Probably the best modern workplace architect in the world!
Probably the best modern workplace architect in the world!
Remember BIOS_passwords_FINAL_v3.xlsx from my DFCI post? It has a cousin in Active Directory. It is a GPO called something like WSUS Settings – DO NOT TOUCH, it is linked to the root of the domain, and the person who created…
In January I wrote the blog “Update Secure Boot Certificate by using Intune Remediation“. Four weeks later I had to publish “Update Secure Boot Certificate by using intune remediation Take 2“, because I had written the wrong status values and…
Six months ago I wrote a post called My NPU was mostly idle until I realized I could use it for real work by building an app myself (). I was proud of that little app. It ran a small…
In my recent post on DFCI I wrote about the spreadsheet called BIOS_passwords_FINAL_v3.xlsx. In a lot of Surface environments, that spreadsheet has a sibling in the same folder. It is called something like Surface_warranty_export_2024.xlsx. It was correct the day somebody…
Somewhere in almost every environment I walk into, there is a spreadsheet in Excel. It is called something like BIOS_passwords_FINAL_v3.xlsx, it lives in a folder that three people have access to, and at least one of those people left the…
For as long as I have worked with Windows management, the registry has been the place where the truth hides. Not the pretty truth you see in a portal, the real one, which build of that line-of-business app is actually…
Follow up to: Central Accept Of “Continue to Sign In” Dialog Deployed With Intune Back in June 2025 I wrote about the “Continue to sign in” dialog that hit all of us in the EEA, and how to get rid of…
I have received reports from multiple customers that observed a high load on Domain Controllers. So I needed to enhance the scripts to be lighter on the Domain Controllers. I also needed to find a good way to discover and…
Moving to Cloud-native Windows devices solves a lot of old problems, but it also removes some of the assumptions that classic IT automations relied on. Traditional logon scripts, Group Policy-driven mappings, and on-premises management patterns do not translate cleanly into…
What if your PowerShell script behaved like a real application?I have just updated my old wrapper so that it lets you package any PowerShell script (plus companion files) so it shows up in Settings → Apps → Installed apps, can…