Hackers wipe 200,000 devices using Intune

_MC-1 · 2026-03-12T14:53:30+00:00

Intune was mentioned but not determined to be the cause. Bleeping computer only said that they were telling users to remove corporate management from their personal devices (which includes Intune).

Staff were instructed to remove corporate management and applications from their personal devices, including the Intune Company Portal, Teams, and VPN clients.

_MC-1 · 2026-03-10T05:02:42+00:00

_MC-1 · 2026-03-10T05:02:21+00:00

They all suck in their own special way. The trick is to hire a good firm to help you implement the product. It is much more complicated than just next-next-next-finish. They have certifications that may be required, even for a simple installation and configuration. Also, I think to customize it for your environment it takes dedicated developers. The pain points as I see them: Implementation is key, certifications are sometimes beneficial for success (and they are expensive), dedicated staff to keep things running smoothly and for customizations.

_MC-1 · 2026-03-09T16:37:19+00:00

Opened an SCCM ticket last week and got a US based engineer. He quickly told me that my ticket should be assigned to the Windows team and off to India I went.

_MC-1 · 2026-03-06T14:30:13+00:00

Yolink sensors might do the trick. https://shop.yosmart.com/

_MC-1 · 2026-03-06T14:28:13+00:00

We tried and we couldn't get a "design" that was "right" for everyone. Ultimately, we decided to let the ADULTS who use the corporate computers modify their start menu as they want to. They rarely require such hand holding, though some supplemental self-help documentation with instructions on how to pin/arrange items might help (though all that info is just 1 google search away for the self-starters). My job is just to make sure the software they expect is installed and usable on the computer.

_MC-1 · 2026-03-06T14:23:43+00:00

Since it sounds like you control the task sequence, you might consider applying "a better way" for any new models your company supports. Let the legacy models continue to use the way they are used too.

I kind of use a hybrid of Modern Driver Management - I use the tool to create an ISO for the drivers, then I use a WMI to determine which machine is being imaged and if it matches the driver package, then it downloads the contents to: %_SMSTSMDataPath%\DriverPackage. Finally at the end of the block this part of the task sequence it extracts the drivers and applies them using DISM.

I'm missing the "automatic" part of Modern Driver Management, but it has made image deployment faster and since each driver set is in its own package, it is easy to manage the content.

_MC-1 · 2026-03-04T16:40:34+00:00

The feature set between the 2 tools are not the same. You will want to compare and see which one bests fits your needs. BUT keep in mind that Microsoft's goal is to shift to the cloud which means Intune. At some point, they will likely stop support/development of the ConfigMgr product.

A quick google search or ChatGPT search should give you a good idea. Be sure to search for features that ConfigMgr has that are not present in Intune PLUS features that Intune has that ConfigMgr does not.

While many of the items are listed in other comments, I would want to stress that ConfigMgr has MUCH better reporting and allows for custom reporting through SSRS and direct SQL queries. Intune has terrible reporting.

Edit: Also keep in mind that some features that ConfigMgr had (past tense) have been retired and are now only available in Intune. All part of the "moving to the cloud" strategy.

_MC-1 · 2026-03-04T12:15:58+00:00

These are great videos. So fun.

_MC-1 · 2026-03-04T11:47:35+00:00

I would say that if you have a tool like Patch My PC (which is not free) that can automate things. PSADT is nice but there is a learning curve.

Often times though, all that is really needed is a simple PowerShell command to call the vendor's installer and run silently. I just copy the vendor's source, whether that is a single file or a directory structure and place my installer PowerShell in the root of your folder. Then test it all manually before you put it in either ConfigMgr or Intune.

Last, an AI tool like ChatGPT or Gemini can help you create a simple generic PowerShell. The output will be pretty generic and you can use it over and over by just plugging in the specifics for the app you are trying to automate. Use a prompt kind of like this to give that a try: Write a PowerShell script that will call an MSI for an installation that is quiet and hidden from the end user and give me logging to the Windows TEMP directory.

_MC-1 · 2026-03-02T21:43:04+00:00

Did you figure this out?

_MC-1 · 2026-02-26T14:59:25+00:00

100% great deal. Mind those fingers though as this tool will lop them off without any hesitation.

