I’ve decided to start this newsletter as a way to stay on top of what’s happening across Intune, Configuration Manager, Windows, and endpoint management in general, and share the things that are actually worth knowing.
Windows 11 has a new post-Patch-Tuesday problem
Microsoft added a confirmed issue to Windows 11 release health on September 11: some USB Audio Class 1.0 devices can fail after installing the September 8 update.
Symptoms include Code 10 in Device Manager, no audio, unresponsive volume controls, and failures when using multichannel audio. Microsoft says the issue affects Windows 11 24H2, 25H2, and 26H1 and is working on a resolution.
Windows 11 24H2 known issues — Microsoft Learn
Client-driven compliance is more interesting than the announcement made it sound
Rudy Ooms dug into Microsoft’s new client-driven compliance evaluation and went looking at what is actually happening inside the Intune Management Extension.
The IME has a ComplianceMonitor component that watches local state such as Defender, Firewall, BitLocker, Secure Boot, TPM and OS build. When monitored state changes, it can trigger another MDM check-in rather than waiting for the normal compliance evaluation cycle.
Rudy also found that Microsoft can roll the feature out in stages, with the monitor running while the actual check-in trigger is still operating in simulation mode.
This is a much better read than the usual feature announcement because it gives you an idea of what the client is actually doing.
Inside Intune Client-Driven Compliance Evaluation for Windows Devices — Rudy Ooms
Assignment filters got a useful upgrade
Abraham Anteskog wrote about the new operatingSystemVersion property for Intune assignment filters.
The change happened with Intune 2608: operatingSystemVersion replaces the deprecated osVersion property for new filters. Existing filters continue to work, but new ones need to use the new property.
The bigger point is the targeting model. Assignment filters are useful when the audience is broad but the assignment needs some additional device-level qualification. I generally prefer that over creating a pile of narrowly scoped Entra groups just to handle targeting exceptions.
Assignment Filters in Microsoft Intune — Abraham Anteskog
TSDude is a new option for Task Sequence UIs
System Center Dudes released TSDude on September 10.
It’s a PowerShell-based Task Sequence UI with a configurator, condition builder, application selection, preflight checks, preview, and a UI++ XML converter. It also uses the familiar Task Sequence variable names.
Introducing TSDude — System Center Dudes
One more thing: Workplace Ninja Summit starts Monday
The Workplace Ninja Summit runs September 14–17 in Baden, Switzerland. The session lineup covers the usual endpoint territory, including Windows, Intune, application management, security, AVD and macOS.
There are a lot of good people presenting, so I’ll be watching for recordings and write-ups coming out of it.
That’s it for this week.
Do you have a suggestion for this newsletter? Let me know in the comments.