For years, stopping an app from launching on a managed Mac meant a third-party tool, or the com.apple.applicationaccess.new profile that Apple now deprecates in macOS 27. Privacy permissions were no better. Users […]
For years, macOS compliance in Intune meant working within a fixed list. FileVault, firewall, SIP, password rules, OS version. Useful, but if your security baseline asked for anything outside that […]
A practical, field-tested walkthrough: PSWindowsUpdate + PSADT v4, packaged as an Intune Win32 app, that patches a device to the newest build of its current feature version before the user […]
Three lines pulled from a fresh Mac’s logs tell the whole story: Starting PSSO Setup Assistant install of [Company Portal] macOS 26.5 detected skipping AppSSOAgent kill (Apple regression fixed in […]
Apple just quietly raised the security bar for every MDM-managed device on the planet. On April 21, 2026, Apple published support article HT126655 with a deceptively calm title: “Prepare your […]
The new unified Apple Business portal is live — here’s everything that changed and what IT admins need to do right now. If you logged into Apple Business Manager today […]
The Rumor There’s a persistent gossip circulating in the enterprise mobility and security community: the Outlook iOS app forwards your email data — encrypted or otherwise — to Apple’s servers. Some versions […]
Section 1: Introduction Who This Is For This blog is written for Level 300+ IT admins, endpoint engineers, and identity architects who already understand the basics of Microsoft Intune, Conditional […]
Introduction OpenClaw (previously known as Clawdbot and Moltbot) is a self-hosted AI agent that has gained significant popularity. While it offers powerful automation capabilities, it can pose security and compliance […]
It’s been over two years since I last wrote about deploying the Palo Alto Networks GlobalProtect app on macOS via Microsoft Intune. In the world of MDM and Apple security, […]