Technical articles, product updates, and insights on Microsoft Intune, SCCM, Defender, and endpoint management from the PowerStacks team.https://powerstacks.com/en-ushttps://powerstacks.com/blog/connecting-ai-to-bi-for-intune-copilot-vs-claude/https://powerstacks.com/blog/connecting-ai-to-bi-for-intune-copilot-vs-claude/I wanted AI to query my BI for Intune data in plain English. Copilot sent me down a Cowork rabbit hole for days. Claude connected in five minutes. Here is the whole story.Thu, 27 Aug 2026 00:00:00 GMTBI for IntuneCopilotClaudePower BIAIJohn Marcumhttps://powerstacks.com/blog/update-intune-assignments/https://powerstacks.com/blog/update-intune-assignments/A free Windows GUI wizard that bulk adds or removes Intune assignments and role scope tags across Win32 apps and configuration profiles, without wiping what's already there.Mon, 10 Aug 2026 00:00:00 GMTIntunePowerShellMicrosoft GraphJohn Marcumhttps://powerstacks.com/blog/is-winget-enterprise-ready/https://powerstacks.com/blog/is-winget-enterprise-ready/Ben Whitmore wrote a fair, evidence-based case about where WinGet falls short for enterprise patching. He's right about a lot of it. So we built the missing piece and we're giving the fix back to everyone.Sun, 09 Aug 2026 00:00:00 GMTWinGetApp Store for IntuneIntunePatchingJohn Marcumhttps://powerstacks.com/blog/keeping-winget-current-monitored-apps/https://powerstacks.com/blog/keeping-winget-current-monitored-apps/We now track vendor releases against the public WinGet repository and submit the update when a package falls behind. Here's how it works and how to add an app to the list.Sun, 09 Aug 2026 00:00:00 GMTWinGetApp Store for IntunePatchingAutomationJohn Marcumhttps://powerstacks.com/blog/go-rudy-this-advanced-intune-troubleshooting-claude-skill/https://powerstacks.com/blog/go-rudy-this-advanced-intune-troubleshooting-claude-skill/I built a free Claude skill that investigates Intune the way Rudy Ooms does and writes the findings up as a blog-ready post. Here's the story behind it.Thu, 25 Jun 2026 00:00:00 GMTIntuneClaudeTroubleshootingAutomationJohn Marcumhttps://powerstacks.com/blog/why-bi-for-intune-shows-duplicate-devices-in-reports/https://powerstacks.com/blog/why-bi-for-intune-shows-duplicate-devices-in-reports/Seeing the same device more than once in BI for Intune is usually by design. Here is why duplicate device rows appear and why your device counts stay accurate.Mon, 15 Jun 2026 00:00:00 GMTBlogIntunePower BIJohn Marcumhttps://powerstacks.com/blog/defender-metrics-every-security-team-should-track/https://powerstacks.com/blog/defender-metrics-every-security-team-should-track/The 8 Microsoft Defender for Endpoint metrics every security team should track, from exposure score to exploitable vulnerabilities, and where to find each.Tue, 02 Jun 2026 00:00:00 GMTBI for DefenderBlogMicrosoft Defender for EndpointVulnerability ManagementSecurityJohn Marcumhttps://powerstacks.com/blog/intune-maintenance-windows-detection-script/https://powerstacks.com/blog/intune-maintenance-windows-detection-script/Limit when Intune Remediations actually take action by gating the detection script with a maintenance window check. Works for Win32 apps too.Fri, 29 May 2026 00:00:00 GMTIntuneRemediationsPowerShellJohn Marcumhttps://powerstacks.com/blog/intune-win32-app-scheduled-reexecution/https://powerstacks.com/blog/intune-win32-app-scheduled-reexecution/Re-run Intune Win32 apps on a schedule using a registry timestamp and two PowerShell scripts. Works with content, no Proactive Remediations license required.Tue, 26 May 2026 00:00:00 GMTIntuneWin32PowerShellJohn Marcumhttps://powerstacks.com/blog/intune-discovered-apps-report-power-bi/https://powerstacks.com/blog/intune-discovered-apps-report-power-bi/Microsoft