Lightnews — Scholar-powered news

James Robinson | MVP @skiptotheendpoint.co.uk · Jul 14

There's some companion apps coming to #Windows11 via the M365 Desktop Apps that might catch admins or users off-guard, so I've put some thoughts and information together in a mini-blog.
skiptotheendpoint.co.uk/m365-compani...

M365 Companion Apps: A (P)review

M365 Companion Apps are coming! What are they, what does this mean as an admin, and what do I think?

skiptotheendpoint.co.uk

1 3 4

James Robinson | MVP @skiptotheendpoint.co.uk · May 13

a cartoon of a capybara with the words you 've just been capybara 'd below it

ALT: a cartoon of a capybara with the words you 've just been capybara 'd below it

media.tenor.com

1

James Robinson | MVP @skiptotheendpoint.co.uk · May 13

📰 #OIB Windows v3.6 - Post-MMS Edition!
- More 24H2 baseline settings
- New LAPS account management
- M365 Apps Baseline!

Check out the release notes below:
github.com/SkipToTheEnd...

Release windows-v3.6 · SkipToTheEndpoint/OpenIntuneBaseline

Windows v3.6 - 2025-05-13 - Post-MMS Edition Added Settings Catalog Win - OIB - SC - Microsoft Office - D - Device Security - v3.6 Win - OIB - SC - Microsoft Office - U - User Security - v3.6 By po...

github.com

1 3

James Robinson | MVP @skiptotheendpoint.co.uk · May 4

I'll find someone here to bring one back for you 😉

1

James Robinson | MVP @skiptotheendpoint.co.uk · May 4

#MMSMOA is almost upon us!
Start your conference right with a dose of the #OpenIntuneBaseline, and asking a good question may reward you with a special shiny SkipToTheEndpoint sticker!

8am, Lakes B!

Sign up here: stte.me/mmsoib

1 3

James Robinson | MVP @skiptotheendpoint.co.uk · Apr 28

📬 #Windows Recall had a rocky start, but where do we stand now as it moves into GA? With a complete security overhaul, fresh admin controls, and a default-off strategy, the improvements are promising!

Interested to read a more optimistic view?
stte.me/recallisgreat

From Criticism to Confidence: Windows Recall

Windows Recall is a powerful tool, but is it secure, should you be concerned, and how do you manage it?!

stte.me

1 3

James Robinson | MVP @skiptotheendpoint.co.uk · Apr 15

They've addressed the enterprise-readiness because yeah, the initial announcement was awful.
While I somewhat agree as I also work across physical and virtual devices, the security necessary for it so heavily ties it to a device.
I've been loving the Snapdragon Surface though!

James Robinson | MVP @skiptotheendpoint.co.uk · Apr 15

After picking up a Surface and having some time to play with #Windows #Recall, I'm working on a blog all about it, but am already fed up with seeing posts about policy not working.

So let me make this as clear as I can:

1 2

James Robinson | MVP @skiptotheendpoint.co.uk · Apr 2

It's an absolute pleasure to be invited back to the @mmsmoa.bsky.social to talk all about the #OpenIntuneBaseline!

Interested in how it all started? Not sure how to get the most of it in your environment? I'm stoked to be able to tell you all about it!

sched.co/1uF7c

1 9

James Robinson | MVP @skiptotheendpoint.co.uk · Mar 17

I am deeply unhappy that these things now qualify as being "dad rock". And that I'm the dad.

1 4

James Robinson | MVP @skiptotheendpoint.co.uk · Feb 20

📰 OIB Windows v3.5 - 24H2 Baseline Edition!
A surprise drop of some settings and an updated 24H2 Intune baseline brings some of those additions (and some extra goodies) to the Windows OIB.

Check out the changelog below!
github.com/SkipToTheEnd...

Release windows-v3.5 · SkipToTheEndpoint/OpenIntuneBaseline

Windows v3.5 - 2025-02-20 - 24H2 Baseline Edition (Mostly) Added Settings Catalog Win - OIB - SC - Device Security - D - Windows Package Manager - v3.5 Added configuration that will be being adde...

github.com

4 11

James Robinson | MVP @skiptotheendpoint.co.uk · Feb 11

Since about April last year. It's also a bypass to other policies blocking access to the Store (mostly).
Though those policies are largely security by obscurity and not a valid alternative to proper Application Control.

