Tag: EndpointManagement
-
Edge 150: Prepare for Ludicrous Speed
How to clean up policies, build Enterprise Preview rings, and survive Microsoft’s new browser release cadence Prepare for Ludicrous Speed. There are browser releases, and then there are browser releases that signal something bigger. At first glance, Microsoft Edge 150 looks like a fairly standard update. We get Workspace changes, Sidebar retirement, Google account sign-in…
-
Conditional Access: The Ultimate Inventory Cop
How Rogue Devices Sneak In and How to Throw Them Out The reality is that keeping a current, accurate device inventory in Microsoft Entra ID is a nightmare. Personal devices get registered during a quick Teams login, BYOD endpoints connect without MDM management, stale records sit in the directory years after a laptop was e-wasted,…
-
The Zombie Endpoint: When Stale Records Refuse to Die
Last week, we looked at the classic Friday-afternoon nightmare: staring at three identical device objects in Microsoft Entra ID while trying to deploy a critical policy. We mapped out the two main control planes—Entra ID for identity and access, Intune for management—and talked about why a brute-force deletion sweep is a terrible idea, especially when…
-
I’m Surrounded by a Bunch of Device Objects: Cleaning House in the Cloud Without Burning Everything Down
It’s 4:30 PM on a Friday. You’re trying to deploy a critical new Device config policy to a specific laptop, but when you type the hostname into the search bar to add the device to an Entra ID group, Microsoft Entra ID spits back three identical objects. Two are stale, one is active, and they…
-
The Dark Art of Intune Remediation: Hidden Tips, Tricks and Hacks
Intune Remediations always get introduced with the same corporate line: “A detection script finds the issue, and a remediation script fixes it.” Sure. That’s technically true. It’s also the kind of thing you say when you’ve never actually had to run this stuff across tens of thousands of endpoints. Anyone who has knows Remediations behave…
-
Windows 11 Hotpatching: Because Your Users Will Never Reboot on Purpose
TL;DR Windows 11 Hotpatching is great—if your environment is modern, standardized, and already running clean. It delivers two months of security updates with zero reboots, but it also removes the accidental stability you got from monthly forced restarts. You’ll need Windows 11 24H2, VBS, Secure Boot, TPM 2.0, Entra ID join, Intune, and Autopatch/WUfB before…