Intune Archives

Winsage

October 12, 2026

Windows 11 24H2 hits end of updates Oct. 13: What you should do now

Windows 11 version 24H2 for Home and Pro systems will stop receiving security updates on October 13, 2026. After this date, these editions will not receive any updates or technical support, although they will still boot. Windows 11 Enterprise, Education, IoT Enterprise, and Enterprise multi-session editions will continue to receive support until October 12, 2027. Organizations are advised to verify their systems' versions and editions, especially for those without endpoint management systems. Windows 11 25H2 and 26H2 are available as upgrade options, with 25H2 supported until October 12, 2027, and 26H2 supported until October 10, 2028, for Home and Pro editions. The rollout of 26H2 will be phased, and safeguard holds may be implemented if compatibility issues are detected. Unmanaged Home and Pro devices on 24H2 will automatically receive 25H2, while managed devices may require IT intervention. Regular monitoring and proactive management of Windows versions are necessary to ensure compliance and avoid future deadlines.

Winsage

October 9, 2026

Microsoft’s AI-Powered Windows Strategy: 5 Things To Know

Microsoft has transitioned its Execution Containers capability into general availability, creating a secure environment for AI agents on Windows 11. Nvidia's CEO praised Microsoft's MXC architecture as a revolutionary foundation for application development. Organizations are increasingly relying on managed service providers to navigate AI tools. The general availability of Microsoft Execution Containers allows organizations to define access for AI agents, with real-time policy enforcement. The open-source MXC library integrates across Windows, macOS, and Linux, helping manage agent interactions and mitigate risks. Microsoft is enhancing the Copilot experience with hybrid intelligence features and revamping Windows Search for better performance. Preorders for new Copilot+ PCs powered by Nvidia's RTX Spark technology are open, with shipments starting on October 16. Device partners like Dell, HP, and Lenovo are also launching AI PCs on the same date. Later this year, Dell and HP will introduce Nvidia’s DGX Station technology to enable local running of frontier-class AI models on Windows devices.

Winsage

October 8, 2026

Copilot Gets Control of Windows and Your Files as Microsoft’s Recall Bill Comes Due

Microsoft is requesting Windows users to grant its Copilot feature access to their files and activities, following a previous retraction of a similar AI integration due to scrutiny. Copilot can analyze content on the device with user consent, performing tasks like organizing files and troubleshooting, using both local AI models and cloud processing. Microsoft has implemented safeguards, but its security team has raised concerns about potential risks associated with powerful features. The opt-in nature of Copilot places accountability on Microsoft, as users must actively grant access. Hybrid features are set to roll out in the coming months, with taskbar search actions already reaching Windows Insiders. Over 40 percent of new business laptops are being designed as Copilot+ PCs, with the Surface Laptop Ultra scheduled for release on October 16.

Winsage

October 8, 2026

Copilot Gets Control of Windows and Your Files as Microsoft’s Recall Bill Comes Due

Microsoft is inviting Windows users to grant its Copilot feature access to their files and activities, with user consent. The new iteration of Copilot can understand content on the device, perform tasks like organizing files, troubleshooting, and writing code, with some tasks processed in the cloud. Activation is opt-in, folder access is limited, and Copilot operates under separate accounts from users. Microsoft has implemented safeguards, including Microsoft Execution Containers to define agent access. However, internal warnings from Microsoft's security team highlight potential risks associated with agents capable of modifying environments. Features for enhancing auditability of agent activities are under development. Microsoft previously faced criticism for its Recall feature, which raised security concerns. The opt-in design places accountability on Microsoft, as users must grant access. The hybrid features require a Copilot+ PC and are set to roll out in the coming months, with taskbar search actions already reaching Windows Insiders. Over 40 percent of newly manufactured business laptops are Copilot+ PCs, with the Surface Laptop Ultra launching on October 16.

Winsage

October 5, 2026

Windows 11 26H2 Support Comes to Intune and Configuration Manager

Microsoft is enhancing Intune and Configuration Manager to support the transition to Windows 11 version 26H2 for enterprise administrators. Intune now offers day zero support for Windows 11 version 26H2 settings, allowing IT administrators to configure new Windows policies through the Intune admin center. An updated security baseline for Windows 11 version 26H2 will also be released. Configuration Manager versions 2603 and 2609 support Windows 11 version 26H2, providing platform enhancements and updated security controls. IT teams are advised to review new settings, test on representative devices, ensure OS compatibility, and monitor deployments. Organizations using Configuration Manager may need to upgrade their environments and address the discontinuation of support for older platforms like Windows Server 2012/2012 R2 and SQL Server 2016.