is replacing Intune's Discovered apps with a richer App Inventory feature, but the export problem hasn't gone away. Learn how BI for Intune normalizes installed software into a Power BI star schema you can slice and dice.Wed, 13 May 2026 00:00:00 GMTIntunePower BIApp ManagementReportingJohn Marcumhttps://powerstacks.com/blog/intune-device-inventory-report-power-bi/https://powerstacks.com/blog/intune-device-inventory-report-power-bi/Native Intune device inventory reports fall short for large environments. Learn how BI for Intune delivers a complete device inventory report in Power BI with cross-platform filtering, hardware details, and compliance correlation.Mon, 11 May 2026 00:00:00 GMTIntunePower BIDevice ManagementReportingJohn Marcumhttps://powerstacks.com/blog/find-devices-missing-secure-boot-2023-certificates-bi-for-defender/https://powerstacks.com/blog/find-devices-missing-secure-boot-2023-certificates-bi-for-defender/Microsoft's 2011 Secure Boot certificates start expiring in June 2026. Use BI for Defender to identify Windows devices that haven't installed the new 2023 certificates in three clicks.Fri, 08 May 2026 00:00:00 GMTBI for DefenderBlogSecure BootMicrosoft Defender for EndpointJohn Marcumhttps://powerstacks.com/blog/intune-reporting-guide-for-it-admins/https://powerstacks.com/blog/intune-reporting-guide-for-it-admins/Everything IT admins need to know about Intune reporting in 2026 - from built-in Microsoft Intune reports to custom dashboards and tools that fill the gaps native reporting leaves behind.Tue, 17 Mar 2026 00:00:00 GMTBlogIntune ReportingMicrosoft Intune ReportsIntune DashboardIntune Reporting ToolsCustom Intune ReportsJohn Marcumhttps://powerstacks.com/blog/is-winget-a-crowdsourced-repository/https://powerstacks.com/blog/is-winget-a-crowdsourced-repository/WinGet is often dismissed as a crowdsourced repository, but that label misses the full picture. Here's what actually happens when you run winget search, winget install, and winget upgrade — and why WinGet's hash verification would have stopped the Notepad++ supply chain attack.Tue, 03 Mar 2026 00:00:00 GMTBlogWinGetIntuneSupply Chain SecurityApplication ManagementJohn Marcumhttps://powerstacks.com/blog/who-holds-the-keys-to-your-kingdom-intune-security/https://powerstacks.com/blog/who-holds-the-keys-to-your-kingdom-intune-security/When you grant third-party Intune tools access to your tenant, who really controls your data? Learn the security risks of vendor-hosted SaaS integrations and how to protect your Entra ID environment.Tue, 04 Nov 2025 00:00:00 GMTBlogEntra ID Marketplace AppIntune Data PrivacyIntune ReportingIntune SecurityJohn Marcumhttps://powerstacks.com/blog/managing-forced-browser-extensions-at-scale-with-intune/https://powerstacks.com/blog/managing-forced-browser-extensions-at-scale-with-intune/Intune supports configuring forced browser extensions for both Google Chrome and Microsoft Edge using the ExtensionInstallForcelist policy. However, there's a significant limitation: Intune does not mFri, 02 May 2025 00:00:00 GMTUncategorizedJohn Marcumhttps://powerstacks.com/blog/empowering-self-service-windows-11-upgrades-with-intune-bi-for-intune/https://powerstacks.com/blog/empowering-self-service-windows-11-upgrades-with-intune-bi-for-intune/Enterprises face a tough balancing act when it comes to OS upgrades. Force the upgrade and risk disrupting end users — delay it and risk falling behind on supportability, security, and compliance. We’Mon, 28 Apr 2025 00:00:00 GMTBI for IntuneBlogIntuneJohn Marcumhttps://powerstacks.com/blog/windows-update-for-business-reports-reimagined-a-simpler-way-to-analyze-updates/https://powerstacks.com/blog/windows-update-for-business-reports-reimagined-a-simpler-way-to-analyze-updates/Go beyond