Articles on this site are regularly updated with fresh insights and practical tips on the Microsoft Modern Workplace. All posts are listed here with their publication date for quick reference. If a specific article is not immediately visible, use the search function to find it. Older blog posts are also included in this overview, while the full articles are available on LinkedIn.
Enterprise Application Management isn’t new, but the option to automatically update these apps is. Recently this option has become Generally Available (GA). Just in time for the summer break so you won't have to package those applications by your self!.
Enterprise Application Management is now included for customers using the Microsoft 365 E5 suite...
In December 2025, Microsoft announced a major change to the Intune Suite. The Microsoft Intune Suite will become part of the Microsoft 365 E3 and Microsoft 365 E5 licenses instead of remaining a standalone add-on. In previous blog posts, several powerful capabilities of the Intune Suite were described in the Blog Series: Intune Suite a hidden Gem?
Recovery mode for macOS is a built-in troubleshooting environment that runs independently of the main operating system. End users can activate recovery mode by themselves. It provides a set of essential utilities to repair hard drives, restore from backups, reinstall macOS, or modify startup security settings. When this mode is not protected, any...
The great benefit of SAAS services is that they are continuously evolving. Microsoft Intune works with Service Releases for the new features and improvements. Some feature are announced and some are not that visible. But now something is changing. The overview of device blade is changing. In this (short) blog post if describe the proces of changing...
MacOS Platform Single Sign On with Secure Enclave is great, but how can we provide an extra layer of protection by ensuring that the user will confirm their identity with TouchID. With these requirement upon registration the user physical presence is needed, it can reduce the risk of unauthorized enrollments and helps keeping account access aligned...
Token theft, also known as session hijacking, has become a primary attack vector. These attacks can bypass Multifactor Authentication (MFA) prompts, making it essential to protect credentials and, in turn, the tokens themselves. On Windows devices , several techniques are available, such as Windows Hello for Business (WHfB) with Conditional Access....
This is a feature many have been waiting for. For years, it was necessary to guide users step by step to prevent them from accidentally enrolling their personal devices into Intune when adding a work or school account. This was mainly due to the well-known dialog where the wrong option was often selected. Now this is changing. With this new...
June 2026 should be marked in your calendar not for your summer holiday, but the fact that the Secure Boot Certificates will expire! These certificates are from 2011 and June 2026 marks the expiration date. When your Windows devices are managed with Intune, you can use Intune to handle the update process. But there are some caveats find out which!...
We all have been there, the situation where an Entra ID group was accidentally removed. Not an ideal situation, Intune is based upon group assignment and those assignments won't work when there isn't a group attached. But there is something new out there, Soft Deleted Groups. This now supports cloud based security groups. Read on to find out more.
Recently Microsoft has released the Admin Tasks node in the Intune Console. This feature is in preview and is designed to give you an overview of some specific task at require some attention. If you are an administrator for more then one organization or tenant and you want to view these tasks without logging into the Intune portal you can...
In August 2025 Microsoft has released Windows Back-up for Organizations this feature was in Preview. Last month this feature has been released as Global Available (GA). Time to take a closer look at this feature. In this post I describe how to enable the feature, control the settings available. And last but not least how can the user perform...
Starting in the summer of 2025, Microsoft has released the Microsoft Companion Apps. These Companion Apps consist of the following apps: People, Files, and Calendar. In October 2025, Microsoft has quietly enable these apps for Windows 11 devices through the Microsoft 365 App update process. If your organization wants to control whether these apps...
This is the way 😏. A long wanted feature is now available in the Settings Catalog Configuration Profile for Windows in Intune. Now we can select which apps aren't available in your Windows 11 25H2 environment.
We all have been there, a moment or action that a second pair of eyes or approval could prevent a mistake….
