For Intune Engineers

What Intune doesn't tell you —
but you'll hit in production.

Real patterns from real environments. Compliance gaps, enforcement blind spots, and the fixes that actually hold up at scale.

Latest

Apr 30, 2026

BitLocker, Not LAPS: Fixing Sysprep Failures on Trusted Launch AVD Images

We spent weeks chasing LAPS as the culprit behind sysprep failures on Windows 11 AVD multi-session builds. It was BitLocker the whole time—specifically TPM-only mode on Trusted Launch VMs.

Read

What Intune doesn't tell you — but you'll hit in production.

BitLocker, Not LAPS: Fixing Sysprep Failures on Trusted Launch AVD Images

What Intune doesn't tell you —
but you'll hit in production.