Pinned Tweet
How to Delete Files which exceed 255 Characters Without 3rd Party Tools clintboessen.blogspot.fr/201…
Damien RICHARD retweeted
Quick machine recovery is now supported on Windows Server 2025. With the October 2026 security update, IT admins can enable quick machine recovery to help recover servers from critical boot failures using targeted remediations from Windows Update.
👉learn.microsoft.com/troubles…
Damien RICHARD retweeted
[New Post] 📌Microsoft Intune Ends Support for CNAME Auto-Discovery in Windows MDM-Only Enrollment
anoopcnair.com/intune-ends-s…
#Intune #MSIntune #HTMDCommunity
Damien RICHARD retweeted
📢 New in @MSIntune!
Admins can now require managed @Google Account authentication on supported @Android Enterprise devices, giving users access to Google apps and services with their organizational identity.
➡️ Learn more: msft.it/6014avVxI
#MSIntune #AndroidEnterprise
Damien RICHARD retweeted
Windows 11 26H2: New Features, Security Improvements, and Deployment Guide for IT Pros -
harjit.us/windows-11-26h2-ne…
#Windows #MSIntune #ITpros
Damien RICHARD retweeted
The 6 Security Groups in SharePoint Admin Center explained
sharepointmaven.com/the-6-se…
Damien RICHARD retweeted
Here's how to automate Windows activations with PowerShell - techcommunity.microsoft.com/…
#Windows #MSIntune #Microsoft
Damien RICHARD retweeted
Microsoft is ending #CNAME based auto discovery for Windows #MDM only enrollment on Jan 15, 2027. If your setup relies on it, update docs, test enrollment flows, and prepare users to enter the enrollment URL when needed.
techcommunity.microsoft.com/…
Damien RICHARD retweeted
Two methods for #MSIntune onboarding!
Device Preparation: Entra Join, Windows 11 = simpler.
Traditional Autopilot: The only Hybrid Join path.
Device Association (Aug 2026) binds device to tenant with TPM before enrollment. It's not a 3rd method.
systemcenterdudes.com/what-c…
Damien RICHARD retweeted
This one registry tweak instantly improves your latency and system responsiveness 🚀
1️⃣ Open regedit & paste:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile
2️⃣ Double-click SystemResponsiveness
3️⃣ Set to Decimal 10, restart PC
Evolve does it free👇
Damien RICHARD retweeted
Revo Uninstaller Free Portable v2.7.2
👉 Uninstall programs, Windows apps, and leftover traces from a portable utility.
oldergeeks.com/downloads/fil…
#FreeSoftware #computers #software
Damien RICHARD retweeted
Need to use media with Hyper-V VMs? oofhours.com/2026/10/08/need…
Damien RICHARD retweeted
Simplified onboarding for #MDE on #Android fully managed and corporate owned with work profile devices on #MSIntune managed devices
Automatically launch Microsoft Defender for Endpoint during setup
learn.microsoft.com/en-us/de…
Damien RICHARD retweeted
🚀 Automatically populate a devices group based on a registry key on your Intune devices
systanddeploy.com/2026/04/au…
Damien RICHARD retweeted
Sending From Email Aliases – General Availability techcommunity.microsoft.com/…
Enable built-in Sysmon in Windows 11 with PowerShell 4sysops.com/archives/enable-…
Damien RICHARD retweeted
Sending From Email Aliases in Exchange Online is now Generally Available!
The feature allows users to send email using any alias (proxy address) configured on their mailbox, instead of being limited to the primary SMTP address.
Previously, organizations that needed to send email from another address often had to use workarounds, such as shared mailboxes or distribution groups.
Sending from Aliases was introduced in 2021 as a Public Preview. After being in preview for five years, the feature is now generally available and allows users to:
• Send emails directly from any configured alias using supported Outlook clients.
• Reply using an alias when the original message was sent to that address.
• Choose which alias to use when sending an email.
Note that this feature applies to the entire organization and can't be enabled for individual mailboxes.
