Intune health attestation moves to Azure Attestation: the proxy check to run now
Posted in

Intune health attestation moves to Azure Attestation: the proxy check to run now

Intune will move Windows health attestation compliance evaluation from Device Health Attestation to Microsoft Azure Attestation at the end of Q1 2027. Windows 11 devices with BitLocker, Secure Boot or Code Integrity settings fall out of compliance if they cannot reach their tenant’s intunemaape*.attest.azure.net host, and TLS inspection on that traffic breaks attestation even when port 443 is open.

I’d Run Omarchy Everywhere if Intune Would Manage It
Posted in

I’d Run Omarchy Everywhere if Intune Would Manage It

I have been running Omarchy on my own laptop and it is the most fun I have had with a computer in years. Arch, Hyprland, agents wired in. Then I held it up against the Intune Linux support matrix: Ubuntu 24.04 or 26.04 LTS, RHEL 9 or 10, GNOME documented as required, x86/64, Edge plus the Intune app. My machine is LUKS-encrypted with Secure Boot and a TPM, and Intune still rejects it at the platform and package layer. Here is what Intune actually does on Linux, and what I evaluated as a way around it.