Intune Archives

Winsage

September 3, 2026

Microsoft is auto-enabling Memory Integrity on Windows 11 PCs from October. Why you shouldn’t turn it off

Starting in October 2026, Microsoft will automatically activate memory integrity for eligible Windows 11 devices through the Patch Tuesday update on October 13. Memory integrity, or Hypervisor-protected Code Integrity (HVCI), protects the core of Windows by ensuring that kernel-mode drivers are verified before execution, preventing malware from exploiting vulnerable drivers. Eligible devices must have an Intel 8th-generation processor or newer, AMD Zen 2 or newer, Qualcomm Snapdragon 8180 or newer, at least 8GB of RAM, a 64GB SSD, virtualization enabled in firmware, and compatible drivers. Secured-core PCs already have this feature enabled. Windows will assess device readiness before activation and will respect user settings if memory integrity has been intentionally disabled. Users can check memory integrity status in Windows Security under Device security. Incompatible drivers may cause issues, and conflicts will be logged in the Event Viewer. Microsoft is pushing this update due to increased security threats and aims to protect users who have upgraded their systems without performing clean installs. If issues arise with memory integrity enabled, users can identify problematic drivers in the CodeIntegrity event log.

Winsage

August 27, 2026

The Windows 10 deadline most ISVs haven’t planned for yet

Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB will reach their end of support on October 13, 2026, after which they will no longer receive security updates. These operating systems are designed for fixed-function devices like kiosks and point-of-sale terminals, which are often not actively managed, posing risks if the end-of-support date is overlooked. Microsoft offers an Extended Security Updates (ESU) program as a temporary solution, with escalating costs over three years, but it is not intended as a long-term fix. Customers must decide whether to continue paying for ESU, upgrade to newer hardware, or transition away from Windows.

Winsage

August 26, 2026

Microsoft Intune Remote Help Supports Unattended Windows Devices

Microsoft has enhanced its Intune Remote Help feature, allowing IT teams to access unattended Windows devices without user approval. This update eliminates delays caused by the need for user authorization, enabling technicians to troubleshoot devices even when users are unavailable. The unattended support feature provides secure access for help desk personnel, ensuring session isolation and user awareness. It requires a dedicated permission that must be assigned through custom role assignments, as it is not included in any built-in Intune roles. Organizations are advised to define custom roles, restrict access to specific device groups, and review Remote Help logs for accountability.

Tech Optimizer

August 26, 2026

How to Protect Against Ransomware: 13 Steps [2026]

Global ransomware attacks increased by 0.8% quarter-over-quarter in Q2 2026. The group Qilin has 279 confirmed victims, maintaining its position as the leading threat actor for four consecutive quarters. The rival group The Gentlemen saw a 62% increase in victims, reaching 269. Checkpoint Research's report indicates a shift in the ransomware landscape, challenging the narrative of declining attacks. IBM's analysis shows breaches within supply chains and third-party vendors have quadrupled over the past five years. Effective ransomware protection requires administrative access to endpoints, firewalls, and backup systems, along with specific software versions and tools. The 3-2-1-1-0 backup strategy is recommended, emphasizing offline, immutable backups. Organizations should implement multi-factor authentication (MFA) across all access points and actively patch known vulnerabilities. Network segmentation is crucial to limit ransomware spread, and canary files can provide early warnings of attacks. Regular phishing simulations and a well-documented incident response plan are essential for preparedness.

Winsage

August 23, 2026

Microsoft Edge is ending support for MDAG and WIP in Windows 10

Microsoft has phased out support for Microsoft Defender Application Guard (MDAG), starting with its deprecation for Office applications in November 2023 and for the Edge browser in December 2023. By April 2024, MDAG was removed from Edge and other browser stores, and it was completely eliminated from Windows 11, version 24H2. Microsoft is finalizing the retirement of MDAG by discontinuing support in Edge entirely. The advisory MC1459132 indicates that this phase affects Microsoft Edge users on Windows 10, as Windows Information Protection (WIP) was already phased out in favor of Microsoft Purview in 2022. Organizations using WIP are advised to transition to Microsoft Purview Information Protection, Microsoft Purview Data Loss Prevention (DLP), Endpoint DLP, and Intune app protection policies. Users of MDAG should utilize Edge's built-in security features and consider other isolation solutions. Support for WIP and MDAG will officially end by September 2026, and functionalities related to them will stop in Microsoft Edge 154 and later versions. IT administrators are encouraged to begin migration activities to avoid disruptions.

