Intune Archives

Winsage

July 4, 2026

Microsoft Edge 150 Adds Google Account Sign-In on Windows and macOS

Microsoft has introduced the ability to sign into its Edge browser using a Google account, starting with version 150 on Windows and macOS. This feature allows users to integrate their Google accounts alongside Microsoft accounts and is being rolled out gradually. System administrators can manage this feature through the NonMicrosoftAccountSignInEnabled policy, which organizations can enable or disable based on compliance and security needs. Edge 150 is the last version compatible with macOS 12 Monterey, and users are encouraged to upgrade to macOS 13 Ventura or later. The update has transitioned the Workspaces feature to a new architecture but removed the sharing function. Users can sign in to Google accounts by updating to version 150.0.4078.48 or newer and following the sign-in process in Edge Settings.

Winsage

July 3, 2026

Microsoft Edge finally lets you sign in with a Google account

Microsoft Edge has been updated to enhance compatibility with Google services, allowing users to sign in with their Google account for easier import of bookmarks and browsing history. This feature is part of a controlled rollout starting with version 150.0.4078.48 and is available for both Windows and macOS devices. Other updates include refined language for managing third-party cookie settings, Intune MAM protected downloads directing files to OneDrive, a DowngradeVersion policy for WebView2 applications, enhanced security for the "View in File Explorer" feature, and the ability for administrators to set severity thresholds for security update alerts. Additionally, the Sidebar app list has been retired.

Winsage

June 30, 2026

Microsoft 365 apps downloaded via MS Store is losing support on Windows 11, verify if you’re affected

Microsoft has announced the end of support for the Microsoft Store version of Microsoft 365 Apps. Support for this installation type will cease, with new feature updates ending in October 2025 and security updates concluding in December 2026. Users with the Store installation must upgrade to the Click-to-Run installation type. The Store installation uses Appx packaging and aligns updates with Windows Update, resulting in slower feature rollouts, while Click-to-Run allows for faster updates and better enterprise management. The transition to Click-to-Run is necessary due to limitations in the Store installation, including a lack of support for XML configuration and essential enterprise management tools. Users can check their installation type through the Account section of any Microsoft 365 app. Transitioning to Click-to-Run involves downloading the Office Deployment Tool, which will automatically remove the Store version and reinstall Office using Click-to-Run. IT administrators can also use the Office Deployment Tool for automatic transitions across multiple devices.

Winsage

June 29, 2026

OEMs reveal Windows 11 Secure Boot fix after deadline passes, here’s how to update your PC

Major PC manufacturers, including HP, Dell, ASUS, Lenovo, MSI, Acer, Samsung, LG, and Microsoft’s Surface division, have provided guidance on transitioning to new Secure Boot certificates as the expiration of Microsoft’s 2011 certificates approaches. The expiration will occur in three phases: Microsoft Corporation KEK CA 2011 expired on June 24, 2026; Microsoft UEFI CA 2011 expired on June 27, 2026; and Microsoft Windows Production PCA 2011 is set to expire on October 19, 2026. Microsoft has begun rolling out replacement certificates through Windows Update, contingent on OEMs providing compatible BIOS updates. ASUS offers detailed documentation for both consumer and commercial devices, confirming that most users will receive updates automatically. Lenovo provides direct download links for BIOS updates organized by product family and specifies which products will not receive updates. Dell's support article covers its entire product lineup, noting that devices with an End of Service Life before January 1, 2026, will not receive updates. HP outlines a dual-track approach for updates, with specific timelines for commercial PCs. Microsoft's Surface devices receive updates directly from Microsoft, while MSI categorizes guidance based on processor generation for its laptops. Acer emphasizes backing up the BitLocker recovery key and provides a model table for confirmed BIOS release dates. Samsung confirms that all PCs running Windows 10 or 11 will function normally post-expiration, but security updates will cease. LG has released a guide for checking BIOS updates for its PCs. To verify if a PC has the 2023 certificates, users can check the Secure Boot section in Windows Security. A green checkmark indicates successful application, while yellow or red icons indicate pending updates or incompatibility. Microsoft has pushed the certificates to all eligible devices as of June 2026.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Point-in-Time Restore for Windows 11 is Generally Available

Microsoft has rolled out the Point-in-time restore feature for Windows 11, enhancing recovery capabilities. Users need to install the June Week D preview update to access it, and the rollout is a Controlled Feature Release (CFR), meaning availability will vary by device. This feature is available in Windows 11 Enterprise, Pro, and Home editions, allowing users to revert systems to a prior state quickly. It offers automatic restore points, improved reliability, integrated management through the Settings app, lower storage impact, and future remote management capabilities via Intune. For Windows 11 Home and Pro users, Point-in-time restore is enabled by default in versions 24H2 and 25H2, and can be managed in the Settings app under System > Recovery > Point-in-time restore.

Winsage

June 24, 2026

Windows 11 Adds Point‑in‑Time Restore for System Recovery

Point-in-time restore is a new feature for Windows 11 that allows administrators to revert systems to a previous stable state, streamlining recovery from issues like problematic updates or software conflicts. It automatically generates restore points every 24 hours, retaining them for up to 72 hours and using a maximum of 2 percent of disk space. This feature is available on Windows 11 version 24H2 and later across all editions, including Enterprise, Pro, and Home. Administrators can initiate the restore process through the Windows Recovery Environment (Windows RE) by selecting a restore point. Future enhancements will include remote restore capabilities through Microsoft Intune.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Winsage

June 23, 2026

In 2011, Microsoft signed the Secure Boot certificates that still sit inside millions of Windows PCs, and the first one expires on June 24, 2026, leaving unupdated machines running normally while future boot-level revocations stop reaching them

Microsoft's Secure Boot certificates, including the Microsoft Corporation KEK CA 2011, will expire on June 24, 2026, followed by the Microsoft UEFI CA 2011 on June 27 and the Microsoft Windows Production PCA 2011 on October 19. New certificates issued in 2023 will replace these older ones. While devices will continue to operate and receive standard Windows updates, they will gradually lose access to critical security updates that protect against boot-level threats. After June 24, the ability to sign new disallowed signature database payloads with the old KEK will be lost, reducing the capacity to revoke compromised bootloaders. Users are advised to keep Windows and firmware updates current, while enterprises may face challenges managing diverse machine inventories for updates.

Winsage

June 22, 2026

Windows 11 version 26H2: Microsoft details rollout strategy

Microsoft is enhancing its enterprise offerings with Microsoft Intune, a cloud-based service for managing mobile devices and applications. Intune allows IT administrators to control device usage, ensuring compliance with corporate policies, securing sensitive data through application management, and providing employees with flexible access to corporate resources from personal devices. Additionally, Microsoft promotes Microsoft Learn, an educational platform to help users understand Intune and other services.