Tech Trends and Insights

Inlägg

Windows 11 Domain Trust Error After September 2026 Updates

- september 18, 2026

Windows 11 Domain Trust Error After September 2026 Updates Windows 11 Domain Trust Error After September 2026 Updates Identify and fix it with Microsoft Intune After installing the September 2026 Windows 11 security updates, some domain-joined devices may lose their secure trust relationship with an on-premises Active Directory domain. Users may see: The trust relationship between this workstation and the primary domain failed. The user's credentials may be correct. The problem can instead be the computer's Secure Channel with Active Directory. Microsoft identified Machine Identity Isolation as the cause of this issue in affected environments. The September 8, 2026 security update causes Windows to begin honoring existing or policy-provisioned Machine Identity Isolation enforcement. Microsoft states that the feature is supported only when connected to domain controllers running at Windows Server 2025 Domain Functional Level (DFL) or later . ...

Windows 11 Compliance in Intune: Preparing for the Migration from Device Health Attestation (DHA) to Microsoft Azure Attestation(MAA)

- september 17, 2026

Microsoft Intune MAA Connectivity Validation Guide 🔐 Microsoft Intune MAA Connectivity Validation Guide This guide provides a practical method for validating network connectivity from a Windows 11 endpoint to the Microsoft Azure Attestation (MAA) endpoints used by Microsoft Intune. The objective is to determine whether DNS resolution, TCP 443 connectivity, HTTPS communication, proxy configuration and possible TLS inspection issues could prevent the endpoint from reaching the required MAA service. Executive Summary This guide validates the network path to the Microsoft Azure Attestation service. It is designed to help administrators distinguish a connectivity problem from a device health, Intune policy or compliance configuration problem. A successful test confirms that the tested endpoint can reach the MAA service over HTTPS. It does not by itself prove that a Windows Health Attestation session or Intune compliance evaluation has successfully comple...

Microsoft Intune Remote Help Unattended Support with Remote Sign-In - End-to-End Setup Guide

- augusti 26, 2026

Microsoft recently introduced Remote Help Unattended Support with Remote Sign-In , allowing IT administrators and helpdesk staff to remotely access Intune-managed Windows devices without requiring an end user to be present. This guide documents a complete lab-tested deployment , including setup, configuration, troubleshooting, and lessons learned during real-world testing. Disclaimer This guide is based on a manual proof-of-concept deployment . For production environments, Microsoft recommends deploying the required Azure Virtual Desktop components through Intune as Win32 applications. What is Remote Help Unattended Support? Traditional Remote Help requires a signed-in user to approve the support session. With Unattended Support with Remote Sign-In , administrators can: Connect to a managed Windows device when no user is present Sign in using their own credentials Work in a separate Windows session Perform maintenance after business hours Support kiosk devices, public computers, ...

Using Intune Registry Inventory for Security Hunting

- augusti 21, 2026

Introduction Microsoft recently introduced the ability to collect Windows Registry data using Device Inventory and the Properties Catalog in Intune. While most examples focus on application inventory and configuration validation, I wanted to explore a different use case. Many security-related events leave traces in the Windows registry. For example, enabling Remote Desktop, configuring a proxy server, or installing remote access software often results in registry changes that can be monitored. Traditionally, identifying these changes required PowerShell scripts, remote access tools, or dedicated security products. With Registry Inventory, administrators can collect selected security-related registry values directly from managed devices and review them centrally in Intune. This provides an additional layer of visibility without connecting to the endpoint. Why This Matters Security teams are often asked questions such as: Has Remote Desktop been enabled on any devices? Are users configur...

Using Intune Registry Inventory to Validate Windows Kiosk Devices

- augusti 18, 2026

Introduction Microsoft recently introduced the ability to collect Windows Registry data using Device Inventory and the Properties Catalog in Intune. While most examples focus on application-specific registry data, I wanted to explore a practical use case for Windows kiosk devices. In environments such as libraries, schools, and public-access workstations, kiosk devices often rely on specific registry settings for automatic sign-in and user experience configuration. When these settings change unexpectedly, troubleshooting can become time-consuming and often requires remote access, PowerShell scripts, or manual registry inspections. With Registry Inventory, administrators can now verify these settings directly from Intune and gain visibility into device configurations without connecting to the endpoint. Why This Matters One of the most common support issues for kiosk devices is that: Automatic sign-in stops working The wrong local account is configured A device is rebuilt incorrectly Reg...

Leta i den här bloggen