DaMigs!

@modaly_it Super. Thanks for the advice Maurice. Always appreciated. I’ll give this neat tool a try. My biggest hurdle has been dealing with BitLocker suspensions

@damigs Sure you could install the tool on a jump/utility server, but you will still need access to the UNC shares to obviously upload the content to be distributed. This might be a good requirement for where you have internet access issues running the tool on a site server for example.

In case you missed it, the Driver Automation Tool got a big upgrade a few weeks back, including #MSIntune support. Reflecting back on the past and highlighting new features here - msendpointmgr.com/2026/05/19/dri… #SCCM #ConfigMgr #Drivers #BIOS

@miketerrill @ncbrady @gwblok @jarwidmark Hmm. This does leave me a bit nervous — “the 2023 Boot Manager is already installed, the device may fail to boot.”

@damigs @ncbrady @gwblok Just keep in mind that this is updating the active db and not the default db. I stole this slide from the free training @jarwidmark gave on Secure Boot (which is worth a watch):

Q: What are you guys doing with older hardware that runs Windows 11 today but is outside of scope of getting a bios update new enough for the Secure Boot certificate problem ? An example, my Lenovo T570 laptop, it works just fine but... the bios date is 3/28/2024 (early 2017).

@miketerrill @ncbrady @gwblok Beautiful, thank you for the share. Cannot wait to take a peek at this tomorrow in the lab on a legacy HP G5 that is reporting “Not Up to Date” due to firmware.

@damigs @ncbrady @gwblok Yes-a lot of the work we have done over the years is on Gary's GitHub (including remediation scripts for Intune). It has been updated for the UEFI certs and KEK that I learned about from when I got to meet with the Secure Boot Team at MSFT. github.com/gwblok/garytow…

@miketerrill @ncbrady @gwblok Any chance this can be done in bulk for devices that are in a similar state? Thinking a remediation script if one already exists and wouldn’t mind sharing

@ncbrady Looks good! It should show as compliant the next time it updates. BTW-we do have a bunch of Intune remediations on @gwblok 's GitHub for this.

@UniversalORL ridiculous the amount of rides breaking down today at Epic Universe. First time visiting and regret spending time and money on coming here!!!

Unreliable Comcast with once again another outage. New month same consistency! #comcastsuxs @XfinitySupport @Xfinity @comcast

@Mister_MDM As always. Great post and perfect timing as we have been scrambling to get in front of this before the opt-out option is discontinued. Managing a list of URLs is going to be an administrative overhead based on what I’m seeing.

The LocalNetworkAccessAllowedForUrls policy many people never deployed. And yet it showed up on all of your managed devices... Edge introduced Local Network Access restrictions. After that, websites talking to services on your local network were no longer trusted by default. What had worked for years suddenly required an explicit allowlist. Web OneDrive was one of them. Microsoft updated the OneDrive sync client to quietly write the allowlist to the machine policy. The Teams client, however, did not get that safety net. Some time later, another policy appeared: LocalNetworkAccessRestrictionsTemporaryOptOut. This new policy does not disable those restrictions. It changes the behavior. Instead of blocking the request, Edge only logs a warning in DevTools when a local network call would have failed. The request still goes through, but you can see it would have been blocked. It is a temporary escape hatch. It gives admins time to see what would break and properly configure the allowlist. But be aware, this is not permanent. The policy is temporary and will disappear starting with Edge version 146. Read the updated blog for details: patchmypc.com/blog/the-local…

Still going to golf with him @saquon ? Still going to the White House @mookiebetts ? Still think he’s “cool” @SHAQ ? Are you going to go visit him @SnoopDogg ? This is what he thinks of you 👇🏽

Poverty Program

Fear the spear 😂

Yep

WE BE REPPING FOR THEM CANES CANES CANES CANES CANES‼️🙌 ALL ABOUT THAT U U U U U U‼️🙌 🟧_🟩 #GoCanes  #BeatIndiana By: @SOLOD305 #LaFamilia 🎶

@xenappblog Great read and perfect timing. I’ve implemented both Single App Mode and Multi-App Mode in our organization, and each came with its own set of challenges that required custom solutions to overcome. This write-up is spot-on—thank you for sharing it.

Struggling with Windows 11 Kiosks in Intune? Here’s What the Docs Aren’t Telling You malinoski.me/2025/12/30/str…

@TomahawkNation Poverty Program

Column: Florida State Football Is Trapped in Purgatory And It Is FSU’s Own Doing dlvr.it/TQFYBm

Miami's pick-six had Pat McAfee and the boys FIRED UP 🔥 Watch the Field Pass with The @PatMcAfeeShow on ESPN2 and the ESPN App 🏈

ACC Huddle crew & Brent Key's reaction to the Miami pick-six against Ohio State 😤

"Miami can win the National Championship, and if Miami plays the game it played against Ohio State 2 more times, then Miami WILL win the National Championship." - @Chip_Patterson 👀

@FSUFootball @Ducerobinson2 @Seminoles @SeminoleBooster @FSUTickets @SeminolesSN @ACCFootball @accnetwork @espn 3 win season loading …..

“This has truly been one of the best years of my life. I’m really excited to be able to be a Seminole again in 2026.” First-team All-ACC receiver @Ducerobinson2 has decided to forgo the 2026 NFL Draft and remain at Florida State for his senior season #NoleFamily

@DevMgmtPro @IntuneSuppTeam I’ve see it where device status is delayed a while. In those instances I use a dummy device to validate its functioning and just delayed reporting.

What's up with proactive remediations in my tenant? Deployed a detection script this morning to run hourly on 6000+ devices. 6:30PM and no results in my dashboard. #MSIntune @IntuneSuppTeam How long does it take to update?