Winsage

October 1, 2026

Microsoft Enables Windows Settings Backup by Default

Microsoft has announced that Windows settings backup will now be enabled by default on eligible Windows 11 version 26H2 devices. This feature, previously known as Windows Backup for Organizations, automatically preserves users’ Windows settings and Microsoft Store app lists, facilitating restoration after device resets, replacements, or reimages. The change aims to minimize disruptions during device recovery and ensures more devices have recovery data readily available. Administrators will still control the restore process, which requires explicit configuration. The default-on behavior applies only to Windows 11 version 26H2 or later, devices with the backup policy in a “Not Configured” state, and excludes certain environments. Administrators can disable the backup feature if necessary.

Winsage

October 1, 2026

Microsoft enables Windows settings backup by default for orgs

Microsoft has updated its Windows settings backup and restore functionality, now automatically enabled for all enterprise systems joined to Microsoft Entra or operating in a hybrid environment after upgrading to Windows 11 version 26H2. The backup tool, previously known as Windows Backup for Organizations, is designed to facilitate the backup and restoration of essential Windows settings for enterprise users during device resets, replacements, upgrades, or reimaging. Originally introduced in November 2024, it became generally available by August 2025. The backup policy will be activated by default for eligible devices following the release of Windows 11, version 26H2 on September 29, 2025, unless administrators have previously configured the policy. The automatic backup feature applies to devices running Windows 11 26H2 in regions not governed by the EU Digital Markets Act and does not require explicit admin configuration for restoring Windows devices. IT administrators can control the backup policy through mobile device management solutions like Microsoft Intune or Group Policy.

Winsage

September 30, 2026

WSL containers is now generally available

WSL has introduced a new feature called WSL containers, enabling users to build, run, and deploy Linux containers on Windows. Users can access this feature by executing wsl --update or downloading the latest release from GitHub. Key capabilities include: - WSL containers CLI (PLACEHOLDER8a7e9b6f37799ba2 and PLACEHOLDERcff917ded0a54dfd) for managing Linux containers. - WSL containers API for programmatic execution of Linux containers within Windows applications. New commands and enhancements include: - PLACEHOLDER9a5ce8c0763b7886, PLACEHOLDER3ee1e1334fe287fb, PLACEHOLDER4860ddbd841eef41, PLACEHOLDERe699cb1a0eaadb6e, wslc network disconnect, and support for container health checks. - Integration of Microsoft Intune and Microsoft Defender for Endpoint for security and governance in container workflows. - New settings in Intune for managing WSL container access and registry controls. Community integrations include support for VS Code dev containers and various tools for managing WSL containers. Future plans involve adding wslc compose support and improving core platform capabilities for WSL, including networking and cross-OS file performance.

Winsage

September 18, 2026

Windows 11 Update Can Break Active Directory Trust Relationships

A recent security update from Microsoft, KB5124008, has caused disruptions for organizations using on-premises Active Directory, particularly affecting domain-joined Windows 11 devices with Credential Guard. After installing this update, some devices lost their secure trust relationship with the domain, preventing users from logging in with valid credentials. The issue is linked to Machine Identity Isolation, a security feature that enhances machine account credential protection but requires domain controllers to operate at the Windows Server 2025 Domain Functional Level. Organizations that enabled this feature without meeting the prerequisite may experience trust relationship failures. Microsoft has suggested a workaround to disable Machine Identity Isolation and plans to suspend its enforcement in an upcoming update while improvements are made.

Winsage

September 17, 2026

Microsoft patch gives domain-joined Windows PCs trust issues

Microsoft acknowledged a significant issue affecting Windows 11 versions 24H2, 25H2, and 26H1 related to Active Directory domain logins as of September 16. This issue stems from changes made to Machine Identity Isolation in the September 2026 security update (KB5124008), which may cause Credential Guard-protected machine accounts to lose their secure channel with an on-premises Active Directory domain, preventing users from signing in with valid domain credentials. The update activates Machine Identity Isolation but does not enforce it immediately, and it is only compatible with environments linked to domain controllers operating at the Windows Server 2025 Domain Functional Level (DFL) or higher. Microsoft advised that devices not connected to Windows Server 2025 domain controllers will need to disable Machine Identity Isolation. A workaround involves disabling the feature through Intune, Group Policy, or the Windows Registry, followed by a device restart and repairing the secure channel using the Test-ComputerSecureChannel PowerShell command. Microsoft plans to address this issue in a future update by temporarily halting Machine Identity Isolation enforcement while enhancements are made.