Most patch Windows. Few patch browsers.
Extensions = mini-apps with major risk.

🕵️ Audit permissions
⚡ Classify risk
🛡️ Block/allow with Intune

Stop “free coupon finders” from finding your data.
Take back control today! #Intune

msendpointmgr.com/2025/10/04/t...

Ever wondered how the Company Portal really works under the hood?
🌉 The secret lies in Jeff Bridges! (Yes, really!)
🧵 I dug deep, finding one answer is🧊 Igloo Water

🔎 Full deep dive: msendpointmgr.com/2025/02/09/c...
#Intune #ConfigMgr

Struggling with Graph API calls to the Intune Reporting Endpoint or jumping through filters of doom in the Intune Admin Center?

✅This script is for you!

github.com/byteben/MEM/...

#Intune #PowerShell #MicrosoftGraph #EndpointManagement #Automation #ITAdmins

This is cool! 🎉 Did you know Microsoft Graph exposes Base64-encoded device data via the alternativeSecurityIds property? You can decode it to compute and verify a device's public key for secure validation. 🔐 #MicrosoftGraph #EntraID

Playing with timestamping today. It’s always been a thing of the dark arts but now it’s much clearer to me. It’s also useful to know which URLs are being used during your cryptographic operations.

If anyone is still struggling with update detection applicability after MS decided to remove DisplayName reg value for Edge WebView2 to hide it in ARP…these PR scripts will restore the reg values.

github.com/PatchMyPCTea...

Thankfully MS have now backtracked on doing that in the recent version.

I'm such a tease :D

Blogs are queuing up. We dive into the Intune StatelessIWService soon to understand how the Company Portal impersonates the logged on user to populate stuff like app statuses and user device information. #MSIntune

Interesting. When the Intune MDM certificate is saved to the SYSTEM profile during certain enrolment scenarios, it is exported, without the private key, to the enrolling users profile too 🧐

Blog coming…

#DiggingTooDeep