Microsoft will remove auto-pinning for the Microsoft 365 companion apps from the admin center by the end of July 2026. Going forward, this control will only pin the Microsoft 365 Copilot app.
Smart App Control in Windows 11 can now be enabled or disabled at any time without reinstalling the operating system. The April 2026 cumulative update removes the restriction that previously required a full Windows reset to re-enable it.
Organizations should update Secure Boot certificates ahead of the June 2026 expiration deadline. In this post, I share my personal experience deploying these certificates via Intune, encountering a licensing error, working around it with a registry key, resolving a BIOS-related failure, and verifying the final result with PowerShell.
Windows 11 now supports managing Passkeys with 1Password and Bitwarden, offering more flexibility than the built-in Windows option.
A new Intune and Group Policy option enables administrators to remove preinstalled Microsoft apps from Windows 11 devices, starting with version 25H2. The new policy should simplify device provisioning and app management.