Learn more:
alitajran.com/send-from-alia…
#ExchangeOnline #Microsoft365
Damien RICHARD retweeted
🔐 Intune : l'attestation de santé Windows (DHA) migre vers Microsoft Azure Attestation sur Windows 11, fin T1 2027. Sans accès HTTPS 443 aux endpoints MAA, BitLocker/Secure Boot = non conforme. Vérifiez vos règles réseau ! microsofttouch.fr/default/b/…
WSL containers: run Linux containers on Windows with wslc 4sysops.com/archives/wsl-con…
Damien RICHARD retweeted
Do you think Intune is slow?
When you put all the changes Microsoft has made next to each other, it starts to look like something much bigger than a few performance improvements.
Intune is slowly moving away from waiting for timers and scheduled polling, toward push, local events and near real time actions.
Policy delivery: The old roughly 30-minute notification throttle is being replaced by the Fast Lane model. Changes can trigger a new device check-in within minutes instead of sitting behind the old notification window.
Remote actions :That annoying 5-minute queued delay after the first hours of enrollment? Gone on supported Windows versions. Remote actions can start the device check in immediately again.
Device Sync: Sync used to mainly wake the Windows MDM world. Now one Sync can wake Windows MDM AND the Intune Management Extension. The IME side is delivered through IC3 and Trouter.
Sync Status :It is no longer just “press Sync and hope”. The portal can now follow the progress of Policies, Applications, and Scripts.
Win32 apps: A newly assigned Required Win32 app no longer necessarily has to wait for the normal 60-minute app check. Intune can push intent 2 over IC3 and bring the normal app check forward within minutes.
Autopilot apps: When enrollment finishes, it can now trigger a fresh app check. That closes the gap where the desktop appeared, but the remaining Required apps could sit there waiting for the next app timer.
Client-driven compliance: This one is even more interesting. The device can watch local signals such as Firewall, Defender, BitLocker, Secure Boot, and TPM. When something changes, it can proactively request a new compliance evaluation instead of waiting for the normal cycle.
App Inventory: This used to be based around a 4-hour collection cycle. The newer Device Inventory Agent can react to an application change, validate it, and upload the delta on the next scheduler pass. In my testing, that was about 5 minutes.
So...
Do you still think Intune is slow?
I think that question is becoming a lot harder to answer with a simple “yes”.
#Intune #MSIntune #WindowsAutopilot
Damien RICHARD retweeted
#OpenIntuneBaseline Windows v4.0 is here! 🎉
Highlights include:
* Continuing to be the most agile and cutting-edge Intune baseline on the planet!
* A shake-up of Compliance policies, allowing true grace period granularity (and ditching the EAS Password policy because it's 🗑️)
* Edge settings for days! Simple support for the Edge Management Service and security hardening and user experience improvements.
* Updated M365 Apps Security baseline alignment.
* Fixed MS breaking the in-box app removal policy.
* Defender behaviour tweaks based on real customer feedback, not arbitrary check-boxes.
* Deprecated and obsolete settings sent to live on a farm.
As always:
✅ Take what you want
✅ Change what doesn't suit your environment
✅ Test it before yeeting to 40,000 endpoints on Friday afternoon
❌ Don't treat any security baseline as a magical compliance button
Check out the full release notes at: stte.me/oib26h2
Then, head on over to the OIB Deployer to deploy the new and updated policies, or check your current config vs 4.0 with the Settings Validator!
https://deploy[.]openintunebaseline.com
And, uhh, keep an eye on Friday, too ;)
#OIB #Windows #EndpointSecurity #Community #Capybara



















![Damien Van Robaeys [MVP] (@syst_and_deploy) profile picture](https://pbs.twimg.com/profile_images/1686796527799332894/JWEicRmW_400x400.jpg)
![Image from Damien Van Robaeys [MVP] (@syst_and_deploy)](https://pbs.twimg.com/media/HUMF2G8WAAAyvDS.png?name=small&format=webp)








