Ben Whitmore

11.6K posts

Ben Whitmore banner
Ben Whitmore

Ben Whitmore

@byteben

Secret Agent 🍸 @PatchMyPC | Microsoft MVP | MCT | Speaker | Certified Enterprise Administrator Expert @MSEndpointMgr #SavedByGrace #EatsCheeseMostly

The Cheese Counter Joined Eylül 2012
750 Following6.2K Followers
Rudy Ooms
Rudy Ooms@Mister_MDM·
Under the Hood of the Intune Certificate The Intune certificate matters more than most people think. That Certificate keeps the policy sync alive and is also needed for IME communication, which means apps and scripts depend on it as well. But when the certificate or its chain breaks, things can get funny. The device can still show a recent last check-in, while it is no longer able to receive the latest policies, apps, or scripts. In this webinar, we will explain what the Intune MDM device certificate does, what changed with the Intune Intermediate certificate renewal, why some devices may have missed it, and how to find devices that still appear healthy but may not be. But hey, it is all fine because the last check-in still moved… right? Register here: patchmypc.com/events/intune-… #Intune #MSIntune
Rudy Ooms tweet media
English
4
21
64
5.1K
Ben Whitmore retweeted
Rudy Ooms
Rudy Ooms@Mister_MDM·
The IntuneWin downloader got another upgrade.... and it's even bigger than the previous one!! It now uses the WinUI3 Frontend, and you can select multiple apps at once. The best thing? It does NOT require an App Registration... just open the tool on any Entra/Intune-enrolled device, and you can download and extract all the apps available to you. #Intune #MSIntune github.com/call4cloud-cod…
Rudy Ooms tweet media
Rudy Ooms@Mister_MDM

The IntuneWin Downloader got a small upgrade The first version depended on the local TokenBroker cache. Find the .tbres, decrypt it, pull out the token, and hope the right one was there. That worked, but it always felt a bit too fragile. So during #MMSMOA I changed that whole approach. The new tool now requests the needed tokens through WAM, uses the Company Portal catalog flow to discover the available apps, and then uses the IME SideCar flow with the local MDM device certificate to resolve, download, and process (decrypt) the content. Tomorrow morning I will post the blog with the Download link and the "how to" ...as requesting IME and CP tokens on my own with an app Reg is funny :) #Intune #MSIntune #PatchMyPc

English
7
40
183
22.2K
Nathan Nally
Nathan Nally@grbaypacker·
@byteben @mike_marable This is great but can you create a dynamic group in entra based on this data (like we did with collections in SCCM)?
English
1
0
2
48
Ben Whitmore retweeted
ariaupdated
ariaupdated@ariaupdated·
#FunFact Today is THE DAY! Our new pause experience and some other pretty cool update improvements are now beginning to roll out, many with feature flags now available to be turned on for WIP Experimental (dev)!! 🥳🪇🥂🎈 #WindowsUpdates blogs.windows.com/windows-inside…
English
18
28
166
43.8K
Ben Whitmore
Ben Whitmore@byteben·
@acjuelich @xenappblog There was a bug that was fixed last week and has reoccurred for some tenants this week where MAA was suddenly in scope for application flows (automation) instead of just delegated flows . Is this what you saw?
English
0
0
2
219
Adam Juelich
Adam Juelich@acjuelich·
One of my customers was having issues with #MSIntune Multi-Admin Approval and created a Support Case. This was their findings: "The engineer said there was a bug that several tenants have reported with the same issues. Microsoft has been working on it the last couple weeks and have a fix but not sure if it is stable. We worked with them again and tested and things seems to be working. She said that people in the Approvers group needed an Intune license to approve the commands." Has anyone run into the same thing?
English
9
4
20
6K
Ben Whitmore retweeted
Bryan Dam
Bryan Dam@bdam555·
#ConfigMgr/#SCCM peeps: new update for 2503/2509 that removes all attempts to set Scan Source settings. Unless you actively want some updates (ex. FUs) from ConfigMgr and others (ex. CUs) from Intune, then you never needed Scan Source in the first place. learn.microsoft.com/en-us/intune/c…
English
2
23
63
10.6K
Ben Whitmore
Ben Whitmore@byteben·
📣 New Tool: Microsoft 365 Apps Deployment Helper Automates Intune packaging from Office XML → ready-to-deploy packages (.intunewin, detection, install/uninstall, offline support). Predictable, repeatable, automated deployments. 🔗 github.com/byteben/M365-D… #MSIntune #M365
English
1
11
55
3K
Nathan McNulty
Nathan McNulty@NathanMcNulty·
@m0bilej0n @DylanOwendylan @byteben The biggest issue to me is the always growing list of crap we have to manage and maintain... There's no attempt to simply or make this easier either :( Thousands of policy options just on Windows, hundreds of browser policy options, hundreds of Office policies, bleh :-/
English
2
0
1
89
Ben Whitmore retweeted
Nathan McNulty
Nathan McNulty@NathanMcNulty·
If you aren't enforcing a browser extension allowlist, the time to change that was yesterday :( It's not that creating malicious extensions was hard before, the volume was lower @byteben has an excellent guide to inventory and lock down extensions here: msendpointmgr.com/2025/10/04/tam…
David Ch@chhddavid

BREAKING: @claudeai just got a massive upgrade today and I'm so happy to be a part it. From now on, Claude Opus 4.6 can build Chrome Extensions for every Chromium-based browser. We just launched Shipper, a tool that lets Claude: ✅ Build complete Chrome Extensions ✅ Recreate existing Extensions ✅ Ensure multi-browser comatibility ✅ Write privacy policies ✅ Autofill entire Chrome Web Store listings Claude Opus 4.6 can do all the above in 1 simple prompt for as low as $0.11/extension... And it takes minutes, not hours! Open up Shipper and ask Claude to "create a free ad block extension" or "auto-invite 950 people weekly on linkedin". Since this is a very special launch, if you comment "shipper" you will get FREE credits :)

English
7
41
162
21.4K
Ben Whitmore
Ben Whitmore@byteben·
@NathanMcNulty Good message reinforcement Nathan, thanks! Trust by popularity is the trap here - “It’s offered through my browser, it must be safe right?”
English
1
0
1
349

Discover

@EskimoRuler @Mister_MDM @PatchMyPC @grbaypacker @mike_marable @acjuelich @xenappblog @SSkotheimsvik