Windows 11 Archives - MDM Tech Space

Secure Boot 2023 CA Certificate Update Rollout - Part 2

Secure Boot Certificate Update Rollout at 50,000 Feet (and Devices): A Field Guide for the Sleep‑Deprived IT Admin – Part 2

March 11, 2026 Joymalya Basu Roy 3

Part 2 of the Secure Boot 2023 CA Update series dives into the actual rollout: how Windows applies the new KEK/DB certificates, why automatic updates aren’t guaranteed, and how Intune admins can safely trigger and manage the update workflow using registry‑based signals and proactive remediations. [Read More]

Secure Boot 2023 Certificate Update Rollout

Secure Boot Certificate Update Rollout at 50,000 Feet (and Devices): A Field Guide for the Sleep‑Deprived IT Admin – Part 1

March 9, 2026 Joymalya Basu Roy 1

Before you roll out the Secure Boot 2023 certificates, map your fleet. This guide shows how to inventory posture with Intune—reports, proactive remediations, JSON outputs, and OEM gotchas. [Read More]

Modern Windows Provisioning - Autopilot Internals - Part 2

Modern Windows Provisioning Internals – Part 2

March 3, 2026 Joymalya Basu Roy 0

Behind the first OOBE screen, Windows launches a dense chain of provisioning tasks that never surface in the UI. As soon as the device comes online, CloudExperienceHost and the provisioning engine begin executing ZDP update checks, initializing and validating the TPM (EK, SRK, AIK), and activating hardware attestation. In parallel, Autopilot performs token‑based device discovery, retrieves its deployment profile, and drives the consumer‑vs‑enterprise pivot that determines the rest of setup. This part of the series breaks down those hidden flows — the CEH pipelines, TPM trust establishment, Autopilot token exchanges, and the orchestration logic that shapes modern Windows provisioning. [Read More]

The Day Intune Finally Stopped Kidnapping Personal Laptops

February 27, 2026 Joymalya Basu Roy 0

There are many perfectly valid, intentional ways a Windows device can end up enrolled into Intune. All of these make sense. They involve planning. They involve intent. And then there was… the most popular method of [Read More]

Hybrid Entra Join Continues To Exist — Not Because Anyone Wants It, But Because Reality Is Inconvenient.

February 20, 2026 Joymalya Basu Roy Comments Off

Hybrid Entra Join was never meant to be a permanent destination — yet for many organisations, it quietly became one.
As businesses push toward modern identity models, they find themselves tangled between on‑prem dependencies, device provisioning challenges, and the politics of re‑imaging at scale. But with Microsoft’s new Hybrid Entra Join powered by Entra Kerberos (Preview), the old sync‑and‑wait pain finally meets its match. This article breaks down why Hybrid became a long‑term tenant, what the new Kerberos-based model changes, and how organisations can finally reclaim their cloud‑native roadmap. [Read More]

Autopilot v1 or Autopilot v2? A Strategic Guide to Modern Windows Provisioning

February 18, 2026 Joymalya Basu Roy Comments Off

Windows Autopilot has evolved—but not in a way that makes the choice obvious. With the introduction of Autopilot v2 (Device Preparation), organizations now have a faster, cloud‑first provisioning model alongside the classic Autopilot experience. This article breaks down Autopilot v1 vs v2 through real‑world scenarios, helping you decide which model fits your identity strategy, device mix, and Windows 11 modernization goals. [Read More]

Windows Autopilot In A Nutshell: Quick Start Guide to Modern Windows Device Provisioning

February 12, 2026 Joymalya Basu Roy 3

Modern Windows provisioning has evolved far beyond imaging, task sequences, and manual device setup. Today, identity—not infrastructure—drives the entire lifecycle of a device. Windows Autopilot sits at the center of this shift, transforming how organizations register, configure, deliver, and recycle Windows endpoints.

Whether you’re modernizing an existing estate or designing a cloud‑first provisioning strategy, understanding Autopilot’s identity pipeline and provisioning models is essential.

This blog post is fundamentally a deep technical exploration of Windows Autopilot as an identity‑driven provisioning framework. [Read More]

Modern Windows Device Provisioning Internals: Part 1

Modern Windows Provisioning Internals – Part 1

December 12, 2025 Joymalya Basu Roy Comments Off

Modern Windows provisioning isn’t a mystery — it’s a disciplined choreography, processes moving in sync to deliver a managed, corporate‑ready device. For IT Pros, this post traces the internals from power‑on UEFI boot to the first OOBE screen: process trees and parent/child chains, critical executables spinning up and terminating, service handoffs, registry details, and trust boundaries — revealing how orchestration turns complexity into a reliable, secure, repeatable journey for enterprise teams. And just to mention, this is only Part 1 with a Part 2 coming soon! [Read More]

From OMA-DM to MMP-C: The Evolution of Modern Windows Management

October 29, 2025 Joymalya Basu Roy Comments Off

Modern Windows management has undergone a significant transformation over the past decade. What was once considered cutting-edge—OMA-DM and MDM-based workflows—has now become legacy as enterprises demand greater scalability, resilience, and efficiency. The shift from an imperative model, where servers orchestrate every configuration step, to a declarative model powered by MMP-C and WinDC marks a new era in device management. This evolution reduces complexity, minimizes network chatter, and enables self-healing capabilities, making it ideal for large-scale environments. In this post, we explore why OMA-DM is now seen as traditional, how MMP-C redefines “modern,” and what this means for the future of Windows management. [Read More]

Diverging OS Build Numbers Due to Hotpatch: How to handle Intune Compliance for Windows Hotpatch

Diverging OS Build Numbers Due to Hotpatch: Avoiding False Non-Compliance in Windows 11 24H2 Devices

October 16, 2025 Joymalya Basu Roy Comments Off

As Windows 11 25H2 is now GA released, most of the enterprise organizations would be on their way to rolling out Windows 11 24H2 to their managed fleet of Windows devices following the (n-1) trend for [Read More]