Cleanup rules hide stale device records, not delete them. The parts that matter: the 30-270 day range, the certificate-expiry recovery window, and why Jamf-managed devices are skipped entirely.
This Intune setting does not let MDM win a conflict with Group Policy for Windows Update — it skips the Group Policy reader entirely. How it works and when to use it.
A practical, staged-rollout walkthrough for configuring Windows update rings in Microsoft Intune — IT pilot, department, fleet, and a dedicated ring for RDS/RDP hosts.
Zero-touch Mac deployment starts below the MDM. How to set up Apple Business Manager, wire in your reseller and MDM tokens, and avoid the enrollment gaps that bite later.