Articles on this site are regularly updated with fresh insights and practical tips on the Microsoft Modern Workplace. All posts are listed here with their publication date for quick reference. If a specific article is not immediately visible, use the search function to find it. Older blog posts are also included in this overview, while the full articles are available on LinkedIn.
The great benefit of SAAS services is that they are continuously evolving. Microsoft Intune works with Service Releases for the new features and improvements. Some feature are announced and some are not that visible. But now something is changing. The overview of device blade is changing. In this (short) blog post if describe the proces of changing...
MacOS Platform Single Sign On with Secure Enclave is great, but how can we provide an extra layer of protection by ensuring that the user will confirm their identity with TouchID. With these requirement upon registration the user physical presence is needed, it can reduce the risk of unauthorized enrollments and helps keeping account access aligned...
Token theft, also known as session hijacking, has become a primary attack vector. These attacks can bypass Multifactor Authentication (MFA) prompts, making it essential to protect credentials and, in turn, the tokens themselves. On Windows devices , several techniques are available, such as Windows Hello for Business (WHfB) with Conditional Access....
This is a feature many have been waiting for. For years, it was necessary to guide users step by step to prevent them from accidentally enrolling their personal devices into Intune when adding a work or school account. This was mainly due to the well-known dialog where the wrong option was often selected. Now this is changing. With this new...
June 2026 should be marked in your calendar not for your summer holiday, but the fact that the Secure Boot Certificates will expire! These certificates are from 2011 and June 2026 marks the expiration date. When your Windows devices are managed with Intune, you can use Intune to handle the update process. But there are some caveats find out which!...
We all have been there, the situation where an Entra ID group was accidentally removed. Not an ideal situation, Intune is based upon group assignment and those assignments won't work when there isn't a group attached. But there is something new out there, Soft Deleted Groups. This now supports cloud based security groups. Read on to find out more.
Recently Microsoft has released the Admin Tasks node in the Intune Console. This feature is in preview and is designed to give you an overview of some specific task at require some attention. If you are an administrator for more then one organization or tenant and you want to view these tasks without logging into the Intune portal you can...
In August 2025 Microsoft has released Windows Back-up for Organizations this feature was in Preview. Last month this feature has been released as Global Available (GA). Time to take a closer look at this feature. In this post I describe how to enable the feature, control the settings available. And last but not least how can the user perform...
Starting in the summer of 2025, Microsoft has released the Microsoft Companion Apps. These Companion Apps consist of the following apps: People, Files, and Calendar. In October 2025, Microsoft has quietly enable these apps for Windows 11 devices through the Microsoft 365 App update process. If your organization wants to control whether these apps...
This is the way 😏. A long wanted feature is now available in the Settings Catalog Configuration Profile for Windows in Intune. Now we can select which apps aren't available in your Windows 11 25H2 environment.
We all have been there, a moment or action that a second pair of eyes or approval could prevent a mistake….
Microsoft recently added new features in the App Protection Policy for iOS in Intune. One of these features changes the use of screen capture possibility for iOS. In this article I will described what is changed and how this could reflect on your setup for the App Protection Policies for iOS.
One of the benefits of the Remote Help feature in Intune is the support for Conditional Access for this application. But this support is not enabled by default. How can you enable this? In this blog post I will demonstrate how to enable the support for Conditional Access. Furthermore I will show an use case for the use of Conditional...
