Intune & Endpoint

Autopilot reset: what blocks it, and what it leaves behind

Intune primary user: what it controls and when to clear it

Intune Cloud PKI cost: what changed in July, and the trial you cannot undo

Intune enrollment status page: what it actually blocks, and why it hangs

Intune scope tags: what they scope and the failure modes

Intune management extension: what installs it, where it logs, and why it goes missing

Intune policy conflict: which policy actually wins, and how to find the other one

Compliance beats configuration, two compliance policies resolve to the most restrictive value, and two configuration profiles resolve to nothing at all. The report calls all of it Conflict.

Intune wipe vs retire: which action to use, and the order that stops data being orphaned

Retire, wipe, delete, Fresh Start and Autopilot Reset do five different things to a device and to three separate records. Delete is the one that catches people.

Forcing an Intune sync, and the three problems that look exactly like a sync failure

The admin centre Sync action got fuller in 2607, and the properties catalog can now read the registry. Neither fixes a policy that was never going to apply.

Custom compliance settings for macOS in Intune: the script, the rules, and the type mismatch that wastes your afternoon

New in service release 2607. A shell script that emits JSON, a rules file that judges it, and strict data types that fail quietly when you get them wrong.