Posts

Control and Manage Windows quality updates with Intune

Image
  On October 15, a new Windows quality update policy experience appeared in my tenant. First impression: another way to manage quality updates. The point isn't managing quality updates. It's deciding which ones you take and when, which get approved automatically, which sit and wait for manual human approval, and how long each one waits before it reaches a device. If you've ever had an optional preview update land in production because nobody was watching the ring, this is the control you've been missing. Approval used to be blunt. You had updating rings, deferral periods, and limited control over update types. Now a single quality update policy gives you four update categories, each independently set to automatic or manual, with its own deferral. Quick machine recovery and hotpatch settings live in the same policy. And the same approval settings govern supported .NET Framework releases, which is easy to miss. Where to find it Devices  >  Manage updates  >...

Microsoft Intune Remote Help from E5 in a Hybrid Environment

Image
  How to use this document Sections 1–4 are written for management and security stakeholders (what it is, why it helps, how it compares, and whether it can replace current tools). Sections 5–10 provide technical enablement details (security, RBAC, ports/URLs, Zscaler configuration, session flow, and deployment). Environment: hybrid identity (on-prem AD + Entra Connect + Entra hybrid join) with authentication federated to Okta, assuming that Zscaler SSL inspection is enabled. 1. Executive Summary Microsoft Intune Remote Help is a cloud-based remote assistance solution that lets the help desk connect securely to an end user’s device for real-time, attended support. It is delivered as an Intune add-on (available standalone or as part of the Intune Suite) and is built specifically for organizations that already manage identity and devices through Microsoft Entra ID and Intune. The value proposition for us is that Remote Help replaces ad-hoc, less-governed remote tools with a ...