I Got Tired of Hand-Editing AppLocker XML, So I Built a GUI for It
Authoring AppLocker policy for Intune usually means either the Group Policy editor (which doesn’t understand Intune’s OMA-URI format) or …
All Articles
Real-world guides, troubleshooting and deployment solutions for Microsoft Endpoint Management.
9 articles published
A Blank Page for Every Anonymous User: How One Global Auth Policy Broke Blazor's Own Framework Endpoints
I added a public landing page to a Blazor Server app and it rendered as a blank white screen — not just that page, every page, for every anonymous user. No …
The Deploy That Was Secretly Broken: A Backslash in Your Zip Can Corrupt Every Release
az webapp deploy kept throwing rsync warnings I’d learned to ignore as noise. They weren’t noise — Compress-Archive was writing backslash paths into …
3 Microsoft Graph API Surprises That Will Bite Your Intune/M365 Tooling
Three bugs I hit building CET2, none of which showed up in the docs, and none of which threw the error you’d expect: a PowerShell type-coercion trap, a …
When cert-manager Says Your DNS-01 Record Hasn't Propagated (But It Has)
cert-manager sat on ’not yet propagated’ while the TXT record was demonstrably live. The catch: it checks propagation through the cluster’s …
Getting Defender for Endpoint onto Ubuntu 26.04 (When Microsoft Says It Can't)
MDE’s deployment tool installs fine on Ubuntu 26.04 — right up until a removed apt-key, a repo it clobbers itself, and a phantom ‘apt is busy’ …
Wiring Up GitHub Actions OIDC to Azure: Two Bugs No Guide Mentions
Federated credentials to Azure are supposed to be the easy, secure way to do CI/CD. They are — right up until the subject claim doesn’t match any …
Building an Autopilot Provisioning Screen: The Bugs You Only Find on a Real Device
I built a RealmJoin-style provisioning screen for Autopilot devices from scratch. Here’s what actually broke, and why almost none of it showed up until I …
Fixing Azure Static Web Apps Hugo builds failing with GLIBC errors
Oryx’s build container is too old for the Hugo version it downloads. The fix: build Hugo on the GitHub runner yourself and tell Azure to just upload the …