Intune

Windows LAPS Intune: why the password never appears

Autopilot reset: what blocks it, and what it leaves behind

Intune primary user: what it controls and when to clear it

Intune management extension: what installs it, where it logs, and why it goes missing

Intune policy conflict: which policy actually wins, and how to find the other one

Compliance beats configuration, two compliance policies resolve to the most restrictive value, and two configuration profiles resolve to nothing at all. The report calls all of it Conflict.

Intune wipe vs retire: which action to use, and the order that stops data being orphaned

Retire, wipe, delete, Fresh Start and Autopilot Reset do five different things to a device and to three separate records. Delete is the one that catches people.

Forcing an Intune sync, and the three problems that look exactly like a sync failure

The admin centre Sync action got fuller in 2607, and the properties catalog can now read the registry. Neither fixes a policy that was never going to apply.

Custom compliance settings for macOS in Intune: the script, the rules, and the type mismatch that wastes your afternoon

New in service release 2607. A shell script that emits JSON, a rules file that judges it, and strict data types that fail quietly when you get them wrong.

Governing browsing with Copilot in Microsoft Edge from Intune

Edge 149 brought the Copilot governance policies into the settings catalog. Two of them decide whether page content is read. The rest just change what a tab looks like.

Controlled Configuration for Defender: deciding which channel actually owns your antivirus settings

New in preview: Intune-delivered Defender settings can now override Group Policy, Configuration Manager and local scripts. Useful, and not something to switch on tenant-wide.