Patch My PC Blog
Get expert insights, how-to guides, product updates, and best practices for streamlining patch management, improving endpoint security, and optimizing IT operations.
A third party smart card KSP caused the Intune MDM certificate renewal flow in Windows 11 to fail before the actual renewal checks even started, leaving devices with expired certificates and almost no useful errors. This blog explains why only specific devices were affected, how the November update changed the Windows renewal flow, and why the same fix could still depend on feature rollout in Windows 11 24H2.
Excerpt: Five Eyes warned that AI is shrinking the time between vulnerability discovery and exploitation. That makes AI patch management a real operational problem, especially for organizations still relying on slow testing cycles, manual third party updates, or users clicking update prompts when they feel like it.
A look at how Intune EPM appears to be moving beyond file elevation with a System Settings experience for Network Settings and Time Sync.
When Autopatch Client Broker runs as a blocking app during Autopilot Pre Provisioning, one small Environment check can take down the MSI. Windows already removed the TenantInfo, the custom action still expects it, and ESP ends with 1603.
The Company Portal suddenly started failing during Autopilot pre provisioning with error 0x87D1041C, even though the app was already present on the device. We traced the issue back to a Windows change introduced with the May update and confirmed the fix after Microsoft reverted the rollout.
The IME does a lot more than most people think. This post is about automating Intune Management Extension Release Notes, so every new version shows what changed instead of leaving us guessing.
The Intune portal can show a fresh Last check in even when the MDM certificate on the device has already expired. That timestamp only proves the device was able to touch the service. It does not prove that policy sync, app delivery, or real management is still working.