Defender version compliance with Intune proactive remediations
A field note on using Intune proactive remediations to detect Microsoft Defender version drift, trigger updates, and keep evidence.
Powershell
Hunting Zombie Software: How I Automate the Removal of Unauthorized and EOS Apps
Shadow IT is the natural enemy of a clean software inventory. In my environment, users with legacy local admin rights used to install whatever they wanted—unapproved browsers, outdated image editors, and “handy” utilities. These apps quickly became an IT headache, especially when Microsoft Defender for Endpoint flagged them as End-of-Life (EOL) or End-of-Support (EOS). Instead of playing whack-a-mole with individual apps in the portal, I developed a workflow that starts with a deep hunt in Defender and ends with an automated “kill” via Intune. ...
Create Debloated Windows 11 ISO + Intune Win32 Cleanup for Resets
How we standardized reset outcomes with one custom ISO for USB resets and one Win32 cleanup app for stock Windows reset paths.
Removing Firefox at Scale: My Intune Proactive Remediation Approach
How I clean up unauthorized Firefox installations across my organization using Intune remediations and Defender KQL.
Auto-Update Firefox with Intune Proactive Remediation
Use Intune proactive remediation to keep Firefox updated by checking versions and auto-installing updates.