James Robinson | MVP

There's some companion apps coming to #Windows11 via the M365 Desktop Apps that might catch admins or users off-guard, so I've put some thoughts and information together in a mini-blog. skiptotheendpoint.co.uk/m365-compani...

📰 #OIB Windows v3.6 - Post-MMS Edition! - More 24H2 baseline settings - New LAPS account management - M365 Apps Baseline! Check out the release notes below: github.com/SkipToTheEnd...

#MMSMOA is almost upon us! Start your conference right with a dose of the #OpenIntuneBaseline, and asking a good question may reward you with a special shiny SkipToTheEndpoint sticker! 8am, Lakes B! Sign up here: stte.me/mmsoib

📬 #Windows Recall had a rocky start, but where do we stand now as it moves into GA? With a complete security overhaul, fresh admin controls, and a default-off strategy, the improvements are promising! Interested to read a more optimistic view? stte.me/recallisgreat

After picking up a Surface and having some time to play with #Windows #Recall, I'm working on a blog all about it, but am already fed up with seeing posts about policy not working. So let me make this as clear as I can:

It's an absolute pleasure to be invited back to the @mmsmoa.bsky.social to talk all about the #OpenIntuneBaseline! Interested in how it all started? Not sure how to get the most of it in your environment? I'm stoked to be able to tell you all about it! sched.co/1uF7c

I am deeply unhappy that these things now qualify as being "dad rock". And that I'm the dad.

📰 OIB Windows v3.5 - 24H2 Baseline Edition! A surprise drop of some settings and an updated 24H2 Intune baseline brings some of those additions (and some extra goodies) to the Windows OIB. Check out the changelog below! github.com/SkipToTheEnd...

📬 It's been a quiet couple of months on the #Intune front, so what's better than getting Intune 2501 in February! New Edge settings, more Apple DDM, and CSP control over the upcoming #Windows #Recall feature. skiptotheendpoint.co.uk/settings-run...

🚨 #OpenIntuneBaseline Windows v3.4 Released! New additions and some things to be aware of, such as the fact all policy names have been updated. Thanks for all the community input. You guys rock. Check out the release changelog below: github.com/SkipToTheEnd...

📰 OIB 3.4 News! I'm busy finalising changes/updates to v3.4 of the #OpenIntuneBaseline. Some forewarning of a "breaking change" in that all policies have been renamed to show where they actually exist (ES - Endpoint Security, SC - Settings Catalog). I still don't like it :(

Another day, another "x policy/remote action isn't working on our iOS devices" issue. Just because you used Corp Identifiers, or switched it from Personal to Corp doesn't mean that device is Supervised. Stuff won't work as you expect. Enrol your devices properly, guys!

Is this another hilarious #Windows en-GB install media localisation issue where "checked" has been replaced with "ticked"? 24H2 26100.2605

Copy > Paste > Scale

📬 Following from last week, Part 2 in the story of #Windows CSP and #Intune policy deployment. ControlPolicyConflict, Policy Scope and MMP-C, oh my! Happy Holidays! skiptotheendpoint.co.uk/windows-csp-...

📬 Do you administer #Intune or support Intune-managed devices? Do you know how policy gets delivered to devices, and how the OS handles them? Check out part 1 of 2 all about the nuance and intricacies of #Windows CSP's! skiptotheendpoint.co.uk/windows-csp-...

Oh my I think it finally happened! The #Defender security "recommendation" to implement a now-defunct version of LAPS has disappeared! Can't seem to find any official changelog though. It's a Festivus miracle! 🎉

Is this #Defender #ASR recommendation notification new?! Incredibly cool that it's analysed the logs, seen no audit or warn events and actively suggesting to deploy it with as associated user impact!

#OIB hivemind - The #Intune UI change that dumps everything into the Configuration page makes it hard to know where a policy actually exists. Thoughts on adding "SC" for Settings Catalog and "ES" for Endpoint Security into the naming convention?

"Management" asks for changing default fonts, or right-click menu's, or moving the start button are unsustainable. Say "No". Empower your users with training or KB's. Stop assuming you know what every individual needs to be productive. #SomeExclusionsApply

Catch @shadykhorshed.bsky.social , @skiptotheendpoint.co.uk , @ugurkoc.de, and me this Thursday at 2 PM EST as we dive into all the biggest Intune and Windows updates from Ignite. youtu.be/msx-giuKfx4 #intune #autopilot

One from the archive, but ever relevant for those embarking on their journeys into #Intune management. Names of things may have changed, but the sentiment has not. skiptotheendpoint.co.uk/haadj-stop-i...

📬 Another month and another #Intune SR means another Settings Rundown! UI changes, Hardware Inventory, Template Deprecation and WSL Compliance, oh my! skiptotheendpoint.co.uk/settings-run...

#Edge is, and should be the only browser installed on your #Intune managed devices and allowed for BYOD. It's not about people's feelings. It's about manageability and security of Enterprise Identities and Data. These upcoming additions are excellent. blogs.windows.com/msedgedev/20...

Hotpatching is amazing technology for business-critical devices, but should *NOT* form your default patching experience. How many issues magically "disappear" by making the user reboot their device? Perhaps have a think before deploying anything... techcommunity.microsoft.com/blog/windows...

"When it comes to security, it's fundamentally a team sport" - Satya @ #MSIgnite Yes! Endpoint Management is Security. Identity is Security. Infrastructure is Security. Just cos you've got a "Security Team" doesn't mean they're looking at or understand everything holistically.

Heh. Nice 👌

It's frustrating starting from "scratch", but overall refreshing. It's almost like people enjoy a platform not overlorded by a nut-job with a God complex who sucks up to fascist dictators. Who knew?!

People having issues implementing #Intune and trying to "migrate" or "replace" GPO management on existing Hybrid devices causes far, far more issues than it's generally worth. skiptotheendpoint.co.uk/the-ultimate...