https://clefsoft.co.uk/news/Recent content in News on Paul Clephan | Intune, ConfigMgr, SCCM & Windows Management BlogHugoen-gbWed, 02 Sep 2026 00:00:00 +0000https://clefsoft.co.uk/news/automatic-app-installation/Wed, 02 Sep 2026 00:00:00 +0000https://clefsoft.co.uk/news/automatic-app-installation/How Automatic App Installation lets IT admins push apps and scripts to devices before a user logs in, cutting first-day downtime and setup errors.https://clefsoft.co.uk/news/declarative-device-management-for-apple-volume-purchase-program-apps/Wed, 02 Sep 2026 00:00:00 +0000https://clefsoft.co.uk/news/declarative-device-management-for-apple-volume-purchase-program-apps/Intune now supports Declarative Device Management for required Apple VPP apps on iOS/iPadOS 17.2+ and macOS 26+. Here’s what admins need to know.https://clefsoft.co.uk/news/python-editing-in-excel/Wed, 02 Sep 2026 00:00:00 +0000https://clefsoft.co.uk/news/python-editing-in-excel/Excel now supports editing and running Python code in-app. Here’s how to enable it, best practices for rollout, and common issues to watch for.https://clefsoft.co.uk/news/device-association/Tue, 01 Sep 2026 00:00:00 +0000https://clefsoft.co.uk/news/device-association/A practical look at Device Association in Windows 11 - what it does, why it matters, how to enable it, and best practices for IT admins.https://clefsoft.co.uk/news/protected-apps-for-intune/Mon, 31 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/protected-apps-for-intune/Intune adds Notion, Superhuman Mail, and Calven to its protected apps list, letting admins apply app protection policies to more third-party apps.https://clefsoft.co.uk/news/device-association/Sun, 30 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/device-association/How device association lets IT admins bind Windows 11 hardware to their organisation before Intune enrollment, and why it strengthens security.https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability-for-incoming-trust-re/Sun, 30 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability-for-incoming-trust-re/Microsoft Entra Kerberos key rotation now handles incoming trust referral flows more reliably, improving hybrid authentication stability for admins.https://clefsoft.co.uk/news/new-updates-to-the-apple-settings-catalog/Sun, 30 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/new-updates-to-the-apple-settings-catalog/Intune’s Apple settings catalog gains new payloads, including App Settings and Web Content, with support for Apple OS 27 betas. Here’s what admins should know.https://clefsoft.co.uk/news/bulk-provisioning-and-deprovisioning-for-windows-365-reserve/Sun, 30 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/bulk-provisioning-and-deprovisioning-for-windows-365-reserve/Windows 365 Reserve now supports bulk provisioning and deprovisioning of up to 1,000 Cloud PCs per request, cutting admin effort during large-scale events.https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability-for-incoming-trust-re/Sat, 22 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability-for-incoming-trust-re/Microsoft Entra improves Kerberos key rotation reliability for incoming trust referral flows, reducing authentication disruptions in hybrid environments.https://clefsoft.co.uk/news/new-windows-app-azure-virtual-desktop-settings-in-the-windows-settings-catalog/Sat, 22 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/new-windows-app-azure-virtual-desktop-settings-in-the-windows-settings-catalog/New Windows App settings in the Windows settings catalog let admins control auto-updates, sign-out behaviour and desktop shortcuts.https://clefsoft.co.uk/news/screen-capture-protection/Sat, 22 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/screen-capture-protection/What Screen Capture Protection does, how it blocks screenshots and recordings in remote sessions, and what admins should check before enabling it.https://clefsoft.co.uk/news/screen-capture-protection/Fri, 21 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/screen-capture-protection/A practical look at Screen Capture Protection, the Windows feature that blocks screen capture of remote session content, and how admins turn it on.https://clefsoft.co.uk/news/new-windows-app-azure-virtual-desktop-settings-in-the-windows-settings-catalog/Tue, 18 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/new-windows-app-azure-virtual-desktop-settings-in-the-windows-settings-catalog/Microsoft added Windows App (Azure Virtual Desktop) settings to the Intune settings catalog, covering updates, First Run Experience and shortcuts.https://clefsoft.co.uk/news/samsung-knox-e-fota-integration-with-microsoft-intune/Tue, 18 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/samsung-knox-e-fota-integration-with-microsoft-intune/Intune now integrates with Samsung Knox E-FOTA so admins can manage firmware updates for corporate-owned Samsung devices from the Intune admin center.https://clefsoft.co.uk/news/automatic-mode-for-windows-365-general-availability/Sat, 15 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/automatic-mode-for-windows-365-general-availability/Automatic mode for Windows 365 is now generally available, streamlining Cloud PC device preparation and provisioning for IT admins.https://clefsoft.co.uk/news/modern-auto-reconnect/Fri, 14 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/modern-auto-reconnect/What Modern Auto-Reconnect does, how it restores sessions after brief network interruptions, and why IT admins should care about it.https://clefsoft.co.uk/news/screen-capture-protection-for-web-connections/Thu, 13 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/screen-capture-protection-for-web-connections/Microsoft is extending screen capture protection to web-based remote connections. Here’s what the feature blocks and how admins should