Matt

  What is Windows 10 ESU? It stands for Extended Security Updates. This license was released by Microsoft after Windows 10 reached the end of support on October 14th, 2025. This solution was introduced to help many companies and individuals who are still using Windows 10 for any reason and want to migrate their work to Windows 11. The license covers 1-3 years. This license is free for home users, but for companies it costs $60 per user for the first year.   If you want to get a license, you can buy it from one of Microsoft's partners. And deploy ESU MAK via Intune or any other option.   If you deployed the ESU Key and it is installed, but you did not receive the Nov updates, no worries, you are not alone. I have the issue, and after deploying my license, I did not get the update on Tuesday, November 11 th , 2025. I did all the troubleshooting you can imagine to see when the update will be, but I get the message that the version has reached the end of support. ...

  Intune Security Policies – E1 Administrative Templates After more than seven years of working with Intune and recently focusing on securing environments by configuring Intune policies, I found that many companies are not implementing several policies, particularly those related to Administrators, Security, Access, etc. Also, most of these policies are required by Cyber Security. I decided to create this series on Intune Policies and discuss one category in each episode.   In this episode, I will discuss “ Administrative Templates Personalization ” Prevent enabling the lock screen camera. Prevent enabling the lock screen slideshow. Enable screen saver (User). Prevent enabling the lock screen camera: To stop the camera from opening on the lock screen, switch the toggle to’ Enabled. ‘ This action will prevent the user from enabling or disabling lock screen camera access in PC Settings. Consequently, the camera cannot be accessed on the lock screen. Prevent the lock screen slide...

Windows Autopatch Hotpatch I am sure all of you guys are about to get busy for Thanksgiving! this is a short blog about Hotpatch. This morning, while I was checking for updates regarding my tenants and looking for the new hardware inventory setting, I was pleased to see that the new setting “ Hotpatch for Windows ” had appeared in my tenant. Before we discuss it, let’s first go over the details. We are all familiar with quality updates and the security patches released on the second Tuesday of each month. Microsoft has created a hotpatch for Windows 11 24H2 that allows these updates to be applied without requiring a restart. Typically, after monthly updates, the device must restart to install all security patches and to update the build number (the last four digits of Windows). According to Microsoft, there will be two types of updates each quarter. The first update will occur in January, April, July, and October and will include a full security patch and new features, requiring the de...