Smart App Control in Windows 11 can now be enabled or disabled at any time without reinstalling the operating system. The April 2026 cumulative update removes the restriction that previously required a full Windows reset to re-enable it.
Organizations should update Secure Boot certificates ahead of the June 2026 expiration deadline. In this post, I share my personal experience deploying these certificates via Intune, encountering a licensing error, working around it with a registry key, resolving a BIOS-related failure, and verifying the final result with PowerShell.
Windows 11 now supports managing Passkeys with 1Password and Bitwarden, offering more flexibility than the built-in Windows option.
A new Intune and Group Policy option enables administrators to remove preinstalled Microsoft apps from Windows 11 devices, starting with version 25H2. The new policy should simplify device provisioning and app management.