Intune Daily Hub

Intune 6 July 2026

Customizing the power options in Start layout

This week is all about customizing the power options in the Start layout, and is the first follow-up on this post about customizing the account settings in Start layout. Again, it is important to…

Read more →

Intune 3 July 2026

EPM Part 3: Writing Intune Endpoint Privilege Management rules for the real world: File hash, certificate, and when each one is the wrong choice

This is the third post in a series on Microsoft Intune Endpoint Privilege Management. In Post 1, we covered the architecture and the strategic case for EPM. In Post 2, we walked through audit mode,…

Read more →

Intune 2 July 2026

Defender for Endpoint performance troubleshooting on Linux

Microsoft Defender for Endpoint (MDE) provides advanced endpoint protection, detection, and response capabilities for Linux systems. While the solution is designed to operate efficiently,…

Read more →

Intune 29 June 2026

Getting started with Android Enterprise personally owned devices with work profile

This week is all about the move of Android personally-owned devices to the Android Management API (also known as AMAPI). The Android Management API is the API that is already being used for all the…

Read more →

Intune 22 June 2026

Customizing the account settings in Start layout

This week is all about customizing the account settings in the Start layout. Customizing the Start menu layout has been the subject of discussion multiple times already on this blog. There is,…

Read more →

Intune 22 June 2026

Configure AI agent runtime protection (preview) with Microsoft Defender for Endpoint

Artificial Intelligence (AI) agents are becoming part of more and more workflows. From coding assistants and CLI-based agents to autonomous desktop applications, these tools can read files, execute…

Read more →

Intune 22 June 2026

EPM Part 2: Before you remove local admin: How to use Intune Endpoint Privilege Management audit mode to understand your environment

This is the second post in a series on Microsoft Intune Endpoint Privilege Management (EPM). If you haven’t read the first post, “The End of Local Admin“, we recommend starting there. It covers what…

Read more →

Intune 15 June 2026

Closing the Azure AD Graph Visibility Gap: Why AADGraphActivityLogs is important for Defenders

For years, defenders relied on MicrosoftGraphActivityLogs to monitor Graph API activity in Microsoft Entra ID. However, this visibility was incomplete because the table only captures requests to…

Read more →

Intune 15 June 2026

Turning off account notifications in Start and multi-app kiosk mode

This week is also all about another relatively small, but nowadays essential, configuration to further enhance the Start layout experience. Especially when using multi-app kiosk mode with local…

Read more →

Intune 15 June 2026

EPM Part 1: The End of Local Admin: How Intune Endpoint Privilege Management solves a problem IT has lived with for decades

This blog post is the first in a series on Microsoft Intune Endpoint Privilege Management. This is not a Microsoft doc, but a series about how EPM will work in real life. The Scenario Every IT Pro…

Read more →

Intune 8 June 2026

Hiding the recommended section from the Start layout and multi-app kiosk mode

This week is all about another relatively small, but essential, configuration to further enhance the Start layout experience. Especially when using multi-app kiosk mode. That configuration is to hide…

Read more →

Intune 8 June 2026

Disable alert generation for Unsanctioned Apps in Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud Apps (MDCA) can integrate with Defender for Endpoint (MDE). With the integration, it is possible to get an out-of-the-box cloud app discovery view of the used apps and…

Read more →