Tim Beer retweeted
One restart a month for Windows updates via Microsoft Support.
Note: Currently only turned on for consumers. Commercial controls coming soon.
support.microsoft.com/en-us/…
#Windows #Windows11 #MSintune
Tim Beer retweeted
New Compliance Checks Are Coming to Intune
Intune is preparing to introduce a new set of Windows 11 health checks (This is NOT mentioned on the Intune roadmap!)
DHA only validates a limited part of the platform. The upcoming Microsoft Azure Attestation (MAA) based signals cover firmware protection, virtualization security, and memory integrity, and show how Intune will evaluate devices going forward.
If you want a clear look at what is coming, the blog below explains it..
patchmypc.com/blog/microsoft…
#Intune #MSIntune #Windows #Windows11 #Compliance
Tim Beer retweeted
#Intune "Windows Quality Update management policies" just dropped on the roadmap. This will allow you to control non-security and OOB updates more granular.
microsoft.com/en-us/microsof…
Tim Beer retweeted
🚨Huge #OpenIntuneBaseline News!
I've been busy working on a web-based, user-friendly tool to be able to deploy and version-check existing #OIB deployments, and it's finally ready!
Features:
- New Deployments: Allows granular control over policy deployment. Import as much or as little as you want!
- Existing Deployments: Validate your OIB policies against the latest version, allowing quick and easy views on what's outdated or new.
- Completely browser-based, using MSAL Authentication.
- MIT Licensed: Not comfortable using my Enterprise App? No problem! Grab the code and host it yourself or run it locally!
Website: deploy.openintunebaseline.co…
GitHub: github.com/SkipToTheEndpoint…
Huge thanks to the various people who have provided feedback, input and testing while I've been putting this together.
Even bigger thanks to everyone in the community who use, and provide feedback, bugs and requests for the OIB. I don't think it's possible to even estimate how many hours the project has been able to save Intune admins around the world.
Also, we're closing in on 1k Stars on GitHub!
#MayTheCapybaraBeWithYou
Tim Beer retweeted
Finally my Intune Diff tool is ready 🥳. If you want to compare one Securely Baseline to multiple Intune policies, to see if you missed some settings or misconfigured something, this tool will help you that. #msintune
intunediff.com/
Tim Beer retweeted
One cannot use open source projects in good conscience and not contribute to them in some way. I am lucky to be the largest recipient of @Github sponsors in the world. I want to make sure that creators like @PrzemyslawKlys get what they deserve. I hope others follow!
Wow… I just got sponsored on GitHub with a yearly donation by @KelvinTegelaar 🤯
I honestly didn’t expect this — such an amazing surprise and a huge motivation boost! I hope the things I create prove useful in your projects.
Tim Beer retweeted
Back to Basics – Using an AutoUnattend.xml file to Automate Windows 11 Setup from Media (With bulk enrollment to Microsoft Intune) #MSIntune #Windows11 #JurassicDeployment deploymentresearch.com/back-…
Tim Beer retweeted
Replying to @SwiftOnSecurity
Eventvwr.msc:
I’ve seen things you people wouldn’t believe …
Attack scripts that fire off the shoulder of msiexec
I’ve watched cscript.exe glitter in the dark near the RDP gateway
All those events will be lost, like tears in rain. Time to right click clear log.
Tim Beer retweeted
Microsoft Store apps failing with 0x87D30017 during Autopilot Device Preparation?
Everything was fine... until the device was set to Lebanon during the AP-DP enrollment. The result: no Company Portal, Package Not Found, and a broken AP-DP enrollment.
We used Fiddler and traced the issue back to the Microsoft Store backend.
It turned out to be all about region filtering.
If you're relying on Microsoft Store apps during Autopilot, you’ll want to read this.
patchmypc.com/when-region-se…
#Intune #MSIntune #WindowsAutopilot #PatchmyPC #Windows #Windows11 #Microsoft #CompanyPortal #Fiddler #Security
Tim Beer retweeted
Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) with Intune techcommunity.microsoft.com/…
Tim Beer retweeted
Just published my first blog on defender-sensei.com!
A practical take on aligning NIST CSF 2.0, DORA, NIS2 & more with Microsoft Sentinel & Defender.
It’s a try-out — all feedback welcome.
DM me with tips, tricks, or ideas!
defendersensei.com/posts/Nav…
#CyberSecurity
Tim Beer retweeted
Check out the roadmap for Azure Arc and Azure Update Manager, to close some of the gaps with #ConfigMgr and #MSIntune @PatchMyPC
learn.microsoft.com/en-us/az…
Tim Beer retweeted
With new vulnerabilities continually surfacing, keeping pace with threats is increasingly challenging.
Introducing the Vulnerability Remediation Agent in Intune. It removes friction in identifying and remediating endpoint vulnerabilities, giving IT visibility into risks and a list of prioritized, guided actions to resolve high-impact vulnerabilities.
Learn more > aka.ms/Secure25/IntuneAgents
#MicrosoftIntune #MicrosoftCopilot
Tim Beer retweeted
Windows Policy Management is Evolving
Intune’s traditional approach relied on scheduled sync, devices checked in, applied policies, and reported back. But enforcement only happened when they synced, leaving gaps in compliance.
With Declared Configuration, Windows devices don’t just receive policies they subscribe to them. There some big changes coming up
- Continuous enforcement – no waiting for syncs
- Self-remediation – settings stay enforced
- Real-time compliance – fewer security gaps
We’re breaking down how Declared Configuration works and why it’s a game-changer for IT admins. Stay tuned.
mdmlab.nl/declared-configura…
#Intune #MSIntune #Security
Tim Beer retweeted
🚀 New week, new updates! This edition covers Windows 365 Link, Intune security baselines, Autopilot automation, Windows servicing updates, and more.
📖 Read here: danielengberg.com/newsletter…
#Msintune #intune #Windows365 #PowerShell #Autopilot
Tim Beer retweeted
VIDEO: Step-by-step configuration guide for configuring #Microsoft #Entra ID Conditional Access for Always On #VPN. #EntraID #identity #msintune #aovpn youtu.be/D1UF-bUsIOo
Tim Beer retweeted
Thanks this week to @urpatton2, @gwblok, @modaly_it, @Jgelijsteen, @getrubix, @AndreasStenhall, @askaresh, @timbeer, @PerLarsen1975, @ccmexec, @inthecloud_247, @pathak_somesh, @BurgerhoutJ, @PrajwalDesai, @pvanderwoude, @syst_and_deploy, @Shehanperera85 & @MarcussenThomas!
Tim Beer retweeted
Strong mapping in @MSIntune certificates has now been fully rolled out, with support available on Windows, iOS, macOS, and Android operating systems!
#MSIntune
📣 Support tip: Implementing strong mapping in Microsoft Intune certificates
🔒 Discover how the changes in Active Directory Kerberos Key Distribution ensure robust authentication for Windows, iOS, and macOS devices.
➡️ Learn more: msft.it/6014iCALa
#MSIntune






