Winsage

August 20, 2026

Windows 365 turns five, as Microsoft pushes Cloud PCs deeper into AI

Microsoft's cloud PC platform, Windows 365, has reached its fifth anniversary since its launch in 2021. It is designed for business and enterprise customers, allowing users to stream a complete Windows desktop from the cloud. Over the past five years, Microsoft has enhanced Windows 365 by integrating business tools for IT teams, including mini PCs optimized for the service. Windows 365 now integrates with tools like Intune for managing Cloud PCs and Entra for identity and access management. Microsoft is developing Windows 365 for Agents, enabling AI agents to access managed Cloud PCs and execute tasks. Support for Microsoft Execution Containers (MXC) is also forthcoming, facilitating sandboxed environments for AI workloads.

Winsage

August 20, 2026

Microsoft shares detailed guide for IT admins on saving massive internet data on Windows 11

Microsoft has released a guide for IT administrators focused on optimizing Windows deployments and reducing bandwidth usage through Windows Delivery Optimization configured via Microsoft Intune. Delivery Optimization uses a peer-to-peer sharing system, allowing devices to download content from each other instead of solely from Microsoft servers, which helps reduce internet strain for organizations with many Windows PCs. Administrators can create specific peer groups based on network topology and control bandwidth usage for downloads, with options to set different limits for business and off-hours. Microsoft also introduced Connected Cache, which stores frequently accessed content locally to further minimize bandwidth consumption. A statistic shared by Microsoft indicates that using Delivery Optimization can significantly reduce internet traffic, as a 1 GB update for 10,000 devices could otherwise generate 10 TB of internet traffic. The guide recommends starting with a small seeder ring of devices to populate peer caches before wider deployment. Microsoft provides specific policy settings for Delivery Optimization, including default and recommended values for settings such as download mode, peer selection, cache size, minimum file size for caching, cache age, and monthly upload data cap. Proper configuration of Delivery Optimization is suggested to benefit organizations managing large numbers of devices.

Winsage

August 17, 2026

Windows 11 movable taskbar edges closer to general release

Windows 11 has introduced a movable taskbar in the Release Preview Channel, allowing users to position it at the top, left, or right of the screen, in addition to the bottom. This feature returns after being removed from Windows 11 and follows testing in the Windows Insider Program. The Release Preview also includes a compact taskbar option with smaller icons and reduced height, customization options for the Start menu (small and large layouts), and updates to Windows Search that enhance reliability by filtering out Microsoft Store and web suggestions. Additionally, Administrator protection is now available for elevated tasks using just-in-time privileges, which can be activated through Intune or Group Policy. Microsoft has officially retired the Windows Management Instrumentation Command-line (WMIC), which has been deprecated and absent in new installations of Windows 11 versions 24H2 and 25H2. Users are advised to use PowerShell as the preferred alternative.

Winsage

August 12, 2026

OneDrive Photos Lands on Windows 11 by Accident

A new application, OneDrive Photos, has started appearing on Windows 11 PCs since August 1, despite being incompatible with enterprise machines. Microsoft acknowledged that the rollout exceeded its intended scope and is working on a remedy. Users cannot remove the app without uninstalling OneDrive entirely. OneDrive Photos functions as a web app, scanning local photos without requiring a Microsoft account sign-in and offering features like search and albums. There is no separate uninstall option for the app; removing it necessitates uninstalling OneDrive, which also eliminates File Explorer integration. Microsoft plans to introduce separate removal controls in the future, and the app will be removed from unsupported Intune-managed PCs.

Winsage

August 9, 2026

Microsoft confirms it accidentally installed new OneDrive app on Windows 11 PCs, and there’s no easy way to remove it yet

Microsoft has unintentionally rolled out its AI-powered OneDrive Photos app on Windows 11, affecting enterprise PCs where it is non-functional. The app was initially limited to select consumer PCs but became widely available starting August 1, 2026. Microsoft confirmed that this rollout was not intended and is working on a solution to allow users to remove OneDrive Photos independently from the OneDrive sync client. Currently, the app cannot be uninstalled without removing OneDrive entirely. OneDrive Photos serves as a centralized hub for viewing images stored locally and in the cloud, integrating with OneDrive.com’s Gallery. It appears in search results above the traditional Microsoft Photos app, even on systems not part of the Windows Insider Program. IT administrators have expressed frustration over its unexpected presence on enterprise PCs, as the app is designed for personal accounts.