approach it.https://clefsoft.co.uk/news/parallel-content-and-identity-crawl-improves-content-freshness/Wed, 12 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/parallel-content-and-identity-crawl-improves-content-freshness/Microsoft Copilot connectors now run content and identity crawls in parallel, so ingested data reaches users faster. What IT admins should know.https://clefsoft.co.uk/news/servicenow-knowledge-and-catalog-connectors-enforce-role-based-permissions/Wed, 12 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/servicenow-knowledge-and-catalog-connectors-enforce-role-based-permissions/Microsoft’s ServiceNow Knowledge and Catalog connectors now honour role-based permissions, giving admins tighter control over connector access.https://clefsoft.co.uk/news/windows-app-settings-in-the-windows-settings-catalog/Tue, 11 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/windows-app-settings-in-the-windows-settings-catalog/Configure Windows App options such as automatic updates and user logoff intervals using the Windows settings catalog in Microsoft Intune.https://clefsoft.co.uk/news/windows-365-cloud-apps-support-for-autopilot-device-preparation/Tue, 11 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/windows-365-cloud-apps-support-for-autopilot-device-preparation/Windows 365 Cloud Apps can now be provisioned with Autopilot device preparation, in public preview for Windows 365 Reserve customers.https://clefsoft.co.uk/news/onenote-redesign-overview-experience/Mon, 10 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/onenote-redesign-overview-experience/Microsoft has redesigned the OneNote Notebook Overview with a clearer layout and quicker access to common notebook actions. Here’s what changes for users.https://clefsoft.co.uk/news/rich-images-in-copilot-responses/Mon, 10 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/rich-images-in-copilot-responses/Microsoft Copilot can now surface rich images from files and meetings in its responses. Here’s what the change means for IT admins and end users.https://clefsoft.co.uk/news/use-of-managed-installer-policy-for-apps-during-windows-autopilot-device-prepara/Sat, 08 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/use-of-managed-installer-policy-for-apps-during-windows-autopilot-device-prepara/Windows Autopilot device preparation now honours managed installer policy for app installs, improving reliability for organisations using app control.https://clefsoft.co.uk/news/windows-11-25h2-support/Thu, 06 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/windows-11-25h2-support/Windows 11, version 25H2 is now supported for OS deployment and in-place upgrades, giving admins a supported path to the latest Windows 11 release.https://clefsoft.co.uk/news/automatic-installation-of-monthly-security-updates-during-windows-autopilot-devi/Wed, 05 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/automatic-installation-of-monthly-security-updates-during-windows-autopilot-devi/Microsoft has pushed the automatic install of monthly security updates during Windows Autopilot device preparation to 9 September 2025. What admins should do.https://clefsoft.co.uk/news/bring-your-own-device-byod-support-for-windows-client-using-entra-registration/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/bring-your-own-device-byod-support-for-windows-client-using-entra-registration/Windows BYOD via Microsoft Entra registration lets users reach corporate resources from personal PCs without domain join. What IT admins should review.https://clefsoft.co.uk/news/winpe-is-now-boundary-aware/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/winpe-is-now-boundary-aware/Configuration Manager 2509 makes Windows PE boundary-aware, changing how OSD task sequences evaluate boundaries and select content sources.https://clefsoft.co.uk/news/boot-images-can-be-automatically-updated-to-use-latest-windows-boot-loader/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/boot-images-can-be-automatically-updated-to-use-latest-windows-boot-loader/A new boot image option lets Configuration Manager use a Windows Boot Loader signed with Windows UEFI CA 2023. Here’s what it does and how to enable it.https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability/Microsoft Entra now validates Kerberos tickets against both primary and secondary keys, reducing authentication failures during key rotation.https://clefsoft.co.uk/news/powershell-execution-policy-hardening-for-cloud-pc-provisioning/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/powershell-execution-policy-hardening-for-cloud-pc-provisioning/Microsoft is tightening PowerShell execution policy during Cloud PC provisioning, requiring downloaded scripts to be digitally signed. Here’s what it means.https://clefsoft.co.uk/news/use-windows-autopilot-device-preparation-policies-in-automatic-flow-to-provision/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/use-windows-autopilot-device-preparation-policies-in-automatic-flow-to-provision/How to attach Autopilot device preparation policies to Cloud PC provisioning so apps, scripts and settings land before users sign in.https://clefsoft.co.uk/news/new-microsoft-edge-settings-in-the-windows-settings-catalog/Mon, 03 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/new-microsoft-edge-settings-in-the-windows-settings-catalog/Microsoft has refreshed the Edge administrative templates in the Windows settings catalog, giving admins new policies for permissions, search and features.https://clefsoft.co.uk/news/entra-authenticator-jailbreak-detection/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-authenticator-jailbreak-detection/Microsoft Authenticator now refuses to add or use work accounts on jailbroken or rooted devices — secure by default, no admin toggle, and no Intune enrolment required to get