Defender version compliance with Intune proactive remediations
A field note on using Intune proactive remediations to detect Microsoft Defender version drift, trigger updates, and keep evidence.
Posts
Hunting Zombie Software: How I Automate the Removal of Unauthorized and EOS Apps
Shadow IT is the natural enemy of a clean software inventory. In my environment, users with legacy local admin rights used to install whatever they wanted—unapproved browsers, outdated image editors, and “handy” utilities. These apps quickly became an IT headache, especially when Microsoft Defender for Endpoint flagged them as End-of-Life (EOL) or End-of-Support (EOS). Instead of playing whack-a-mole with individual apps in the portal, I developed a workflow that starts with a deep hunt in Defender and ends with an automated “kill” via Intune. ...
Windows 11 Upgrade Control Plan: Shift from User-Centric to Device-Centric Servicing
A practical four-lane Windows 11 control plan that fixes mixed upgrade failures by moving servicing assignments from user groups to device groups.
Create Debloated Windows 11 ISO + Intune Win32 Cleanup for Resets
How we standardized reset outcomes with one custom ISO for USB resets and one Win32 cleanup app for stock Windows reset paths.
Move Microsoft 365 Apps from Mixed Update Control to Cloud Update
Step-by-step migration from mixed Microsoft 365 Apps update control to a single Cloud Update authority.