Cleanup rules hide stale device records, not delete them. The parts that matter: the 30-270 day range, the certificate-expiry recovery window, and why Jamf-managed devices are skipped entirely.
This Intune setting does not let MDM win a conflict with Group Policy for Windows Update — it skips the Group Policy reader entirely. How it works and when to use it.
A DMG fails Intune line-of-business requirements by design. How to repackage an app with productbuild, and the signing step most tutorials skip.
Windows 11 Enterprise 26H2 images are now selectable in Intune provisioning policies. New Cloud PCs get it immediately; existing ones only move on reprovision.