Tag: MicrosoftIntune
-
The Zombie Endpoint: When Stale Records Refuse to Die
Last week, we looked at the classic Friday-afternoon nightmare: staring at three identical device objects in Microsoft Entra ID while trying to deploy a critical policy. We mapped out the two main control planes—Entra ID for identity and access, Intune for management—and talked about why a brute-force deletion sweep is a terrible idea, especially when…
-
I’m Surrounded by a Bunch of Device Objects: Cleaning House in the Cloud Without Burning Everything Down
It’s 4:30 PM on a Friday. You’re trying to deploy a critical new Device config policy to a specific laptop, but when you type the hostname into the search bar to add the device to an Entra ID group, Microsoft Entra ID spits back three identical objects. Two are stale, one is active, and they…
-
Your Brand-New Entra ID Joined Devices Hate Your Corporate LAN — Here’s How to Fix It
TL;DR: When you move to pure Entra ID–joined devices, they lose the ability to see traditional Active Directory Domain Controllers. Because Windows Network Location Awareness can’t complete its legacy LDAP domain-authentication handshake, it defaults to the Public firewall profile — blocking inbound management traffic like Ping, RPC, and WMI on your own LAN. The fix…
-
Windows 11 Hotpatching: Because Your Users Will Never Reboot on Purpose
TL;DR Windows 11 Hotpatching is great—if your environment is modern, standardized, and already running clean. It delivers two months of security updates with zero reboots, but it also removes the accidental stability you got from monthly forced restarts. You’ll need Windows 11 24H2, VBS, Secure Boot, TPM 2.0, Entra ID join, Intune, and Autopatch/WUfB before…
-
The Stryker Incident: When Your Own Tools are Weaponized (and How to Stop It)
You’ve probably heard about the recent activity at Stryker, and to put it bluntly: it sucks. In March 2026, the medtech giant got hit by a massive “living off the land” attack. The scary part? The attackers reportedly hijacked Microsoft Intune to send remote wipe commands to over 200,000 devices. Imagine waking up to find…