Windows Cloud Rebuild reinstalls the OS from Windows Update — image and drivers, no USB — even when Windows won’t boot. It’s Experimental-channel pre-release, not GA yet, so validate it in the lab first.
Endpoint Management
Untitled
As of July 1, Microsoft folded EPM, Cloud PKI, and Advanced Analytics into M365 E5 (select pieces into E3). If you manage E5/E3 clients, they now own tooling they were paying extra for — here’s the enable-first order and a per-tenant checklist.
Untitled
Microsoft retires the classic alert experience and agent/classic toggle in Purview Insider Risk Management on August 31, 2026. Here’s what changes, what ships, and what to do before the deadline.
Intune Field Notes: MDOP Migration Deadlines and macOS Platform SSO Gotchas
Two Intune signals deserve client action this quarter: MDOP is now out of extended support, and Microsoft’s Platform SSO field notes show where Mac rollouts can break. MSPs should inventory legacy MDOP dependencies, prioritize MBAM replacement, and pilot Platform SSO before pushing it broadly.
VS Code Extension Policies Existed for 18 Months — GitHub Didn’t Use Them. Will Your Clients?
VS Code’s AllowedExtensions policy shipped in November 2024. GitHub — a Microsoft subsidiary — wasn’t enforcing it when a poisoned Nx Console extension walked out with 3,800 internal repos in 11 minutes. The policy framework was never missing. The enforcement was. Here’s the Intune remediation script and the Copilot/MCP guardrails that close the exact attack path TeamPCP used.
Intune Network Endpoints: Solving the Hidden Point of Failure
Intune network endpoints remain a frequent failure point in modern device management. Learn why stabilizing your connectivity layer is key to operational success.