native Windows Update for Business reports with deeper analysis of update behaviors, compliance trends, and deployment progress. See how BI for Intune Power BI dashboards simplify WUfB reporting.Tue, 18 Mar 2025 00:00:00 GMTBI for IntuneBlogJohn Marcumhttps://powerstacks.com/blog/intune-defender-and-sccm-single-pane-of-glass-reporting/https://powerstacks.com/blog/intune-defender-and-sccm-single-pane-of-glass-reporting/Have you ever wanted to see data from Configuration Manager and Intune in a single report? Or perhaps combine insights from Intune and Defender for Endpoint? Maybe even all three—Configuration ManagerMon, 25 Nov 2024 00:00:00 GMTBlogJohn Marcumhttps://powerstacks.com/blog/how-to-create-query-based-collections-in-intune/https://powerstacks.com/blog/how-to-create-query-based-collections-in-intune/In Microsoft Configuration Manager (ConfigMgr), collections allow administrators to organize resources into manageable units for easier, large-scale management. Collections can be customized to meet sWed, 06 Nov 2024 00:00:00 GMTBlogIntuneJohn Marcumhttps://powerstacks.com/blog/ensuring-bitlocker-key-backup-for-workplace-joined-devices-and-beyond/https://powerstacks.com/blog/ensuring-bitlocker-key-backup-for-workplace-joined-devices-and-beyond/Learn how to ensure BitLocker recovery keys are backed up to Azure AD for workplace-joined and Intune-managed devices. Step-by-step guide with PowerShell scripts and compliance monitoring.Tue, 13 Aug 2024 00:00:00 GMTIntuneJohn Marcumhttps://powerstacks.com/blog/how-to-limit-microsoft-intune-win32-app-installs-to-new-devices/https://powerstacks.com/blog/how-to-limit-microsoft-intune-win32-app-installs-to-new-devices/Have you ever needed to deploy a Win32 app via Microsoft Intune to a group of users but wanted the app to install only on their new devices? I recently faced this challenge and found a unique solutionWed, 03 Jul 2024 00:00:00 GMTIntuneJohn Marcumhttps://powerstacks.com/blog/intune-win32-app-maintenance-windows/https://powerstacks.com/blog/intune-win32-app-maintenance-windows/A common challenge faced by administrators transitioning from ConfigMgr (SCCM) to Intune is the perceived lack of control over application installation and reboot timing. ConfigMgr's robust capabilitiMon, 01 Jul 2024 00:00:00 GMTIntuneJohn Marcumhttps://powerstacks.com/blog/automate-intune-app-assignments-with-powershell/https://powerstacks.com/blog/automate-intune-app-assignments-with-powershell/Managing app assignments in Microsoft Intune can be a time-consuming task, especially when dealing with multiple applications and groups. This PowerShell script aims to simplify and automate the proceThu, 20 Jun 2024 00:00:00 GMTIntuneJohn Marcumhttps://powerstacks.com/blog/how-to-bypass-intune-device-platform-enrollment-restrictions-on-windows/https://powerstacks.com/blog/how-to-bypass-intune-device-platform-enrollment-restrictions-on-windows/Most environments block the ability to enroll personal Windows devices into Intune. Doing so also prevents them from joining Entra ID if Intune auto-enrollment is enabled. This is because we don’t norWed, 20 Mar 2024 00:00:00 GMTBlogIntuneJohn Marcumhttps://powerstacks.com/blog/conquer-complex-intune-win32-app-installations-with-powershell/https://powerstacks.com/blog/conquer-complex-intune-win32-app-installations-with-powershell/While considering titles for this post another that came to my mind was, "Why a Poorly Written Installer Requires 400 Lines of Code to Run Silently" but I felt as if the one I used was a little less hFri, 16 Feb 2024 00:00:00 GMTBlogIntuneJohn Marcumhttps://powerstacks.com/blog/automatically-rerun-failed-intune-win32-apps/https://powerstacks.com/blog/automatically-rerun-failed-intune-win32-apps/I acknowledge the existence of