Xplore the Cloud | Blog Post

Auto Update EAM Applications

Mon, 06 Jul 2026 00:00:00 -0000

Enterprise Application Management isn’t new, but the option to automatically update these apps is. Recently this option has become Generally Available (GA). Just in time for the summer break so you won't have to package those applications by your self!.
Enterprise Application Management is now included for customers using the Microsoft 365 E5 suite...

Intune Suite: Not an Add-on but a part of your Microsoft 365 Suite

Mon, 15 Jun 2026 00:00:00 -0000

In December 2025, Microsoft announced a major change to the Intune Suite. The Microsoft Intune Suite will become part of the Microsoft 365 E3 and Microsoft 365 E5 licenses instead of remaining a standalone add-on. In previous blog posts, several powerful capabilities of the Intune Suite were described in the Blog Series: Intune Suite a hidden Gem?

Use Microsoft Intune to set Recovery Lock for macOS

Wed, 03 Jun 2026 00:00:00 -0000

Recovery mode for macOS is a built-in troubleshooting environment that runs independently of the main operating system. End users can activate recovery mode by themselves. It provides a set of essential utilities to repair hard drives, restore from backups, reinstall macOS, or modify startup security settings. When this mode is not protected, any...

New Device View

Thu, 07 May 2026 00:00:00 -0000

The great benefit of SAAS services is that they are continuously evolving. Microsoft Intune works with Service Releases for the new features and improvements. Some feature are announced and some are not that visible. But now something is changing. The overview of device blade is changing. In this (short) blog post if describe the proces of changing...

Enhanced Security: Require Biometrics for macOS PSSO registration

Wed, 22 Apr 2026 00:00:00 -0000

MacOS Platform Single Sign On with Secure Enclave is great, but how can we provide an extra layer of protection by ensuring that the user will confirm their identity with TouchID. With these requirement upon registration the user physical presence is needed, it can reduce the risk of unauthorized enrollments and helps keeping account access aligned...

Safeguard your Tokens for macOS using Intune & CA

Wed, 08 Apr 2026 00:00:00 -0000

Token theft, also known as session hijacking, has become a primary attack vector. These attacks can bypass Multifactor Authentication (MFA) prompts, making it essential to protect credentials and, in turn, the tokens themselves. On Windows devices , several techniques are available, such as Windows Hello for Business (WHfB) with Conditional Access....

Disable MDM enrollment for School of Work account

Thu, 19 Mar 2026 00:00:00 -0000

This is a feature many have been waiting for. For years, it was necessary to guide users step by step to prevent them from accidentally enrolling their personal devices into Intune when adding a work or school account. This was mainly due to the well-known dialog where the wrong option was often selected. Now this is changing. With this new...

How to use Intune to manage Secure Boot Certificates

Mon, 23 Feb 2026 00:00:00 -0000

June 2026 should be marked in your calendar not for your summer holiday, but the fact that the Secure Boot Certificates will expire! These certificates are from 2011 and June 2026 marks the expiration date. When your Windows devices are managed with Intune, you can use Intune to handle the update process. But there are some caveats find out which!...

Restore Deleted Groups from Intune!

Wed, 28 Jan 2026 00:00:00 -0000

We all have been there, the situation where an Entra ID group was accidentally removed. Not an ideal situation, Intune is based upon group assignment and those assignments won't work when there isn't a group attached. But there is something new out there, Soft Deleted Groups. This now supports cloud based security groups. Read on to find out more.

Use Graph Explorer to view your Intune Admin Tasks?

Wed, 14 Jan 2026 00:00:00 -0000

Recently Microsoft has released the Admin Tasks node in the Intune Console. This feature is in preview and is designed to give you an overview of some specific task at require some attention. If you are an administrator for more then one organization or tenant and you want to view these tasks without logging into the Intune portal you can...

Windows Backup for Organizations

Thu, 18 Dec 2025 00:00:00 -0000

In August 2025 Microsoft has released Windows Back-up for Organizations this feature was in Preview. Last month this feature has been released as Global Available (GA). Time to take a closer look at this feature. In this post I describe how to enable the feature, control the settings available. And last but not least how can the user perform...

M365 Companion Apps, how to remove or disable?

Wed, 19 Nov 2025 00:00:00 -0000

Starting in the summer of 2025, Microsoft has released the Microsoft Companion Apps. These Companion Apps consist of the following apps: People, Files, and Calendar. In October 2025, Microsoft has quietly enable these apps for Windows 11 devices through the Microsoft 365 App update process. If your organization wants to control whether these apps...

Remove Default Windows Store Packages with Settings Catalog

Tue, 21 Oct 2025 00:00:00 -0000

This is the way 😏. A long wanted feature is now available in the Settings Catalog Configuration Profile for Windows in Intune. Now we can select which apps aren't available in your Windows 11 25H2 environment.

Multi Admin Approval (MAA) Remote Wipe

Fri, 29 Aug 2025 00:00:00 -0000

We all have been there, a moment or action that a second pair of eyes or approval could prevent a mistake….