1 2

James Robinson | MVP @skiptotheendpoint.co.uk · Feb 6

📬 It's been a quiet couple of months on the #Intune front, so what's better than getting Intune 2501 in February!
New Edge settings, more Apple DDM, and CSP control over the upcoming #Windows #Recall feature.

skiptotheendpoint.co.uk/settings-run...

Intune Settings Rundown - 2501

Intune 2501 - Stay informed of the latest Intune settings policy and UI changes!

skiptotheendpoint.co.uk

3 8

James Robinson | MVP @skiptotheendpoint.co.uk · Jan 28

So you're saying I should have jumped straight to v95? 😅

1

James Robinson | MVP @skiptotheendpoint.co.uk · Jan 27

The multiple entry points to configure things like this and WHfB confuse so many people.
Like Windows LAPS, I think they should only be configurable via Endpoint Security > Encryption.

1

James Robinson | MVP @skiptotheendpoint.co.uk · Jan 24

🚨 #OpenIntuneBaseline Windows v3.4 Released!
New additions and some things to be aware of, such as the fact all policy names have been updated.
Thanks for all the community input. You guys rock.
Check out the release changelog below:

github.com/SkipToTheEnd...

Release windows-v3.4 · SkipToTheEndpoint/OpenIntuneBaseline

Windows v3.4 - 2025-01-24 ImportantA UI change in November '24 has made all policy types visible in the Configuration blade. This has caused a lot of confusion when trying to identify policies conf...

github.com

1 8 27

James Robinson | MVP @skiptotheendpoint.co.uk · Jan 22

Haha. Also not wrong.
That being said, I've seen the mechanism for configuring the start menu break like 5 times in the last few years. There's far better things for admins to be worrying about on a daily basis than chasing a goose with a knife ;)

1 1

James Robinson | MVP @skiptotheendpoint.co.uk · Jan 22

Haha, tell me about it. That naming scheme alone is a labour of love.
If they're not descriptive and someone who's not sure can't at least take a guess at where a thing might be configured, what's the point?!

James Robinson | MVP @skiptotheendpoint.co.uk · Jan 22

📰 OIB 3.4 News!
I'm busy finalising changes/updates to v3.4 of the #OpenIntuneBaseline.
Some forewarning of a "breaking change" in that all policies have been renamed to show where they actually exist (ES - Endpoint Security, SC - Settings Catalog).
I still don't like it :(

1 2 9

James Robinson | MVP @skiptotheendpoint.co.uk · Jan 20

Another day, another "x policy/remote action isn't working on our iOS devices" issue.
Just because you used Corp Identifiers, or switched it from Personal to Corp doesn't mean that device is Supervised.

Stuff won't work as you expect.

Enrol your devices properly, guys!

3

James Robinson | MVP @skiptotheendpoint.co.uk · Jan 14

Is this another hilarious #Windows en-GB install media localisation issue where "checked" has been replaced with "ticked"?
24H2 26100.2605

1 2 3

James Robinson | MVP @skiptotheendpoint.co.uk · Dec 24

Copy > Paste > Scale

3

James Robinson | MVP @skiptotheendpoint.co.uk · Dec 20

Thanks! Glad they were valuable.
Pretty sure I just had to stop and disable AppArmor entirely, though I'm not sure if that's necessarily the best thing to do:
ubuntu.com/server/docs/...

ubuntu.com

1

James Robinson | MVP @skiptotheendpoint.co.uk · Dec 19

📬 Following from last week, Part 2 in the story of #Windows CSP and #Intune policy deployment.
ControlPolicyConflict, Policy Scope and MMP-C, oh my!

Happy Holidays!

skiptotheendpoint.co.uk/windows-csp-...

Windows CSP: A Tale of Magic, Betrayal, and Intrigue - Part 2

Part 2 on how Windows handles policy, the 2 major reasons people struggle, as well as a taste of the future.

skiptotheendpoint.co.uk

1 4 12

James Robinson | MVP @skiptotheendpoint.co.uk · Dec 12

📬 Do you administer #Intune or support Intune-managed devices?
Do you know how policy gets delivered to devices, and how the OS handles them?

Check out part 1 of 2 all about the nuance and intricacies of #Windows CSP's!

skiptotheendpoint.co.uk/windows-csp-...

Windows CSP: A Tale of Magic, Betrayal, and Intrigue - Part 1

Creating an Intune policy is easy, but what happens then? How go they get there, and why you should know and care.

skiptotheendpoint.co.uk

2 18