Out of Office Hours

Powered by
WordPress

  • Feature updates can be bigger than expected too…

    I upgraded my last Windows 10 virtual machine from Windows 10 22H2 to Windows 11 25H2. The upgrade itself worked just fine (after I added a virtual TPM to the VM and expanded its available disk space). This was a media-based upgrade, using a 7GB (!) Windows 25H2 business editions x64 en-us ISO. It was…

  • Windows 11 cumulative updates: How can they possibly be that big?

    In a session at the MMS Music City event today, it was mentioned that the monthly cumulative update for October for Windows 11 25H2 was nearly 4GB: The speculation was that this was because of AI, that the models needed were bloating the size. That just really made me scratch my head. Initially, I thought…

  • Updated UEFIv2 module posted

    Since Microsoft has posted some documentation that makes use of my UEFIv2 module, I figured I should fix the module so that it’s compatible with PowerShell 7. The new version 3.0 is available via the PowerShell Gallery; you can upgrade with: In addition to a simple fix to make the Get-UEFISecureBootCerts module compatible with PowerShell…

  • New Autopilot Branding release

    It’s been a while since there was an actual release of the Autopilot Branding script, although there were a few “preview” releases as we worked out kinks in the processes. Things are looking reasonably good now (thanks to feedback from several people on the preview versions), so a new 3.3.0 release was published: https://github.com/mtniehaus/AutopilotBranding/releases/tag/3.3.0 So…

  • A new milestone: 5 million views

    The number didn’t manage to flip over to 5 million while I was still awake, but it had passed that threshold this morning: Yes, that’s the number of views from the https://oofhours.com site. I hope that number will continue to climb. If you haven’t already, subscribe via WordPress prompt and get e-mail notifications for new…

  • Get ready to manage updates in OOBE, but only with Autopilot v1?

    As Rudy Ooms discovered on the Microsoft 365 Message Center, bulletin MC1134168 announced a change coming with the September 2025 cumulative update: You’ll be able to install updates at the end of OOBE again, and you’ll get a new control that enables you to turn that on or off. Weirdly, I don’t see that same…

  • Bigger monitors, new challenges

    For a long time, I’ve used three displays attached to my MacBook Pro (well, four counting the Mac’s display): One 32″ monitor in the center, flanked by two 27″ displays, one landscape (mostly for browsing) and one portrait (mostly for Teams/chatting). But I had an “opportunity” to upgrade: I could donate one of the 27″…

  • Attending EUC World 2025 Amplify event in Minneapolis?

    If you’re going to be in Minneapolis next month for the EUC World Amplify event, being held from August 4-7 on the University of Minnesota campus, be sure to look me up — I’ll be there as an attendee (a refreshing change from events where I’m either speaking or preparing to speak). If you are…

  • A policy to remove Windows apps…

    In the “it’s about time” category, this one popped up on Bluesky today from Tero Alhonen: It’s time to start paying attention to the new Insider builds in the dev channel, since 25H2 isn’t far off.

  • ARM64 on Intune apps, finally…

    The latest “what’s new” doc update for Intune includes this tidbit: So now you can restrict ARM64 apps appropriately. Considering how many years ago this was first discussed, it’s about time. Here’s what it looks like, starting with the default of “app works on any architecture”: Change that to “Yes” and you get some checkboxes:…

  • Updated Autopilot Branding package published

    Version 3.1.0 is now available with a variety of fixed based on customer feedback. See the release information for more details: https://github.com/mtniehaus/AutopilotBranding/releases/tag/3.1.0 Note that this version doesn’t use IntuneWinAppUtil.exe directly. Instead, the “makeapp.cmd” batch file will call the “makeapp.ps1” PowerShell script; that script will then use the IntuneWin32App PowerShell module (which automatically downloads IntuneWinAppUtil.exe if…

  • Speaking of APv2…

    Autopilot v2, a.k.a. Autopilot device preparation, was announced on May 22, 2024, it wasn’t really done yet. From the original annoucement (highlight added by me): Not sure about what they consider “soon” but here we are a year later and we’ve seen none of these items. What has happened in this past year? There were…

  • Using .intunewin files outside of Intune

    In my previous post about pre-provisioning, I showed three apps (MDT, Office, and PowerToys) that I was installing as part of a task sequence. What I didn’t show was the details for those apps. Sure, you can always add the same original app source files to SCCM, MDT, or DeployR and install them with the…

  • APv2 and pre-provisioning: We can do that too

    Over a year ago when Autopilot v2 (a.k.a. device preparation) was announced, one of the missing features was pre-provisioning (formerly “white glove provisioning”). Maybe one of these days it will finally emerge. But until then, are there other options? Certainly. First, it’s worth looking at the existing “Autopilot for existing devices” process. Since many orgs…

  • APv2 + HAADJ: Sure, why not

    When Microsoft announced Autopilot v2 (a.k.a. Autopilot device provisioning), they mentioned: Hybrid AD join is no longer recommended for use with Autopilot deployments. Autopilot device preparation profiles do not support Hybrid AD Join, but the existing Autopilot flows that do are still usable.  And if you dare mention it at an event, or on Reddit…

  • An easy trick to get the old Notepad.exe back

    2025-05-30: Added a section at the bottom based on social media chatter. Microsoft has been investing quite a bit of effort into adding new functionality into Notepad, including AI functionality to help you write content. I don’t know who uses Notepad to do that sort of thing, but I’m certainly not that type of person.…

  • BitLocker auto-encrypts more systems with Windows 11 24H2

    The title says it all — well, not quite because the full description is more involved and nuanced. This post on LinkedIn from Sameer Agarwal, an Intune engineer at Microsoft, explains more: With Windows Autopilot, BitLocker automatically encrypts internal drives during the OOB experience – Even though Encryption policy is not deployed (The main reason…

  • New Autopilot Branding package available

    In preparation for an MMSMOA 2025 session where I am talking about the Autopilot Branding package (among other things), I figured it was a good time to look through the feedback, issues, and pull requests and create a new release. The initial 3.0 release was published a couple of weeks ago, and after a couple…

  • What is Windows 11’s new UCPD “feature”?

    I was working on some changes to the Autopilot Branding package and testing them out on Windows 11 24H2 and noticed a problem: One of the registry values I was trying to adjust, to hide the Widget button from the task bar, wasn’t working; it would get an access denied error. Since this is running…

  • What’s really happening on first user logon?

    When you initially sign into Windows, by default you’ll see the “pulsing color” screen as first-time “things” are done in the background: You can disable that “first sign-in animation” via GPO, MDM policy, or equivalent registry entry. I cover that a while back: https://oofhours.com/2020/06/08/make-esp-look-better-by-disabling-fsia/ But other than the extra CPU consumed by the animation (a…