26H2 is GA now: two policies decide your week
Posted in

26H2 is GA now: two policies decide your week

Windows 11 26H2 went GA on September 29 as an enablement package: KB5121794, one restart, and a cumulative update you have to be current on first. The catch is policy, not code. Allow Temporary Enterprise Feature Control turns on every dormant feature at the next restart rather than the one you wanted, and Microsoft’s own EPM troubleshooting page says Administrator protection breaks Endpoint Privilege Management elevation on the same device today. Read that page before you pilot either one.

VS Code Extension Policies Existed for 18 Months — GitHub Didn’t Use Them. Will Your Clients?
Posted in

VS Code Extension Policies Existed for 18 Months — GitHub Didn’t Use Them. Will Your Clients?

VS Code’s AllowedExtensions policy shipped in November 2024. GitHub — a Microsoft subsidiary — wasn’t enforcing it when a poisoned Nx Console extension walked out with 3,800 internal repos in 11 minutes. The policy framework was never missing. The enforcement was. Here’s the Intune remediation script and the Copilot/MCP guardrails that close the exact attack path TeamPCP used.

Intune My Macs: Streamline macOS Management with One-Click Deployment of 31+ Enterprise Policies

or

Revolutionize macOS Management: Deploy 31+ Policies with
Posted in

Intune My Macs: Streamline macOS Management with One-Click Deployment of 31+ Enterprise Policies or Revolutionize macOS Management: Deploy 31+ Policies with

The article discusses the use of Microsoft’s open-source “Intune my Macs” starter kit to accelerate macOS … Intune My Macs: Streamline macOS Management with One-Click Deployment of 31+ Enterprise Policies

or

Revolutionize macOS Management: Deploy 31+ Policies withRead more

Microsoft Defender for Endpoint on Linux Introduces Global Exclusion Policies to Enhance Security and Performance
Posted in

Microsoft Defender for Endpoint on Linux Introduces Global Exclusion Policies to Enhance Security and Performance

Microsoft Defender for Endpoint on Linux now supports global exclusion policies that unify antivirus and endpoint … Microsoft Defender for Endpoint on Linux Introduces Global Exclusion Policies to Enhance Security and PerformanceRead more

Microsoft Sets July 2024 Deadline for Admins to Update Conditional Access Policies Amid Azure AD Graph Retirement
Posted in

Microsoft Sets July 2024 Deadline for Admins to Update Conditional Access Policies Amid Azure AD Graph Retirement

****Microsoft urges admins to migrate classic Conditional Access policies by July 10, 2024, as Azure AD … Microsoft Sets July 2024 Deadline for Admins to Update Conditional Access Policies Amid Azure AD Graph RetirementRead more

As an Amazon Associate I earn from qualifying purchases. Links on this site may be affiliate links.