Doug Wilson

You’ve probably seen the new #Intune option to disable MDM enrollment when adding a work or school account. Flip the switch, and the management prompt disappears. But the real decision isn’t happening inside #MSIntune. See how Windows, WAM, and Entra ID actually determine whether the prompt appears 👇 @Mister_MDM bit.ly/3Ne1wjL #ITPros #AzureAD #PatchMyPC

Anybody out there looking for a consulting gig? We are looking for an Engineer to join our team. Strengths in Azure are a plus, as well as Microsoft 365 and Entra. Location in the Midwest is a plus, but will consider further out for the right candidate. And you get to with me

Recent reports of ICE activity include detaining or arresting U.S. citizens. If this happens to you or someone you know, learn about your rights, how to report what happened, and where to get help.  ➡️ bit.ly/4qlTdkn

👋 How do you find all the global admins in an M365 tenant? You are going to want to bookmark this 💀 ✍️ Answer If you use the portal it's easy (just go to the Roles blade) But if you need to use the API (take a deep breath 👇) 1️⃣ Check the license on the tenant 2️⃣ In an Entra ID Free or P1 tenant → /roleAssignments 3️⃣ In Entra ID Premium tenants 3️⃣•1️⃣ Get all PIM Eligible global admins → /roleEligibilityScheduleInstances 3️⃣•2️⃣ Get all PIM Permanently Active users and use assignmentType = Assigned to filter out 'Eligible' users that are currently activated. → /roleAssignmentScheduleInstances 4️⃣ If any of these are groups, then iterate through the group to get all members inside the group We use this frequently in Maester for finding privileged users. Full code at github.com/maester365/mae… Or you can simply use this in your scripts 👇 🔥 Install-Module Maester -AllowPrerelease 🌟 Get-MtRoleMember -Role GlobalAdministrator

Important notice! Today, Windows Autopilot uses the Intune Connector for Active Directory to deploy devices that are Microsoft Entra hybrid joined. To strengthen security in our customers’ environments, we’ve updated the Intune Connector for Active Directory to use a Managed Service Account (MSA) instead of a SYSTEM account. The Intune Connector for Active Directory builds which use the SYSTEM account will be deprecated on June 30, 2025. Starting July 1, enrollments from old builds will be blocked. Please read our blog to learn more about how this update may impact your organization > techcommunity.microsoft.com/blog/intunecus… #MicrosoftIntune

Remember the CrowdStrike incident that left many of your devices trapped in a BSOD loop? Turns out that Microsoft has been quietly working on something that could help you recover the next time it happens. (Because, yes, there will be a next time.) This new feature is called Quick Machine Recovery. It is built into WinRE. It kicks in automatically when things go wrong and should restore your machines without needing bootable USBs or manual recovery. I took it apart. StartRep.exe, the Recovery settings, the Plugins, and the Test mode. Here’s what’s under the hood. patchmypc.com/quick-machine-… #Intune #MSIntune #Windows #Windows11 #Microsoft #WindowsAutopilot #PatchMyPC

Do you support @HP devices? Do you like HPIA but wish you could skip the software and just use #PowerShell? Do you not care if it's supported? If you answered YES, then come see me @MMSMOA when we demo PowerShell management of #Lenovo #Dell & #HP mms2025atmoa.sched.com/event/1uF8n/us…

Microsoft is Offering FREE Azure 2025 Certification Courses! No Fee, Completely Free These 20 Courses Includes Video Tutorials, Hand's on Labs and Notes. Don't miss these courses if you want to make your career in 2025:

Did you know about the upcoming change to the Microsoft 365 login in page that prompts users to register for MFA? Learn about this and other things that happened in the world of Microsoft Entra this week in the Entra newsletter 👇 entra.news/p/entra-news-8…

📱🔒 Exciting news for @Apple iOS/iPadOS admins! @MSIntune now offers enhanced security with block screen capture for mobile application management (MAM) protected apps. ➡️ Learn more: aka.ms/Intune/iOS-scr… #MSIntune #IntuneInspired #AlwaysIntune

This picture from the Microsoft Zero Trust Architecture Framework is a really nice super-high level overview. This documentation has great implementation diagrams and serves as a great resource for m365 Architecture design for many verticals. learn.microsoft.com/en-us/microsof…

This should come in handy. Have filter queries that just don’t seem to work? Check this out!

🚀 Exciting news! Enhanced device inventory capabilities are coming soon to Microsoft Intune, included in Intune Plan 1! 🎉 Admins will soon gain detailed insights into their device estate, Stay tuned for more updates! Read more at aka.ms/IntuneHardware… #MSintune

New whitepaper from Intel: Modernizing Windows Client Management intel.com/content/www/us…

ZERO CLICK vulnerability in Microsoft Outlook: simply viewing an email containing the malicious code triggers the exploit, compromising the user's system immediately through critical Remote Code Execution (RCE) vulnerability. Def something to patch ASAP! msrc.microsoft.com/update-guide/e…

So i made this map 🗺️ that demonstrates Only a Small Portion of The Windows OS Security Apparatus Useful for Security Researchers, Enthusiasts and Teams of all Colors Detailed info available on GitHub github.com/HotCakeX/Harde… #Cyber #Microsoft #Windows #CyberSecurity #RedTeam

Disable Recall - User [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsAI] "DisableAIDataAnalysis"=dword:00000001 Disable Recall - Machine (not yet official) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsAI] "DisableAIDataAnalysis"=dword:00000001

CUSTOM APPS ARE NOW AVAILABLE! Learn how to get started today and register for our webinar next week where we'll showcase this new feature live to the community. #PatchMyPC #ConfigMgr #MSIntune pmpc.link/custom-apps-ge…

Upcoming meetings: Jan 24th - Patching with @bdam555 and @patchmypc Feb 22nd - Apps Mar 21st - Intune Day (All day meeting) April 18th - PowerShell Sign up for the newsletter at tcsmug.org #Microsoft #ConfigMgr #MSIntune #powershell

@ariaupdated 9

Actually... the polls only go up to 4 options... so... just respond with a comment / reply with your favourite (or make up your own option)!

#FunFact the Competition is ON! Vote now for your favourite patching mascot!! Only one can be: #Patches, Auto Patches! (poll located in the first comment) #WUfB #Autopatch #WindowsUpdate #Win11 p.s. there is really only one right choice 😅😂🤫