs stop working Nov 30 - less than 3 weeks away Learn more ➡️ https://bit.ly/46OBUzH #PowerAutomate #MicrosoftTeams #PatchMyPC

bit.lyMicrosoft Breaking Change to Teams / Power Automate WebhooksMicrosoft has announced a breaking change to the way HTTP or Teams Webhook trigger flows work in Power Automate. This change may affect customers using Patch My PC alerts configured with a Teams webhook URL. For reference, Microsoft's announcement can b...

Daniel Ratliff reposted

Tired of your PowerShell scripts crashing when pulling Intune reports? 😩 Learn how to handle Microsoft Graph rate limits like a pro. 🛑 Understand global vs Intune limits 🚦 Respect Retry-After ⏱️ Use exponential backoff 👉 msendpointmgr.com/2025/11/08/g... #PowerShell #Intune #GraphAPI

msendpointmgr.comA beginners guide to Microsoft Graph API rate limiting in Intune - MSEndpointMgrLearn how to handle HTTP 429 rate limiting when working with Microsoft Graph API. Understand Retry-After, throttling limits, and exponential backoff for resilient PowerShell automation.

Daniel Ratliff reposted

October flew by, but wanted to see what #PowerShell you did in October that you can share? Doesn’t matter how big or small, as it could give someone else an idea or even help them out!

Daniel Ratliff reposted

📰 I’ve deployed Windows Shared PCs at multiple customers lately, so I wrote down everything that works. I cover OneDrive, WHfB, PDE, GSA, licensing + pratical tips from the field. Read it 👉 burgerhou.tj/gj4qtn #MSIntune #MVP #MVPBuzz #SharedPC #Windows11

burgerhou.tjMastering Windows Shared PCs with Microsoft IntuneShared PCs are a perfect fit for frontline, education, or shift-based environments — where devices are used by multiple users throughout the day. But managing them right requires the right balance bet...

Daniel Ratliff reposted

Replying to @samerde.day3bits.com

ctrl+shift+p > "PowerShell: Restart Session" or "Developer: Restart Extension Host" I have key bindings set for both because it's a frequent issue.

Daniel Ratliff reposted

A new DLL just appeared in the #Intune Management Extension... and it speaks IC3 👀 Yes, that IC3, the same platform that keeps Teams presence in sync across millions of devices. Could this mean real-time online status in #MSIntune? We broke it all down ➡️ https://bit.ly/4hPkDM0 #IME #Windows11

bit.lyAre we about to see Green/Red Online Device Status in Intune? The IME hints at it!First signs of IC3 inside the Intune Management Extension.The same tech that powers real-time communication in Teams.What’s it preparing for?

Daniel Ratliff reposted

📰🆕: The #INR script v1.4 to test #Intune and related network services just got its first big update in a bit. Here's what changed in the latest version. - ID-to-Service list is now available. - Test MCC - Test NuGet - ... Go grab the new version here: github.com/MHimken/Intu...

github.comRelease Version 1.4 (Community-Is-Key) released · MHimken/IntuneNetworkRequirementsA handful of updates (full changelog here) are finally implemented: ID-to-Service-List list is now available. This will show you which custom ID is related to which service. Test MCC endpoints Tes...

Daniel Ratliff reposted

By the way, if you aren't using Home Assistant yet, now's a great time to start. You don't have to own the house you're in, you don't have to change any wiring, you don't have to do anything expensive. If you have any inexpensive old computers/laptops laying around, they're perfect for this. /cont'd

Emmaly@emma.ly

I don't appreciate being reminded about the rapid passing of time... This screenshot (from the YouTube live stream of Home Assistant 2025.5 Release Party) feels applicable today. Pictured are Missy @adorablecyb.org, Paulus @paulusschoutsen.nl, and Frenck @frenck.social (role details in alt text)

Despite my experience gripes, Windows 11 does have an 84-page booklet on security improvements. Massive driving factor to upgrade our enterprise. That fact was in all our presentations.

SwiftOnSecurity@swiftonsecurity.com

In last 15 years, Windows security across OS, network layer, browser, and file interpreters became wildly hardened against attack. Explaining why very detailed, but there was a time a hacking competition gave up giving cash prizes because it was too easy. There's $1 million prizes now. A new world.

Daniel Ratliff reposted

I just published version 1.0.0 of psedit. It's a terminal-based editor for PowerShell. This includes a new variable window, some bug fixing, YAML syntax highlighting and updates to the latest version of GUI.cs. github.com/ironmansoftw...

github.comRelease 1.0.0 · ironmansoftware/pseditWhat's Changed #64 upgrade to terminal gui 1.17.1 by @halvarsson in #65 Add support for YAML by @adamdriscoll in #70 Add YAML to file save. by @adamdriscoll in #71 Fixes #66 by @adamdriscoll in #7...

