Endpoint

Intune compliance policy: why the status still lags after a sync

Intune remediation script: the licence gate and exit codes

Intune Device Query: licence, limits and failure modes

Settings catalog vs administrative templates: what Intune still supports

Intune Win32 app deployment: the parts that actually break

Intune driver updates not working: what actually blocks them

Intune management extension: what installs it, where it logs, and why it goes missing

Conditional Access device filter: why yours matches nothing, and what it cannot protect

An unregistered device has null for every property, so a positive operator can never match it. The mode and operator pairs that hold, and the ones that quietly let devices past.

Intune policy conflict: which policy actually wins, and how to find the other one

Compliance beats configuration, two compliance policies resolve to the most restrictive value, and two configuration profiles resolve to nothing at all. The report calls all of it Conflict.

Intune wipe vs retire: which action to use, and the order that stops data being orphaned

Retire, wipe, delete, Fresh Start and Autopilot Reset do five different things to a device and to three separate records. Delete is the one that catches people.