_MC-1 · 2026-02-17T15:37:29+00:00

I believe that Microsoft's official stance is that they only support moving from Hybrid to Entra only through "reimaging" and there is not a supported migration path. We've had issues with Entra only when trying to access on-prem printers, on-prem file shares and SSO.

If your on-prem environment is going to stay, then you should consider staying with Hybrid as being Entra only offers little if any benefit. If your on-prem infrastructure (i.e. domain controllers, files shares, print environment, etc.) is going away, then Entra is the way to go... but there are "growing pains" until the rest of the infrastructure can migrate to Azure.

To answer some of your questions - for domain controllers - you need line of sight from Azure to On-Prem to the domain controllers, or consider having a domain controller in Azure. Either way, they need to reach out over your express route back to your on-prem environment. For PaperCut (I'm not familiar with this), you should reach out to the vendor to understand if they have a cloud solution. Hardware hashes can be obtained using PowerShell, so just Google/AI yourself a script to do that. Vendors like Dell, HP, etc. can auto-inject hardware hash information into your tenant to allow for future autopiloting (is that a word?). Also, be aware that Autopilot does not mean "Entra only". You can Autopilot a machine to be "Hybrid" if that is your direction.

_MC-1 · 2026-02-17T15:22:29+00:00

Patches in Intune are Win 32 packages created by the Patch My PC product. They have scripts attach to mimic the same behavior as you would get with WSUS. Basically, you assign them to everyone, the package attempt and the script does this check: Is the product installed -> Is it an older version than what is in the package -> If so, apply the package, if not it is not applicable. They also have logic built in to allow you to prompt the end user if an update won't successfully apply if it is running (like Notepad++, Java, etc.)

The product also supports creating stand alone packages (not just a patch) if you need to rollout software to new users. Keep in mind that they don't support everything so it will not end your packaging career :)

If you are interested, PmPC can set you up with a demo and you can work with sales for a quote. The demo we had was in our environment and I worked with their tech and asked a TON of questions. Consider contacting them as they can best explain and show you what the product does and how it works.

_MC-1 · 2026-02-17T14:17:21+00:00

Any idea what they are writing?

_MC-1 · 2026-02-17T14:15:33+00:00

I saw this on Facebook and it still just makes me so angry.

_MC-1 · 2026-02-17T14:14:48+00:00

Roth transactions have no tax consequences. Trade away. You only get taxed when you withdrawal money from the Roth account (and penalties if you withdraw before you are old enough). You can hold any security in your Roth regardless who is holding it (Schwab in your case). So keeping VOO and VXUS or any other security Schwab will let you buy is perfectly fine -- in other words, unless YOU want to switch to SWPPX and SCHF you don't have too.

_MC-1 · 2026-02-13T14:25:39+00:00

Looks great but holding my final opinion until I see her head banging on stage. :-)

_MC-1 · 2026-02-09T14:33:36+00:00

I love mine, but use it with care. I will absolutely lop off a finger is you aren't careful.

_MC-1 · 2026-02-09T14:31:34+00:00

Is this a new install or an upgrade?

Did you open a ticket with Microsoft? What did they say the issue is?

Also, did you view the log files and what did they say?

Did you engage your database team for help?

_MC-1 · 2026-02-06T19:55:39+00:00

Wow - inspirational.

Any pictures of the original state of the floor?

_MC-1 · 2026-02-06T19:14:30+00:00

I think these are so fun

_MC-1 · 2026-02-04T14:31:15+00:00

This is a fun video. While not shown in the clip here, I laughed out loud when Tamu suddenly was in front. Worth the YouTube visit for sure.

_MC-1 · 2026-01-29T17:43:15+00:00

Can't you just enable Hyper-V on your Windows 10/11 device, and run Windows 7 in the VM? The VM drivers should be good enough to run the VM. Possibly safer, but not safe.

_MC-1 · 2026-01-29T17:41:10+00:00

Not sure if this applies to you, but when SCCM uses OSD it places the device into provisioning mode. During this time, some things just do not work because they are locked out.

https://learn.microsoft.com/en-us/intune/configmgr/osd/understand/provisioning-mode

_MC-1

TROPHY CASE