👋 Lokka Guardrails is a new feature coming to the MCP server 🙏 This puts you in control of what the AI can do. The problem with Graph permission scopes is they are too broad. Now you can apply more precision to what is allowed even if it has a token with all the perms. 1/2

Thanks for joining us today in the Mastering Intune course with @jarwidmark and @AndrewJNet - fantastic!

Spend a huge amount of time to come up with a new way to debug when things go wrong in your environment. Brand new version of Intune debug toolkit coming soon! #MSIntune #IntuneDebugToolkit

Folks, I just released Lokka 2.0 today! The world's first Microsoft Graph MCP server is now a full blown MCP App. First up multi-tenant support. You can now sign into more than one tenant. What does it mean? 1/16

Incident is real and being worked on. Will follow up here with updates.

💥NEXT WEEK! Microsoft is updating the #SecureBoot certificates — Check out this #ViaMonstraMiniCourse JUNE 18, 9:00 - 10:30AM CDT 💻 SECURE BOOT 2026 - WHAT BREAKS AND HOW TO FIX IT with @jarwidmark and @AndrewJNet 👨‍💻 If you manage Windows endpoints, servers, or imaging infrastructure, you need to understand what these changes mean in practice. #ViaMonstraAcademy Sign up ➡️ ow.ly/GlYK50ZayOq This LIVE Online Training is for YOU if you want to: ✅Understand what is changing in Secure Boot in 2026 ✅Identify what can break in deployments and recovery scenarios ✅Learn how DB and DBX updates impact imaging and boot media ✅Build detection and monitoring strategies for certificate rollout ✅Ask Johan and Andrew questions directly in a live training environment

Everyone's favourite Microsoft Graph MCP is getting a huge update today. You will now be able to get Graph Explorer embedded in the MCP. Shows results as table, change filter and other parameters, open full screen and more! @UgurKocDe and I will be digging into this in tomorrow's one-off live stream event. Register and join us live on X or on YouTube youtube.com/live/7Ye22J-MMY8…

6/10/26 ViaMonstra Academy - Updates and Q&A for ConfigMgr / OSD / Intune x.com/i/broadcasts/1qKVmmzdX…

👋 Folks, @UgurKocDe and I will be live streaming in a few days with some cool hands and practical demos. We’ll chat about how AI is changing the way admins work, build, troubleshoot, and automate across Microsoft 365. I'll be showing how I'm running openadminos.com with a local LLM, while Ugur will share how he uses tools like lokka.dev and graph.pm when working with Microsoft Graph. Expect a casual, hands-on conversation about what’s possible today, what’s coming next, and why small language models running on your own hardware could be a big part of the future for IT admins. youtube.com/watch?v=7Ye22J-M…

⚡IN TWO WEEKS! Deploy Windows using the #DeployR platform from 2Pint Software! #ViaMonstraMasterclasses JUNE 22-25 🕘 9:00AM - 4:30PM CDT 💻 MASTERING DEPLOYR with @jarwidmark 👨‍💻 Acquire the knowledge and real-world skills needed to implement DeployR in production environments and build a reliable, scalable OS deployment platform 🚀 #ViaMonstraAcademy Enroll ➡️ ow.ly/4tbL50Z9rqv This LIVE Online Training is for YOU if you want to: ✅Learn how to deploy Windows using the DeployR platform ✅Implement a modern OS deployment architecture ✅Replace traditional MDT or ConfigMgr OSD deployments ✅Improve deployment speed and network efficiency ✅Automate provisioning workflows using DeployR ✅Troubleshoot and optimize deployment environments ...and so much more! *These Masterclasses are offered only twice a year! Get your spot!

🚨Reminder: If you don't provide a certificate, your #MCC (Connected Cache) will stop delivering content for Intune in a week. Starting June 16, content for Intune (and Teams) will only be downloaded to endpoints with a secured connection to the source. techcommunity.microsoft.com/…

The Microsoft Update Catalog site does not load anymore... worked a few minutes ago: catalog.update.microsoft.com…

⚡ Welcome @samilaiho to the #ViaMonstraAcademy team! Join us AUGUST 13-14 🕘 9:00AM - 4:30PM CDT 💻 MASTERING MICROSOFT APPLOCKER 👨‍💻 Go from “we tried #AppLocker” to actually controlling what runs in your environment 🚀 #Intune #ViaMonstraMasterclasses Enroll ➡️ ow.ly/iRZU50Z8BHA This LIVE Online Training is for YOU if you want to: ✅Control what actually runs on your endpoints ✅Move beyond antivirus and reactive security ✅Design AppLocker policies that work in production ✅Deploy and manage application control using Intune ✅Understand how AppLocker is bypassed and how to prevent it ✅Evaluate if, when, and how to move to App Control for Business/WDAC ✅Build a repeatable, scalable application control strategy ...and so much more! *These Masterclasses are offered only twice a year! Get your spot!

Today, we made a few huge announcements unveilings for @wpninjasus 📢 @UgurKocDe and @Mister_MDM are official as speakers for Scottsdale and will be delivering some very dynamic and unique sessions. Rudy specifically will be doing some stuff he hasn't done before. 💁 A new outdoor pavilion has been opened up for 4 more sponsors (as we're full at the moment), that comes with a gold booth minus the sponsored session in a high traffic/very impactful area. 📎 The new #Clippy trophy has been unveiled for the hackathon, which is bigger and better than last year. 🆘 Rest of the speakers will be announced at end of this month. Do not miss out while the early bird is still available. Register now: workplaceninjas.us/registrat… Check out the entire video here: youtu.be/RFLSg7xahu0 #WPNinjaS #WPNinjaSUS #Community #SysAdmin #ITConference #MDX #ConfigMgr #Copilot #MSSecurity #MSEntra #MVPBuzz

Shouldn't affect them. Platform scripts and Remediations both execute through the Intune Management Extension, so they aren't governed by the LocalMachine execution policy W365 is moving to RemoteSigned. If 'Enforce script signature check' is off, IME runs the script with Bypass, which sits above LocalMachine in scope precedence and ignores it. If it's on, the script already had to be signed by a cert in Trusted Publishers, so RemoteSigned adds nothing new. The actual gotcha is precedence: MachinePolicy and UserPolicy override LocalMachine. If AllSigned gets pushed at MachinePolicy via Intune or GPO, that overrides the new default and is what fails provisioning, resize, and restore. That's the thing worth auditing.

📢 From July 1, Remote Help is included in M365 E3/E5. I updated my PowerShell script to create four least-privilege custom RBAC roles groups in seconds. It now includes -AssignRoles to assign roles to groups automatically, plus full Multi Admin Approval (MAA) support. imab.dk/remote-help-is-inclu… #MicrosoftIntune #MSIntune #RemoteHelp #PowerShell

Recently I have been hearing rumblings regarding Company Portal not installing during the ESP when previously it used to. A quick Google search reveals that this issue seems to occur more frequently than it ought to. Most recently something in the May 12th patch caused Company Portal to fail during the ESP. So, naturally I built a solution utilizing Intune remediations and I blogged about it. This ought to come in handy: Shout out to @okieselb who didn't know it, but he inspired this work. Cheers! medium.com/@markhunterorr/co…

New Update | Microsoft released #ConfigMgr hotfix KB37942646 for Cloud Management Gateway (CMG) VM scale set, resolving issues with deprecated Windows Server 2022 Azure images featuring .NET 6. prajwaldesai.com/configurati…

Yep, black on black was my Ninja mode. Then @jarwidmark proposed that we add the default error action to be a reboot. This is how I teach my kids👍🏆

Here we go. 😳