u/jithinB_Dev — reddlx

Intune EAM Auto-Updates are now GA!

Enterprise Application Management isn't new, but automatic updates for Enterprise App Catalog apps now are. And the timing couldn't be better—just before the summer break. ☀️

If you're using Microsoft 365 E5, EAM is now included, allowing you to automatically keep supported applications up to date with minimal effort.

In this short blog, I cover:
✅ How to enable Auto-Updates
✅ Important caveats to know
✅ What the end-user experience looks like

Enterprise App Management (hashtag#EAM) Auto-Updates are now Generally Available in Intune 2606!

🎉 Enterprise App Management (hashtag#EAM) Auto-Updates are now Generally Available in Intune 2606!

With auto-updates enabled for Required Enterprise App Catalog apps, Intune automatically detects and deploys the latest app versions, no more manual packaging, creating new apps, or configuring supersedence for every update.

✅ Less admin effort
✅ Faster app updates
✅ Improved security and compliance

It's truly a set it and forget it experience for managing enterprise applications.
Have you started using EAM Auto-Updates yet?

reddit.com

u/jithinB_Dev — 5 days ago

▲ 32 r/AZURE

Microsoft Security Important Update 🚨

Starting June 1, 2026, Microsoft Entra ID blocks a dangerous hybrid identity scenario:

An on-prem AD object can no longer be hard-matched into a cloud-managed Entra account that already holds privileged Entra roles.

Why does this matter?

Because before this change, if someone had enough control in AD, they could potentially abuse hard match and turn an on-prem foothold into privileged Entra access.

That path is now blocked by default.

What still works?
Soft match still works.
Hard match for cloud users without Entra roles still works.
Existing hard-matched objects continue to sync.

But the key takeaway is simple:

Do not place your highest privileged Entra roles on identities that depend on your on-prem AD security.

For Global Admins, Privileged Role Admins, Hybrid Identity Admins and other high-impact roles — cloud-only privileged accounts should be the default.

Hybrid identity is powerful.
But privileged identity should be protected like Tier 0.

This is a good move by Microsoft.

https://preview.redd.it/xc97jrkvr9ah1.png?width=1098&format=png&auto=webp&s=8b050d3ec917e1b165377e027de687f6b3377b58

reddit.com

u/jithinB_Dev — 7 days ago

▲ 127 r/Intune

Microsoft just announced system level network configuration support for Intune Endpoint Privilege Management.

That means standard users can change things like IP address, gateway, and DNS settings without being a local admin.
That part is already interesting. But while looking at the latest EPM agent bits, I noticed something else sitting next to it.

Time Sync!!!

Inside EpmElevate.exe, it looks like Microsoft is also going to add something to sync and change the time zone?
I wrote down what I found in the client side pieces, what Microsoft has now announced, and how its going to work.

https://patchmypc.com/blog/intune-epm-system-settings-network-and-time-sync-elevation/

u/jithinB_Dev — 9 days ago

▲ 0 r/Citrix

Citrix to Windows 365 MS Native only migration

Has anyone in this community worked on a scenario to migrate Citrix based Windows 365 solution to to MS native Intune managed Windows App environment?
Current Solution Structure

Brokered by Citrix , Windows 365 PC, Azure Network Connection, Intune Managed

Proposed Solution Structure

No Citrix
Only MS components.

Please help with some useful migration plan and strategy.

reddit.com

u/jithinB_Dev — 21 days ago

▲ 1 r/Citrix+1 crossposts

Citrix to Windows 365 MS Native only migration

Has anyone in this community worked on a scenario to migrate Citrix based Windows 365 solution to to MS native Intune managed Windows App environment?
Current Solution Structure

Brokered by Citrix , Windows 365 PC, Azure Network Connection, Intune Managed

Proposed Solution Structure

No Citrix
Only MS components.

Please help with some useful migration plan and strategy.

reddit.com

u/jithinB_Dev — 27 days ago