Table of Contents
Introduction
Hello,
Summer has properly arrived in Sweden. The evenings stay bright until who knows when, Midsummer is nearly here, and half the country is already mentally at the cabin debating how much pickled herring is too much. The endpoint world, naturally, did not get the memo about slowing down. Build, a hefty Patch Tuesday, and a couple of end of support milestones all showed up at once. So before you head off for the season, here is what is worth a look.
June Patch Tuesday and Secure Boot KB5094126 landed on June 9 for Windows 11 25H2 and 24H2, moving those versions to builds 26200.8655 and 26100.8655, with KB5093998 covering 23H2. Alongside the usual security fixes, this update widens the automatic Secure Boot certificate rollout. Windows now uses higher confidence device targeting data to decide which machines are ready for the new certificates, then expands coverage from there. With the 2011 era certificates starting to expire this month, it is worth confirming where your fleet actually stands rather than assuming every device is covered. https://support.microsoft.com/en-us/topic/june-9-2026-kb5094126-os-builds-26200-8655-and-26100-8655-1a9bcba6-5f53-4075-8156-fe11ac631737
MDOP is now out of support The Microsoft Desktop Optimization Pack has reached end of support. If you are still leaning on tools like MBAM, App-V, or UE-V, Microsoft has published guidance on what to move to within Intune and what your options are. Worth planning the migration now rather than finding a gap later. https://techcommunity.microsoft.com/blog/IntuneCustomerSuccess/mdop-is-out-of-support-what-to-do-next-with-microsoft-intune/4526024
ConfigMgr 2409 reached end of life on June 6 If you are still running Configuration Manager 2409, support has ended, so moving to a supported version should climb your list. Thanks to Mike Terrill for the heads-up. https://learn.microsoft.com/en-us/intune/configmgr/core/servers/manage/current-branch-versions-supported
Hope you have a good week.
/Daniel
Intune updates from the community
Hiding the recommended section from the Start layout and multi-app kiosk mode Peter van der Woude @pvanderwoude
Autopilot pre-provisioning with current drivers, firmware, and BIOS using the Lenovo LCU module Philip Jorgensen @Jorgeasaurus
Modern drive and printer mapping for cloud-native Windows with Intune and PowerShell T-Bone
Analyse Intune diagnostics logs with GitHub Copilot Stefan Röll
ConfigMgr updates from the community
cmtrace.dev, a browser-based CMTrace log viewer (fully client-side, nothing uploaded) Florian Salzmann and Jannik Reinhard
Windows updates from the community
Reducing NTLM dependency: IAKerb and LocalKDC in Windows Insider Preview Mariam Gewida
Windows 365 updates from the community
Made for developers and agents: Windows 365 at Build 2026 Bhavya Chopra
Adaptive data protection with context-based redirections in Windows 365, now in public preview Derek Su
Migrate almost any Azure VM into a Windows 365 Cloud PC using Microsoft Graph Andrei Shchetkin
Project Opal: computer-using agents powered by Windows 365 Niklas Tinner @NiklasTinner
Other updates from the community
WWDC26: news on Mac management Simon Hartmann Eriksen @Sim0nEriksen
Cyber Essentials vs CIS vs Zero Trust: where should UK SMEs start with cyber security? Andy Jones