it.https://clefsoft.co.uk/news/windows-365-citrix-autopilot-device-prep/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/windows-365-citrix-autopilot-device-prep/Windows 365 Cloud PCs provisioned through Citrix can now use Autopilot Device Preparation, so the Citrix path finally gets the same ‘apps and scripts land before the user does’ guarantee as everything else.https://clefsoft.co.uk/news/autopilot-device-preparation-automatic-mode/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/autopilot-device-preparation-automatic-mode/Device Preparation’s automatic mode provisions Cloud PCs and shared devices with no user driving, and the app cap has quietly gone up to 25 — enough that timeouts are now your problem, not the limit’s.https://clefsoft.co.uk/news/windows-365-bulk-deprovision-grace-period/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/windows-365-bulk-deprovision-grace-period/You can now deprovision multiple Cloud PCs in the grace period at once, instead of waiting out seven days or clicking through them one at a time — a small admin quality-of-life fix that saves real money.https://clefsoft.co.uk/news/entra-byod-windows-registration/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-byod-windows-registration/Users can now reach internal apps from their own Windows machines via Entra registration and the Private Application traffic profile — no domain join, no full management, just registered-device trust.https://clefsoft.co.uk/news/windows-365-powershell-execution-policy/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/windows-365-powershell-execution-policy/Windows 365 now sets the machine-scope execution policy to RemoteSigned during provisioning. Good for security — but if you enforce AllSigned via Intune or GPO, provisioning can fail, and here’s why.https://clefsoft.co.uk/news/entra-conditional-access-for-agents/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-conditional-access-for-agents/AI agents that hold their own user accounts are now first-class Conditional Access targets — you can scope policy to them, apply agent risk, and require compliant devices for the ones running on managed endpoints.https://clefsoft.co.uk/news/configmgr-2509-boot-image-uefi-ca-2023/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/configmgr-2509-boot-image-uefi-ca-2023/A single checkbox in 2509 automates the Secure Boot / KB5025885 boot-loader mitigation for your boot images — but only on WDS-less PXE distribution points, which is the catch.https://clefsoft.co.uk/news/entra-domainless-saml-federation/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-domainless-saml-federation/External SAML federation no longer needs the user’s email domain to match a preconfigured IdP domain — which quietly kills a whole category of ‘why can’t this partner sign in’ tickets.https://clefsoft.co.uk/news/entra-kerberos-key-rotation-reliability/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-kerberos-key-rotation-reliability/Kerberos key rotation could break authentication when referral tickets were signed with a secondary key. Entra now validates against both keys during rollover — the kind of fix you only appreciate after it’s bitten you.https://clefsoft.co.uk/news/intune-compliance-policies-that-matter/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/intune-compliance-policies-that-matter/Compliance policy vs compliance policy settings, why ’not evaluated’ isn’t the same as ‘compliant’, and the Conditional Access gate that makes any of it worth doing.https://clefsoft.co.uk/news/autopilot-managed-installer-policy/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/autopilot-managed-installer-policy/Win32, Store and Enterprise App Catalog apps used to be skipped during device prep to dodge conflicts. Managed installer support means they now install in OOBE — properly, before first sign-in.https://clefsoft.co.uk/news/intune-samsung-knox-efota-firmware/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/intune-samsung-knox-efota-firmware/Intune can now schedule and enforce Samsung firmware updates through Knox E-FOTA — closing the one gap that always sat outside your patch story on corporate Android.https://clefsoft.co.uk/news/configmgr-service-connection-tool-logging/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/configmgr-service-connection-tool-logging/The Service Connection Tool in 2509 gets real logging, prerequisite checks that fail loudly, and a Connect step that stops before importing a half-downloaded update package — quiet fixes for offline updating.https://clefsoft.co.uk/news/m365-copilot-whats-new-roundup/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/m365-copilot-whats-new-roundup/A quick round-up of recent M365 Copilot changes worth an admin’s attention — responses now surface images inline, Copilot can list email attachments, and the OneNote Copilot overview got a rework.https://clefsoft.co.uk/news/autopilot-esp-timeouts/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/autopilot-esp-timeouts/The Enrolment Status Page times out for boring, fixable reasons — a blocking app that never lands, a device-vs-user phase mismatch, or a Win32 dependency chain that quietly stalls.https://clefsoft.co.uk/news/autopilot-quality-updates-in-oobe/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/autopilot-quality-updates-in-oobe/Device Preparation can install the monthly security update during OOBE so devices hand over already patched — at the cost of 20-40 minutes and a restart you can’t turn off.https://clefsoft.co.uk/news/configmgr-2509-winpe-boundary-aware/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/configmgr-2509-winpe-boundary-aware/From 2509, WinPE-based OSD needs a management point in the boot device’s boundary group — or the task sequence fails early with a ’no valid MP locations’ error. Your imaging VLAN is now the thing to check first.