Daniel Ratliff reposted

Before #Intune policies or MDM check-ins, there was... a patent. Filed in 2005. Quietly shaping how every #Windows device still checks in today. We dug up the origin story, and it’s a wild, nerdy ride ➡️ https://bit.ly/3Leefl5 #MoreThanJustPatching #PatchMyPC

Daniel Ratliff reposted

Simplified Windows Update titles: Windows updates play a vital role in keeping devices secure, performant, and up to date. To further enrich the user experience, we're introducing a simplified and standardized titling system for a range of updates. This new format is designed… #WindowsITPro

bit.lySimplified Windows Update titlesWindows updates play a vital role in keeping devices secure, performant, and up to date. To further enrich the user experience, we're introducing a simplified and standardized titling system for a range of updates. This new format is designed primarily with the user in mind. Titles are more intuitive, consistent, and informative to help users quickly understand what updates they're receiving. Enhanced clarity and consistency across update titles The updated titles follow a clear and predictable structure across multiple update types. Each title now refers to the update by a more user-friendly name. It also includes just the most relevant identifiers, such as KB number and build or version. What we omit are the unnecessary technical details like platform architecture or date prefixes. Here are examples of what the updated titles look like: * Monthly or out-of-band security updates: Security Update (KB5034123) (26100.4747) * Monthly preview non-security updates: Preview Update (KB5062660) (26100.4770) * .NET Framework security updates: .NET Framework Security Update (KB5056579) * .NET Framework non-security updates: .NET Framework Preview Update (KB5056579) * Driver updates: Logitech Driver Update (123.331.1.0) * AI component updates: Phi Silica AI Component Update (KB5064650) (1.2507.793.0) Screenshot of the Windows Update page showing that the Preview Update has begun to download. Screenshot of the Update history page indicating the .NET Framework Preview Update has been installed. Scope and compatibility This title simplification applies to: * Windows OS quality updates (monthly security and non-security preview updates) * .NET Framework updates * Driver updates * AI component updates * Visual Studio updates New update names now appear in the following locations common to users: * Settings > Windows Update * Settings > Windows Update > Update history * Windows release health If you deploy updates through Microsoft Update Catalog or Windows Server Update Services (WSUS), most update titles remain unchanged[i] (e.g., 2025-10 Cumulative Update for Windows 11, version 25H2 for x64-based Systems (KB5066835) (26200.6899). Windows feature update titles also remain the same. Small changes that make big differences With this first large-scale improvement in update naming, we hope users at your organization can take advantage of several benefits: * Improved readability for users reviewing updates in Windows Settings or Update history. * Predictable formatting for original equipment manufacturers (OEMs) and partners integrating with servicing tools. The improved titles align with modern user interface (UI) expectations and accessibility standards, supporting security and productivity through reduced ambiguity. [i] Visual Studio update titles are now simplified across all channels as follows: Visual Studio 2022 Security Update (version). --- Continue the conversation. Find best practices. Bookmark the Windows Tech Community, then follow us @MSWindowsITPro on X and on LinkedIn. Looking for support? Visit Windows on Microsoft Q&A.

Daniel Ratliff reposted

If you're interested in moving from ClickOps to #DevOps and missed @donnietaylor.bsky.social's session at #MMSMusicCity, you can still practice your #IaC skills with the #terraform and #azure code samples on Donnie's GitHub: tinyurl.com/ClickOps2Dev... My personal favorite is drift detection :)

github.commms-music-edition-presentations/ClickOps to DevOps at main · donnietaylor/mms-music-edition-presentationsNotes and presentations for MMS Music 2025. Contribute to donnietaylor/mms-music-edition-presentations development by creating an account on GitHub.

