Greg C. Gilbert

Intune can finally tell Windows Update to ignore Group Policy. I am not talking about the stupid “MDM wins if there is a conflict,” but actually skipping the Windows Update Group Policy path. The IgnoreWindowsUpdateGroupPolicies setting changes the source selection itself. When enabled, Windows Update can bypass the live GP values and the cached GP fallback, then continue with the managed policy sources instead. That makes this a very interesting setting for anyone moving from WSUS or legacy Windows Update GPOs to Intune. I took a closer look at how it works on the device and what Windows actually checks before Group Policy gets skipped. #Intune #MSIntune #WindowsUpdate #Windows11 patchmypc.com/blog/ignore-wi…

Do you think Intune is slow? When you put all the changes Microsoft has made next to each other, it starts to look like something much bigger than a few performance improvements. Intune is slowly moving away from waiting for timers and scheduled polling, toward push, local events and near real time actions. Policy delivery: The old roughly 30-minute notification throttle is being replaced by the Fast Lane model. Changes can trigger a new device check-in within minutes instead of sitting behind the old notification window. Remote actions :That annoying 5-minute queued delay after the first hours of enrollment? Gone on supported Windows versions. Remote actions can start the device check in immediately again. Device Sync: Sync used to mainly wake the Windows MDM world. Now one Sync can wake Windows MDM AND the Intune Management Extension. The IME side is delivered through IC3 and Trouter. Sync Status :It is no longer just “press Sync and hope”. The portal can now follow the progress of Policies, Applications, and Scripts. Win32 apps: A newly assigned Required Win32 app no longer necessarily has to wait for the normal 60-minute app check. Intune can push intent 2 over IC3 and bring the normal app check forward within minutes. Autopilot apps: When enrollment finishes, it can now trigger a fresh app check. That closes the gap where the desktop appeared, but the remaining Required apps could sit there waiting for the next app timer. Client-driven compliance: This one is even more interesting. The device can watch local signals such as Firewall, Defender, BitLocker, Secure Boot, and TPM. When something changes, it can proactively request a new compliance evaluation instead of waiting for the normal cycle. App Inventory: This used to be based around a 4-hour collection cycle. The newer Device Inventory Agent can react to an application change, validate it, and upload the delta on the next scheduler pass. In my testing, that was about 5 minutes. So... Do you still think Intune is slow? I think that question is becoming a lot harder to answer with a simple “yes”. #Intune #MSIntune #WindowsAutopilot