Table of Contents
Introduction
Hello,
Still a lot going on around Secure Boot and security in general. Here in Sweden, it is still very much winter. Dark mornings, cold air, and a lot of salt on the sidewalks, but I am looking forward to spring showing up again soon.
A few things worth calling out this period:
- Monitoring Secure Boot certificate status with Microsoft Intune remediations (Microsoft Support)
Microsoft published a Proactive Remediation focused on monitoring Secure Boot certificate update status and reporting it back in Intune, which is useful as we move closer to the June 2026 deadline.
https://support.microsoft.com/en-gb/topic/monitoring-secure-boot-certificate-status-with-microsoft-intune-remediations-6696a27b-fa09-4570-b112-124965adc87f
- June 2026: Secure Boot Certificates are expiring – Help is on the way (Mindcore / Michael Morten Sonne)
A clear breakdown of what’s expiring, what the updated certificates mean, and a practical rollout approach (inventory, firmware readiness, BitLocker considerations, and controlled rings).
https://blog.mindcore.dk/2026/02/windows-secure-boot-certificate-expiration-2026/
- CVE-2026-20841 — Windows Notepad App Remote Code Execution (Microsoft Security Update Guide)
Notepad has a vulnerability that can lead to code execution in the user context (user interaction required). Make sure your update cadence covers the Notepad app updates as well as OS monthly updates where relevant.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841
- CISA flags critical Microsoft SCCM/ConfigMgr flaw as exploited in attacks (Sergiu Gatlan)
CVE-2024-43468 (SQL injection → unauthenticated RCE with high privileges) has been flagged as exploited in the wild, so ConfigMgr environments should treat patching and mitigation as urgent hygiene.
https://www.bleepingcomputer.com/news/security/cisa-flags-microsoft-configmgr-rce-flaw-as-exploited-in-attacks/
- Intune MDM Certificate Renewal Failure: The Hidden UPN Issue (Rudy Ooms)
Great troubleshooting write-up: an outdated UPN stored on the device can silently block MDM certificate renewal and surface as confusing “renewal” or “license” style errors.
https://patchmypc.com/blog/intune-mdm-device-certificate-renewal-upn-issue/
- More information about Windows 11, version 26H1 (Windows IT Pro Blog)
Microsoft clarified that 26H1 is intended for new devices with select new silicon in early 2026 and is not an in-place update path from 24H2/25H2 — so it should not change current rollout plans.
https://techcommunity.microsoft.com/blog/windows-itpro-blog/what-to-know-about-windows-11-version-26h1/4491941
I hope you have a good week!
/Daniel
Intune updates from the community
- How to use PowerShell Scripts as App Installers – YouTube – Steve Weiner (@getrubix)
- M365 Business Premium Part 8: Anatomy of a Failed Enrollment – Tracing an ESP Error from Screen to Root Cause :: HalfOnCloud – Radu Bogdan (@HeyRadu)
- How To Configure New Windows App Settings For Windows 365 Using Intune HTMD Blog – Vaishnav K (@vaishnavk93)
- Automatically Enroll Windows 365 Business Cloud PCs In Intune » Prajwal Desai (@PrajwalDesai)
- What’s New for Android Enterprise in Microsoft Intune 2601: January Highlights – nickydewestelinck.be – Nicky De Westelinck (@NDeWestelinck)
- Getting the Most Out of Android Enterprise: Combining Managed Home Screen and OEMConfig in Microsoft Intune – Nicky De Westelinck (@NDeWestelinck)
- Pinning a Custom URL to the Windows Taskbar via Intune :: HalfOnCloud – Radu Bogdan (@HeyRadu)
Other updates from the community
- All about Microsoft Intune | Being careful with the ability to configure the preferred Entra tenant domain name – Peter van der Woude (@pvanderwoude)
Windows updates from the community
- Easy Way To Update New Multi-Region Selection In Windows 365 HTMD Blog – Vaishnav K (@vaishnavk93)
- All about Microsoft Intune | Getting started with point-in-time restore in Windows – Peter van der Woude (@pvanderwoude)