Security on Paul Clephan | Intune, ConfigMgr, SCCM & Windows Management Bloghttps://clefsoft.co.uk/tags/security/Recent content in Security on Paul Clephan | Intune, ConfigMgr, SCCM & Windows Management BlogHugoen-gbTue, 04 Aug 2026 00:00:00 +0000PowerShell Execution Policy Hardening for Cloud PC Provisioning: What Admins Need to Knowhttps://clefsoft.co.uk/news/powershell-execution-policy-hardening-for-cloud-pc-provisioning/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/powershell-execution-policy-hardening-for-cloud-pc-provisioning/Microsoft is tightening PowerShell execution policy during Cloud PC provisioning, requiring downloaded scripts to be digitally signed. Here’s what it means.Cloud PC Provisioning Now Sets PowerShell to RemoteSignedhttps://clefsoft.co.uk/news/windows-365-powershell-execution-policy/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/windows-365-powershell-execution-policy/Windows 365 now sets the machine-scope execution policy to RemoteSigned during provisioning. Good for security — but if you enforce AllSigned via Intune or GPO, provisioning can fail, and here’s why.Windows Quality Updates During Autopilot, Out of the Boxhttps://clefsoft.co.uk/news/autopilot-quality-updates-in-oobe/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/autopilot-quality-updates-in-oobe/Device Preparation can install the monthly security update during OOBE so devices hand over already patched — at the cost of 20-40 minutes and a restart you can’t turn off.