Product Management Consultant, Windows experiences, MSIX, Autopatch, enterprise apps, & winget. All tweets, opinions, & awesomeness are my own.
Redmond, WA - USA
Joined March 2009
- Tweets3.2K
- Following259
- Followers1.9K
- Likes15.3K
This is an awesome change!
Your Windows settings, backed up by default. βοΈ
With Windows 11, version 26H2, Windows backup settings are now on by default, making it easier to restore your settings when you move to a new or reset PC.
Learn more: aka.ms/SettingsBackupAndRestβ¦
Very cool... techcommunity.microsoft.com/β¦
This is really cool. I had the pleasure of being a beta tester for it. Works great!
Got an MSIX and wondering what's actually in it? MSIXplainer explains every setting, shows what the package does, and lets you model update sizes.
github.com/aclinick/msixplaiβ¦
winget install --id 9N7X47BX4R58 --source msstore
#MSIX #WinGet #Intune #Windows11 #ITPro
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
The IntuneWin downloader got another upgrade.... and it's even bigger than the previous one!!
It now uses the WinUI3 Frontend, and you can select multiple apps at once.
The best thing? It does NOT require an App Registration... just open the tool on any Entra/Intune-enrolled device, and you can download and extract all the apps available to you.
#Intune #MSIntune
github.com/call4cloud-code/Iβ¦
The IntuneWin Downloader got a small upgrade
The first version depended on the local TokenBroker cache. Find the .tbres, decrypt it, pull out the token, and hope the right one was there.
That worked, but it always felt a bit too fragile.
So during #MMSMOA I changed that whole approach.
The new tool now requests the needed tokens through WAM, uses the Company Portal catalog flow to discover the available apps, and then uses the IME SideCar flow with the local MDM device certificate to resolve, download, and process (decrypt) the content.
Tomorrow morning I will post the blog with the Download link and the "how to" ...as requesting IME and CP tokens on my own with an app Reg is funny :)
#Intune #MSIntune #PatchMyPc
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
Check-SecureBoot.ps1 - Script Updated deploymentbunny.com/2026/05/β¦ via @mikael_nystrom
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
Also, know that Hotpatch updates do _not_ include Secure Boot certificates. Those only come in the baseline updates, four times a year.
Secure Boot also requires multiple reboots.
If you are in the midst of your Secure Boot journey, this is not the time to enable Hotpatch.
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
Have you solved all your secure boot challenges yet? If not, or you want a report that check and verify everything - we have a webinar covering today. With experts from PMPC and Microsoft.
#configmgr #msintune
Letβs be honest. Most teams *think* theyβre covered for Secure Boot.
June 2026 certificate changes say otherwise.
Firmware, bootloaders, OSβ¦ gaps hide everywhere. Devices still boot. Reports look clean. That doesnβt mean youβre secure.
See how to get a clear answer with a new #AdvancedInsights report for #ConfigMgr β‘οΈ bit.ly/4sHDU6y
#MSIntune #EndpointManagement #SCCM #ITCommunity
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
Windows 11 Hotpatch Updates Issue: Reset This PC
Windows 11 hotpatch updates sound great until you look at what it could break. Microsoft has now officially confirmed that "Reset This PC" can fail when hotpatch is enabled....
At the same time, Secure Boot certificate updates still wait for the baseline update.
So yes, fewer reboots. But not less complexity. That is exactly what this blog is about and why I think Hotpatch is something we need to think about before enabling it by default.
patchmypc.com/blog/windows-1β¦
#WindowsUpdates #Hotpatch #Windows11 #Security
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
"If USA wins this game and the Dominican Republic beats Korea tonight...
We've got Paul Skenes versus the DR for a trip to the finals on Sunday night..
It doesn't get any better than that and that's why people love this tournament" ~ @JeffPassan
#PMSLive
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
"The Olympics were so incredible..
Seeing both hockey teams win gold was so incredible" ~ @bryceharper3 #PMSLive
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
Intune Win32App PowerShell Script Installer 64-Bit Switch Not Working
Microsoft added PowerShell installer script support to Win32 apps in Intune, including a 32-bit and 64-bit switch.... --> sysnative issue incoming :)
The problem is simple: choosing 64-bit still launches 32-bit PowerShell inside IME. Because the IME runs as a 32-bit process, WOW64 redirection silently redirects System32 to SysWOW64. Microsoft already handled this correctly in the PowerShell AgentExecutor, but that logic was never added to the new installer script flow....
@IntuneSuppTeam ?
If your β64 bitβ install script behaves like 32 bit, this is the reason. Read the blog for all the details
patchmypc.com/blog/intune-wiβ¦
#Intune #MSIntune #Windows #Windows11
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
The Windows App for Windows now supports connecting to Windows PCs directly π
$RegPath = "HKCU:\SOFTWARE\Microsoft\WindowsApp\Flights"
New-Item -Path $RegPath -Force -EA SilentlyContinue
New-ItemProperty -Path $RegPath -Name "PeerToPeerConnectionsEnabled" -Value 1 -Force
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
Don't miss the chance to ask Microsoft anything about the Secure Boot certificate expiration - February 5th
techcommunity.microsoft.com/β¦
#Windows11
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
We've received reports and are investigating an issue affecting Microsoft 365 services, including Teams and Outlook. Further information can be found in the Microsoft 365 admin center under MO1220495 or at msft.it/6017QBN5X.
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
Blogged: January 2026 Cumulative Update breaks Windows app - #Windows365 #MSIntune @Brinkhoff_C
niallbrady.com/2026/01/19/jaβ¦
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
By POPULAR Demand - Donβt assume #BitLocker keys are escrowed to Entra ID/Intune by default. Run a regular scan with your script to ensure all devices have valid recovery keys, especially after imaging or Autopilot enrollment.
Read more: systemcenterdudes.com/intuneβ¦
#MSIntune
π£π¨π‘π§ π―π’π§ππ³ππ₯π«π₯ retweeted
It's time for Microsoft to have another XPSP2 moment. No more AI, no more features. Just fixes.
When I was working on Windows XP, Blaster hit. It was a big enough deal that we set aside all feature work.
For the next several months, all we did was improve security. We didn't add "security features"; we fixed bugs. Lots of bugs. Until there weren't security bugs to fix anymore.
Then we fixed the ones we didn't know about yet.
Put more simply, we stopped trying to "add value" to the product through features that PMs thought users would like, and instead we focused on the things that had been important for a long time, but overlooked.
Like performance and configurability today.
Rather than trying to improve and add value to the system through new AI features -now-, I argue it's time for Microsoft to stabilize, improve, and make the system more performant. And more usable for power users.
Just for one release. Just till it doesn't suck.
