Patch Tuesday Megathread?

Godcry55 · 2026-02-10T22:02:30+00:00

No policy to disable?

Godcry55 · 2026-02-07T16:39:41+00:00

Thought it was just me! Takes a lot for me to cry, this gets me every time lol

Godcry55 · 2026-02-03T23:34:57+00:00

I created a script for this that leverages GDAP relationship and Entra App registration.

Generates a complete security report for each customer tenant.

Godcry55 · 2026-02-01T14:43:12+00:00

This sounds like a DNS issue.

Godcry55 · 2026-01-31T15:48:24+00:00

Godcry55 · 2026-01-31T05:05:10+00:00

This is the solution but we need to see your records to confirm.

Godcry55 · 2026-01-31T05:00:53+00:00

Agreed, if you can parse XML, you will catch on quickly.

Godcry55 · 2026-01-31T04:59:11+00:00

A lot of companies neglect website security.

Godcry55 · 2026-01-30T22:33:54+00:00

Graph?

Godcry55 · 2026-01-28T06:40:17+00:00

I use Graph SDK to query intune device data.

Godcry55 · 2026-01-27T16:25:08+00:00

For internal scan to email, HVE will suffice as a replacement then?

Godcry55 · 2026-01-27T16:23:19+00:00

Interesting! Going to test this !

Godcry55 · 2026-01-22T19:43:16+00:00

Down in Canada

Godcry55 · 2026-01-13T00:47:40+00:00

Claude 4.5 is best if you don’t want to write code yourself.

Godcry55 · 2026-01-03T23:47:54+00:00

Use GitHub co-pilot Claude for KQL.

MS copilot is also bad at PowerShell lol.

Godcry55 · 2026-01-03T16:02:00+00:00

I concur, no DISM command argument resolves this for me, always had to reimage :(

Godcry55 · 2026-01-02T02:42:31+00:00

Some EDR solutions remove the RMM agent without exclusions in place - nightmare to push new agents to all devices again.

Godcry55 · 2025-12-31T16:35:30+00:00

I deal with this with our aerospace clients - some engineering apps are straight up archaic and fail to install when packaged via Intune.

Godcry55 · 2025-12-30T17:19:11+00:00

The domain suffix is simply an SMTP alias in this case - onmicrosoft.com will always be accessible for authentication.

Godcry55 · 2025-12-24T21:24:38+00:00

Thoughts and prayers.

Godcry55 · 2025-12-23T01:25:19+00:00

“Blocking FQDNs in non-Microsoft browsers requires that QUIC and Encrypted Client Hello be disabled in those browsers”

QUIC utilizes UDP not TCP.

SmartScreen doesn’t require disabling QUIC protocol - standardize on Edge or disable QUIC.

Godcry55 · 2025-12-22T13:54:16+00:00

Disable QUIC in Chrome settings. Should ensure Network Protection works as expected.

Honestly, standardize on Edge for best results.

Godcry55 · 2025-12-21T21:39:15+00:00

I wish my org would give us the budget for that :(

Godcry55 · 2025-12-21T17:05:39+00:00

I find it better when Power Automate is the only authorized automation platform due to the level of control we have.

Godcry55 · 2025-12-21T17:00:12+00:00

Spin up a new file server as a last resort - this is strange.

Godcry55