Microsoft Intune

October 2026 Patch Tuesday: Windows Admin Priorities

October 13 2026 Patch Tuesday for Windows admins: exploited Windows Shell CVE-2026-96951 on CISA KEV, KB5127648, KB5126653 and KB5127646 builds, Exchange KB5129955-KB5129958, AD FS DKM enforcement, ReFS audit, and Server 2022 mainstream end.

13 Oct 2026

September 2026 Patch Tuesday: Windows Admin Priorities

September 8 2026 Patch Tuesday for Windows admins: exploited CVE-2026-81963 and CVE-2026-85880, DNS RCE CVE-2026-69730, Exchange SUs, official KBs and builds, and a ring plan that does not invent lab results.

10 Sep 2026

August 2026 Patch Tuesday: Windows Admin Priorities

August 2026 Patch Tuesday guidance for Windows admins: exploited CVE-2026-68820, WDS and DHCP RCEs, KB targets, Autopatch hotpatch, Secure Boot extra restart, Entra Connect, and Intune validation.

11 Aug 2026

Windows 11 26H2 enablement package: pilot gate for Intune, WUfB, and Autopatch

Decide who pilots Windows 11 26H2 this fortnight, who waits, and who is on the wrong branch. Enablement package for eligible 24H2 and 25H2, with an Intune and Autopatch gate checklist.

10 min read · Intermediate

Patch Tuesday Operations for Intune and Windows Update for Business

Reusable Patch Tuesday operating model: ring promotion evidence, Intune and WUfB checks, build validation, known-issue watch, post-deploy monitoring, exception logs, and hold criteria. Monthly CVE pages link here instead of repeating this body.

14 min read · Intermediate

Windows Update for Business Rings in Intune: A Practical Ring Design for Production Fleets

Design Windows Update for Business rings in Microsoft Intune: pilot-to-broad topology, quality and feature update ownership, deadlines, hold groups, reporting evidence, expedite process, coexistence warnings, and when not to broaden a wave.

17 min read · Intermediate

Rolling Out Microsoft Defender for Endpoint with Intune in a Managed Windows Fleet

A practical operational guide for rolling out Microsoft Defender for Endpoint with Intune across a managed Windows fleet, covering tenant connection, licensing, Plan 1 versus Plan 2, onboarding, endpoint security policies, antivirus, firewall, ASR, EDR, baselines, pilot rings, reporting, coexistence, rollback, and prevention checks.

30 min read · Advanced

Group Policy and Intune both apply: prove which channel won

A documentation-reviewed path for hybrid devices where a GPO and an Intune profile both target the same Windows setting. Prove the winner before anyone enables MDMWinsOverGP.

16 min read · Intermediate

Prove which service owns Windows Update on a co-managed device

Includes a redacted home-lab CoManagementHandler and WUAHandler excerpt for the handler and scan only. The workload-slider decision path was not lab-tested, and UseWUServer was not set.

12 min read · Intermediate

Separate ConfigMgr content failures from detection failures before you repackage for Intune

Classify a Configuration Manager application failure as content, detection, requirement, or enforcement before wrapping the same source as Intune Win32.

12 min read · Intermediate

Intune Company Portal Stuck or Enrollment Not Completing: Practical Diagnosis

A practical troubleshooting guide for Company Portal hangs and incomplete MDM enrollment on Windows, covering Entra join state, licensing, automatic enrollment, Conditional Access catch-22s, logs, safe retry, and prevention.

16 min read · Intermediate

Windows Autopilot Device Not Importing: Hardware Hash CSV, Duplicate Records, and Profile Assignment

A practical troubleshooting guide for Windows Autopilot import failures, covering hardware hash collection, CSV validation, duplicate records, tenant permissions, Intune Connector checks, deployment profile assignment, dynamic groups, Graph, safe retry, and recovery.

22 min read · Intermediate

Intune Device Not Syncing: Last Check-in Stale, Sync Button Not Helping, or Policies Not Arriving

A practical troubleshooting guide for Windows devices that stop syncing with Intune, covering portal checks, MDM enrolment state, Company Portal, scheduled tasks, event logs, registry evidence, IME health, network issues, Entra device objects, Graph checks, safe retry, and recovery.

21 min read · Intermediate