Event details
61 Comments
Can we have some better ways to improve the organization, view and management of Apps and configuration policies/devices/etc in Intune? An infinite scrolling list isn't the best or easiest to view.
- Joe_Lurie
Microsoft
BlueSakura Thanks for posting the question. Organization is something that comes up from time to time. Please post this feedback at https://aka.ms/IntuneFeedback. Likely, it's already posted there, so make sure you 👍the existing post instead of adding a new one.
What is the minimum support OS for the secure boot certificate updates?
- EricMoe
For Windows client (which is what this Office Hours chat covers), you need to be on a supported version of Windows client. For Windows 11 Pro, this means you need to be on Version 24H2 or newer; for Windows 11 Enterprise, you need to be on Version 23H2 or newer. If you are on Windows 10 and have ESU, you will receive the certificate updates through Windows Update (see February 10, 2026—KB5075912 (OS Builds 19045.6937 and 19044.6937) - Microsoft Support for details).
Are you going to release 25H2 Microsoft Surface Recovery Images for the Laptop 3, Laptop 4, and Pro 7 please?
Is anyone else having issues with Planner 3 on a new install (upgraded from Basic)? We are unable to create a Premium Project. It gives an error message then deletes the project.
- EricMoe
Please post this question to the M365 community where they should be able to assist. Microsoft 365 | Microsoft Community Hub
Hi guys 👋, when will the Intune Secure Boot report, that was recently made available then revoked due to problems, return please? We're keen to assess our environment and get ready for the Secure Boot certs change 🙂. Thank you
This is also a question on our site - as everyone is running out of time and OEMs don't deliver.
- Jason_Sandys
Hi HeyHey16K and BarbaraW, Full acknowledge on the need here, unfortunately, I don't have an answer. There are some backend tweaks that are in progress and the team is working diligently on getting these done so it can return to production. Keep in mind that there are other ways to report on progress though including using a PowerShell based Remediation that skims the event log and/or the registry. I'm pretty sure there are community examples of this floating around that you can leverage until we restore the report.
Hello All, thanks for this lovely collaboration with top notch engineers from MS directly,
We’re building an automated compliance pipeline for Intune / AVD–managed Windows 11 devices and need a programmatic, Microsoft-supported source for the current Patch Tuesday “B” CU baseline.
Requirement (monthly, 2nd Wednesday):
For each Windows 11 release (22H2, 23H2, 24H2, 25H2, future 26H2), determine:
Expected CU KB
Expected UBR
Security revision
This baseline is then used to compare against device-reported OS/UBR from Graph.
Question:
Is there an authoritative API or dataset (Graph, WUfB, Update Compliance, Intune internal metadata, or Microsoft Update) that exposes the current expected Patch Tuesday CU + UBR per OS version?
Specifically:
How does Intune internally determine “latest update installed / compliant”?
Is KB → expected UBR mapping available programmatically?
Is scraping Update History / Catalog the only option today?
Any supported alternative or roadmap for exposing this via Graph?
We want to avoid manual KB tables or HTML scraping.
Looking for guidance from Intune / WUfB / Graph teams.
- AriaUpdated
Hi isamFER, You can pull all of the available UBRs via the WUA APIs (Searching, Downloading, and Installing Updates - Win32 apps | Microsoft Learn).
A more seamless approach would be to leverage the Autopatch reports in Intune to determine if devices have the correct security updates / content. You can do this through the Windows quality and feature update reports overview | Microsoft Learn and for security you may especially find the New Windows Autopatch report on CVEs - Windows IT Pro Blog interesting.
