Endpoint Management Bi-Weekly – September 22 – October 12, 2025

Introduction

Hello! 

You may have noticed that the newsletter skipped a week. I had some professional obligations that needed attention. But as always, no content has been lost. This edition covers three weeks of updates from the world of endpoint management, and there’s plenty to catch up on. 

The headline news is that Windows 11, version 25H2 is now generally available. It’s delivered as an enablement package over 24H2, meaning a smooth and lightweight upgrade for existing installations. For IT pros, some of the highlights include: 

• A new support lifecycle (24 months for Home/Pro, 36 months for Enterprise/Education) 
• The ability to remove select preinstalled Microsoft Store apps on Enterprise/Education devices via Group Policy or Intune
• The retirement of legacy components like PowerShell 2.0 and WMIC
• UI refinements and continued improvements to the Settings app
• Deeper AI and Copilot integration for Copilot+ PCs 

A smaller but important release overall, focused more on stability, lifecycle, and manageability than on major UI shifts. 

On my side, I’ve been diving into Copilot AI agents lately, exploring how they can support endpoint automation scenarios. If you haven’t checked them out yet, Microsoft Learn has some great badges and exercises to get started. 

Have a great week, and I’ll talk to you again in two weeks! 

/Daniel 

Product updates from Microsoft

• What’s new in Windows 365 Enterprise | Microsoft Learn 
• Azure Virtual Desktop identities and authentication – Azure – Azure Virtual Desktop | Microsoft Learn 
• Welcome to Microsoft eCDN | Microsoft Learn 
• Support Center OneTrace – Configuration Manager | Microsoft Learn 
• Microsoft Intune Advanced Analytics in action: Real-world scenarios for IT teams | Microsoft Community Hub 
• Security Review for Microsoft Edge version 141 | Microsoft Community Hub 
• Windows news you can use: September 2025 – Windows IT Pro Blog 
• Support tip: Upcoming Microsoft Intune network changes | Microsoft Community Hub 

Intune updates from the community

• Simple Way To Enable Boot To Cloud PC Enhanced Mode Using Intune HTMD Blog – Vaishnav K (@vaishnavk93) 
• Using remediation scripts in Intune to grab Windows 365 health check logs | just another windows noob ? – Niall C. Brady (@ncbrady)
• The Android Tales: A Full Comprehensive Guide on Managing Android devices with Microsoft Intune – Nicky De Westelinck (@NDeWestelinck) 
• How to manage the new Microsoft 365 companion apps rolling out to Windows 11 – imab.dk – Martin Bengtsson (@mwbengtsson) 
• Managing Microsoft 365: Stop Unwanted Microsoft 365 Companions App Installation – Nicky De Westelinck (@NDeWestelinck)
• Blocking SSH binaries with AppLocker and Port 22 in Windows Firewall Using Microsoft Intune – imab.dk – Martin Bengtsson (@mwbengtsson) 
• Remove Pre-Installed Microsoft Store Apps Via Intune – Jatin Makhija (@jatmak01)
• All about Microsoft Intune | Using offline mode and app access without signing in on Android Enterprise dedicated devices – Peter van der Woude (@pvanderwoude) 
• OneNote Migration with Intune | Move from OneNote for Windows 10 to OneNote 365 – Chander Mani Pandey (@Mani_CMPandey) 
• How To Set Up Multi Admin Approval For Three New Device Actions In Intune HTMD Blog – Vaishnav K (@vaishnavk93)
• What’s New in Microsoft Intune – September 2025 – Rabia Noureen (@RabiaNoureen11) 
• Enable Autopilot Reset Credential Provider Visibility Policy In Windows To Manage Device Refresh Using Intune HTMD Blog – Anoop C Nair (@anoopmannur)
• All about Microsoft Intune | Easily getting started with Intune Management Extension as managed installer – Peter van der Woude (@pvanderwoude) 
• Need the Intune Win32 app source files? – John Bryntze (@JohnBryntze) 
• Configure OneDrive Auto Sign-in using Microsoft Intune – ctrlaltnod (@ctrlaltnod)
• Configure ‘Allow logon locally’ automatically using PowerShell and Microsoft Intune – imab.dk – Martin Bengtsson (@mwbengtsson) 
• How To Enable RDP Multipath On Windows 365 Cloud PCs Using Intune PowerShell Script HTMD Blog – Vaishnav K (@vaishnavk93) 
• Intune Sync and Policy Delivery: Debunking the 8 Hour Myth – Rudy Ooms (@Mister_MDM)
• Configure App Control for Business in Intune » Prajwal Desai (@PrajwalDesai) 
• Intune Proactive Remediation – Remove Logged On User from Local Admin Group – Chander Mani Pandey (@Mani_CMPandey) 
• Cloud-Native Server Management with Azure Arc: Complementing Microsoft Intune – MSEndpointMgr – Anders Ahl (@andersahl)
• Intune : Custom Popup Notifications | Custom Alerts | Proactive Remediation – Chander Mani Pandey (@Mani_CMPandey)
• How To Schedule Windows Updates Every First Week Of Month Using Intune Policy HTMD Blog – Anoop C Nair (@anoopmannur) 

Windows updates from the community

• Windows 365 Cloud Apps — Publishing Apps (Part 2) | AskAresh – Aresh Sarkari (@askaresh)
• Windows 365 and the External Identity preview – using a guest account to access Cloud PCs – SCCMentor – Paul Winstanley (@SCCMentor) 
• What are Windows 365 Cloud Apps? – 4sysops (@4sysops)
• PowerShell is fun :)Windows 11 25H2’s removal of WMIC and the PowerShell alternative – Harm Veenstra (@HarmVeenstra)
• Windows 25H2: How to deploy, how to download, and how to prevent – Steve Weiner (@getrubix)
• Enroll Windows 10 in ESU (Extended Security Updates) | Free 1 Year ESU Support for Windows 10 22H2 – Chander Mani Pandey (@Mani_CMPandey)
• How to setup Windows 365 Cloud PCs for guest users – Steve Weiner (@getrubix)
• How healthy are your Windows 365 or Azure Virtual Desktop PC’s ? | just another windows noob ? – Niall C. Brady (@ncbrady)
• Windows 365 Cloud Apps – Provisioning Policy – PowerShell (Graph Rest API) – Part 1 | AskAresh – Windows 365 Cloud Apps — Publishing Apps (Part 2) | AskAresh – Aresh Sarkari (@askaresh) 

Other updates from the community

• Use Copilot with OneDrive files in Windows: Summarise, compare and ask questions – Super Simple 365 – Mark Thompson (@SuperSimple365) 
• LIVE-Learn the PSAppDeployToolkit v4 from its creators! – Dan Cunningham & Johan Arwidmark (@sintaxasn & @jarwidmark)
• Navigating NIS2 Quality Marks with Microsoft Security: From QM10 to QM30 – Jeroen Burgerhout (@BurgerhoutJ)
• Build AI Agents That Actually Do Things: PowerShell Function Calling in Action | Researching the optimal; implementing the practical – Doug Finke (@dfinke) 
• Is Copilot Worth $10,000/Month for Intune & Windows 365? – Neil McLoughlin (@virtualmanc)
• VSCode & Git on Everything during OSD! – GARYTOWN ConfigMgr Blog – Gary Blok (@gwblok) 

Seen on X (Twitter)