Joy blogs about MIcrosoft Intune (MEM) and other Digital Workplace technologies
Intune’s Enhanced App Inventory transforms application visibility from guesswork into a reliable security signal. By introducing richer metadata, user context, and freshness indicators, it closes long-standing audit and compliance gaps. Here’s what changed, how to enable it, and why it matters for Zero Trust operations. [Read More] The post Intune’s App Inventory Just Grew Up appeared first on MDM…
Microsoft’s new Intune Device View isn’t about new features—it’s about better context. By consolidating device data, actions, compliance, and reporting into a single experience, it reduces admin friction and improves audit visibility. Here’s what changed, why it matters, and how it aligns with real-world endpoint operations. [Read More] The post Intune’s New Device View: Less Clicking, More…
The Secure Boot 2023 CA transition was never just a certificate update. This epilogue looks back at what actually changed at enterprise scale—broken assumptions, firmware realities, and why proof matters more than deployment success. [Read More] The post Secure Boot Certificate Update Rollout at 50,000 Feet (and Devices): Series Wrap‑Up appeared first on MDM Tech Space .
Secure Boot certificate updates won’t flip Secure Boot ON for you. This post shows how to safely enable Secure Boot at scale using Intune orchestration + PowerShell execution, with BitLocker readiness gates, and OEM-supported tooling for Lenovo and Dell. [Read More] The post Secure Boot Certificate Update Rollout at 50,000 Feet (and Devices): A Field Guide for the Sleep‑Deprived IT Admin – Part 4…
WinCsFlags.exe doesn’t write Secure Boot certificates into firmware — it sets intent. This deep‑dive explains how WinCS works behind the scenes, how the Secure Boot 2023 CA update actually flows from Windows to UEFI firmware, why two reboots are expected, and how to validate success using UEFICA2023Status. A practical, engine‑room explanation bridging Part 2 (0x5944) and Part 3 (validation) of the…
Deploying the Secure Boot 2023 certificate update is the easy part. Proving it actually worked is where things get uncomfortable. In Part 3, the spotlight shifts from execution to evidence—where dashboards stop being trusted, reboots start to matter, and firmware finally gets a vote. This is the phase where Windows claims success, devices boot happily, and yet half your fleet may still be clinging…
The Claude / Terraform incident wasn’t AI going rogue—it was automation executing perfectly without governance. This post breaks down why agentic AI is a Zero Trust problem, not an intelligence one, and how Microsoft Agent 365 signals a shift toward scoped, observable, and approval‑gated agents designed to limit blast radius before damage happens. [Read More] The post Why Agentic AI Needs…
There are some security lessons that arrive as a whitepaper, and then there are the ones that arrive like a brick through the server room window. This post explores why Intune Multi-Admin Approval is no longer just a nice governance feature, but a critical security control for preventing destructive remote actions like wipe, retire, and delete from being abused at scale. [Read More] The post…
Part 2 of the Secure Boot 2023 CA Update series dives into the actual rollout: how Windows applies the new KEK/DB certificates, why automatic updates aren’t guaranteed, and how Intune admins can safely trigger and manage the update workflow using registry‑based signals and proactive remediations. [Read More] The post Secure Boot Certificate Update Rollout at 50,000 Feet (and Devices): A Field…
Before you roll out the Secure Boot 2023 certificates, map your fleet. This guide shows how to inventory posture with Intune—reports, proactive remediations, JSON outputs, and OEM gotchas. [Read More] The post Secure Boot Certificate Update Rollout at 50,000 Feet (and Devices): A Field Guide for the Sleep‑Deprived IT Admin Part 1 appeared first on MDM Tech Space .