Daniel Ratliff reposted

Daniel Ratliff reposted

Policy-based removal of pre-installed Microsoft Store apps: Have you ever needed to remove pre-installed Microsoft Store apps? If so, you might have encountered scripts that break when apps change, making your job more time-consuming. Thanks to your feedback, starting this month, you… #WindowsITPro

bit.lyPolicy-based removal of pre-installed Microsoft Store appsHave you ever needed to remove pre-installed Microsoft Store apps? If so, you might have encountered scripts that break when apps change, making your job more time-consuming. Thanks to your feedback, starting this month, you can remove select provisioned in-box apps using straightforward policy on Windows 11 Enterprise or Windows 11 Education, version 25H2. Custom imaging and complex scripts are no longer required. You’re now more in control of provisioned Microsoft Store apps than ever. Meet the new policy: Remove default Microsoft Store packages from the system. How the new app management policy works Here’s what you need to know about this new policy: * It lets you select from a defined list of preinstalled Microsoft Store apps and remove those apps from Windows 11 Enterprise and Education devices. * It works with Group Policy or your mobile device management (MDM) solution, including Microsoft Intune. * This policy is off by default, so you must explicitly enable it. * Once enabled, enforcement occurs automatically. A cleanup task deprovisions removed packages and local app data is removed from the user’s device. * The policy is applied to the user’s device during any of the following occasions: o   During the out-of-box experience (OOBE) o   When the user signs in after an operating system (OS) upgrade o   When the user signs in after an update to the policy * The policy can be used in conjunction with standard Windows provisioning methods, including Windows Autopilot. However, it’s not specific to or dependent on these methods. Why policy-based removal of apps matters By using a policy to remove preinstalled Microsoft Store apps, you can: * Reduce operational overhead. Drop fragile and manual removal scripts and automate operations. * Create a cleaner, work-ready experience. Provide a Windows experience tailored for your work environment. Policy availability and applicable apps The new policy is now available for devices running Windows 11 Enterprise, version 25H2 and Windows 11 Education, version 25H2. It currently supports removal of the following apps: * Calculator * Camera * Feedback Hub * Microsoft 365 Copilot * Microsoft Clipchamp * Microsoft Copilot (consumer version) * Microsoft News * Microsoft Photos * Microsoft Solitaire Collection * Microsoft Sticky Notes * Microsoft Teams * Microsoft To Do * MSN Weather * Notepad * Outlook for Windows * Paint * Quick Assist * Snipping Tool * Sound Recorder * Windows Media Player * Windows Terminal * Xbox Gaming App * Xbox Identity Provider * Xbox Speech to Text Overlay * Xbox TCUI The list will be updated as appropriate for future releases. Enable in-box app removal via policy This app management policy is available to you via Microsoft Intune settings catalog, configuration service provider (CSP), and Group Policy Object (GPO). To make use of it, you’ll need to enable it and tailor the list of preselected apps to your organization’s requirements. Avoid applying both an Intune and a GPO removal policy to the same device. Recommended: Configure devices with Microsoft Intune  You can use Microsoft Intune to configure devices with a settings catalog policy or a CSP policy. * In Microsoft Intune admin center, go to Devices > Manage devices > Configuration > Create > New policy to create a settings catalog policy. * Use the following settings: * Category: Administrative Templates\Windows Components\App Package Deployment * Setting name: Remove default Microsoft Store packages from the system * Value: Enabled * Set the toggle to True for each app to remove it. * Assign the policy to the desired group, or groups, of devices. Note: Intune won’t apply this policy to unsupported devices and will instead show a status of “Not applicable” for those devices. You can also configure devices with the RemoveDefaultMicrosoftStorePackages CSP policy. This ADMX-backed policy uses an XML payload to specify which apps to remove. o   Set the value of packages to be removed to True. For example, o   Set the value of packages to keep to False. For example, Use Group Policy To apply the policy to a single device, use the Local Group Policy Editor. For multiple devices joined to Active Directory, create or edit  a GPO and use the following settings: o   Group policy path: Computer Configuration\Administrative Templates\Windows Components\App Package Deployment o   Group policy setting: Remove Default Microsoft Store packages from the system o   Value: Enabled Select the apps to remove from the provided app list. One way to double-check that this policy is active is to check registry keys. The registry keys will have configured values under HKLM\SOFTWARE\Policies\Microsoft\Windows\Appx\RemoveDefaultMicrosoftStorePackages. Customize app availability for your users today With this new app management policy, you can efficiently deploy changes to the default Microsoft Store apps available on your users’ devices. Empower your organization to be more productive by offering a more tailored user experience. Simplifying device configurations can also help strengthen your security posture and streamline daily operations. And, if you have been manually removing in-box apps because their versions are out of date, you no longer need to! We’ve solved that problem in the latest versions of Windows 11. Your built-in Microsoft Store apps now come updated out-of-the-box. Now is the perfect time to deploy Windows 11 Enterprise or Education, version 25H2, and take advantage of this new management capability.  --- Continue the conversation. Find best practices. Bookmark the Windows Tech Community, then follow us @MSWindowsITPro on X and on LinkedIn. Looking for support? Visit Windows on Microsoft Q&A.