Tag: Intune

How to configure Storage Sense with the Intune Settings Catalog on cloud-only Windows devices, including OneDrive Files On-Demand, the Downloads folder risk and how to prove it worked.

Intune remediations detect and fix Windows problems with PowerShell on a schedule. Licensing, permissions, my temp folder lab, on-demand runs, logs and copy-ready scripts.

Two of the 2011 Secure Boot certificates have expired and Windows Production PCA 2011 expires on 19 October 2026. Here is what expiry means and how to update devices with Intune or Group Policy.

How to run Microsoft’s zero trust assessment PowerShell module against a Microsoft 365 tenant, read the report and turn the results into a prioritised fix list.

How to set up Intune update rings and feature update policies for Windows 11, pin devices to 25H2 or 26H2, prove it worked with PowerShell, and where Windows Autopatch fits.

A merged, updated guide to the Intune Windows 11 25H2 settings that matter: Recall and Click to Do controls, the Copilot app, Store app removal, Start pins, widgets, Energy Saver and Windows Backup, still valid on 26H2.

Intune device cleanup rules hide stale devices that stopped checking in, without wiping or deleting them. Here is how to set them up, prove they worked in the audit logs, and tidy Microsoft Entra ID too.

A node-by-node guide to Intune endpoint security: what Antivirus, Disk encryption, Firewall, EPM, EDR, ASR and the rest do, and which Microsoft 365 licence unlocks each one after July 2026.