Table of Contents
Introduction
Hello,
Spring has properly arrived in Sweden, and April has been a busy month for endpoint admins. Hotpatch is about to become the default for eligible devices, Cloud PCs now have a proper monitoring home in Intune, and the Secure Boot certificate deadline in June keeps getting closer.
Before the roundup, I want to share something I am involved in. In partnership with Recast Software, I am helping gather insights and trends on Intune. If you have five minutes, please take the survey and help shape the final report.
https://4skozc1y1jg.typeform.com/to/DGxJuVZ1
A few things worth calling out this period:
Managing Windows 365 Reserve (Microsoft Learn) Full management documentation is now published for Windows 365 Reserve, the short-term Cloud PC offering designed for business continuity scenarios like device failures and travel delays. Each licence gives one user up to 10 days of Cloud PC access per year, managed through Intune provisioning policies. Plan around the 7-day delay before a Cloud PC can first be provisioned after licence assignment. https://learn.microsoft.com/en-us/windows-365/enterprise/windows-365-reserve-manage
Hope you have a good week!
/Daniel
News from Microsoft
- Windows Backup for Organizations Overview Microsoft Learn
- Use the Latest TeamViewer Integration in Microsoft Intune Microsoft Learn
- Create Historical Reports Using Azure Log Analytics and Microsoft Intune Diagnostic Data Microsoft Community Hub
Intune updates from the community
- Working with the Automatic Enablement of Windows Hotpatch Security Updates Peter van der Woude @pvanderwoude
- Intune – Hotpatch Will Be Enabled by Default Benoit Hamet @benoit_hamet
- New Windows 11 25H2 Security Baseline Released in Microsoft Intune Anoop C Nair @anoopmannur
- Filter Intune App Policy Assignments Based on Domain Join Type Jitesh Kumar @jitesh8092
- Create Custom Dashboards, Alerts and 30-Day Compliance Trends Using MS Intune and Azure Log Analytics Anoop C Nair @anoopmannur
- How to Configure the Enrollment Status Page in Intune (And Fix It When It Breaks) Steve Weiner @getrubix
Windows updates from the community
- Windows Secure Boot Certificate Expiration: The Log Analytics Dashboard Damien Van Robaeys @syst_and_deploy
- With Secure Boot certificates expiring in June 2026, Damien has built a Log Analytics dashboard to monitor certificate deployment status across Intune-managed devices. If you are not tracking this at scale yet, now is the time.
Seen on X (Twitter)
Cloud PC Monitoring now in public preview IT admins can now monitor Cloud PC health, performance, and connection trends directly in the Intune admin center. A long-overdue improvement for Windows 365 visibility. @vaishnavk93 https://t.co/Kas6jIeAZ8
New “Manage Windows 365 Cloud PCs” navigation now generally available The Windows 365 section in the Intune admin center has been reorganised. The old path under Devices > Device Onboarding > Windows 365 is gone. Update your bookmarks and runbooks. @vaishnavk93 https://t.co/UCnmokpPmp
Apple Business Manager Terms of Service updated, action required Apple updated its Business Manager Terms of Service on April 14. Log into the Apple Business Manager portal and accept the new terms to keep Intune communicating with Apple. Do not put this one off. @ccmexec https://t.co/LdpcEIXJuz
Stop clicking through Intune profiles to find one setting Intune Explorer lets you search for where a specific setting lives rather than hunting through profiles. Worth a look if you spend time on day-to-day policy work. @getrubix https://t.co/vFOOKrod0f
Intune Patching & OS Compliance Dashboard now on GitHub A browser-based dashboard that ingests two CSV exports from Intune and produces views for patch compliance, Windows OS lifecycle posture, hotpatch readiness, and audit-ready exports. All processing happens locally in the browser. @Darren_Reevell https://t.co/M8OEPDy2yl