numerous other online resources detailing the process of rerunning failed Intune Win32 app deployments on individual devices. These resources typically prescribe a similTue, 06 Feb 2024 00:00:00 GMTBlogIntuneJohn Marcumhttps://powerstacks.com/blog/automatically-categorize-intune-devices/https://powerstacks.com/blog/automatically-categorize-intune-devices/Effortlessly manage and group devices within Microsoft Intune using device categories. While device categorization is essential, manually assigning categories for each device can be challenging and imTue, 14 Nov 2023 00:00:00 GMTBlogIntuneJohn Marcumhttps://powerstacks.com/blog/warranty-reporting-for-intune/https://powerstacks.com/blog/warranty-reporting-for-intune/For quite some time we have had warranty reporting for Dell, Lenovo, and GETAC devices. We used to also support Microsoft devices but, unfortunately, both Microsoft and HP have taken their warranty APFri, 03 Nov 2023 00:00:00 GMTBlogIntunePower BIJohn Marcumhttps://powerstacks.com/blog/power-bi-template-app-tenant-migration/https://powerstacks.com/blog/power-bi-template-app-tenant-migration/Occasionally we are asked how to download the .pbix for our reports for editing in Power BI Desktop, or how to move custom reports from one to another Power BI tenant. This blog will show you how to dTue, 26 Sep 2023 00:00:00 GMTBlogPower BIJohn Marcumhttps://powerstacks.com/blog/set-intune-device-properties-with-powershell/https://powerstacks.com/blog/set-intune-device-properties-with-powershell/For over 20 years I was a mildly successful Configuration Manager Architect without ever learning to write scripts. When I needed something that required a script, I could usually find something onlinMon, 27 Mar 2023 00:00:00 GMTBI for IntuneIntunePower BIJohn Marcumhttps://powerstacks.com/blog/bi-for-intune-dark-mode/https://powerstacks.com/blog/bi-for-intune-dark-mode/Several customers have asked if it is possible to apply a dark mode theme to our reports. Since it is not possible to apply themes in the Power BI service it was not possible to create a set of dark mWed, 08 Mar 2023 00:00:00 GMTBI for IntunePower BIJohn Marcumhttps://powerstacks.com/blog/monitor-windows-update-installation-progression/https://powerstacks.com/blog/monitor-windows-update-installation-progression/One of the most common requests that we hear from our Microsoft Intune and ConfigMgr reporting solutions BI for SCCM and BI for Intune customers is that they would like to have the ability to track the progression Tue, 05 Jul 2022 00:00:00 GMTBI for IntuneBI for SCCMPower BIJohn Marcumhttps://powerstacks.com/blog/how-to-copy-pages/https://powerstacks.com/blog/how-to-copy-pages/By definition a Power BI report is a multi-perspective view into a dataset, with visuals that represent different findings and insights from that dataset. A report can have a single visual or pages fuFri, 24 Jun 2022 00:00:00 GMTBI for IntuneBI for SCCMPower BIJohn Marcumhttps://powerstacks.com/blog/migrate-from-fatstacks-to-powerstacks-bi-for-intune/https://powerstacks.com/blog/migrate-from-fatstacks-to-powerstacks-bi-for-intune/The following process documents the steps require to migrate from the legacy fatstacks BI for Intune app to the new PowerStacks BI for Intune app. This process is required to continue getting updates Wed, 15 Jun 2022 00:00:00 GMTBI for IntuneJohn Marcumhttps://powerstacks.com/blog/migrate-from-fatstacks-to-powerstacks-bi-for-sccm/https://powerstacks.com/blog/migrate-from-fatstacks-to-powerstacks-bi-for-sccm/The following process documents the steps require to migrate from the legacy fatstacks BI for SCCM app to the new PowerStacks BI for SCCM app. This process is required to continue getting updates for Wed, 15 Jun 2022 00:00:00 GMTBI for SCCMJohn Marcum