Every post, filtered by topic: Intune and Copilot error fixes, Azure cost explainers, .NET guides and homelab notes. Written after the thing was actually fixed, in a tenant with real users in it.
Compliance beats configuration, two compliance policies resolve to the most restrictive value, and two configuration profiles resolve to nothing at all. The report calls all of it Conflict.
Retire, wipe, delete, Fresh Start and Autopilot Reset do five different things to a device and to three separate records. Delete is the one that catches people.
The admin centre Sync action got fuller in 2607, and the properties catalog can now read the registry. Neither fixes a policy that was never going to apply.
New in service release 2607. A shell script that emits JSON, a rules file that judges it, and strict data types that fail quietly when you get them wrong.
Edge 149 brought the Copilot governance policies into the settings catalog. Two of them decide whether page content is read. The rest just change what a tab looks like.
New in preview: Intune-delivered Defender settings can now override Group Policy, Configuration Manager and local scripts. Useful, and not something to switch on tenant-wide.
Most of the comparison is noise. Three capabilities genuinely stop at E3, and the largest saving is usually in the opposite direction entirely.
