Father, Kempoka, Systems/Infrastructure Engineer very obsessed with standards. Focused on automation, #ConfigMgr, #Powershell. Opinions are my own.
Joined June 2011
- Tweets1.5K
- Following371
- Followers306
- Likes2.5K
Sean Huggans retweeted
Microsoft is planning Windows maintenance windows in #intune for OS, driver and firmware updates. Better scheduling could simplify coordinated rollouts across managed fleets. Application deployments are not included at first phase.
learn.microsoft.com/en-us/in…
Sean Huggans retweeted
I'm seeing a lot of reactions that are missing the actual issue...
This is not about credentials, MFA, OTP, passkeys, etc.
Authenticator is an identity broker for Microsoft 1st party apps - it didn't validate the real Teams app was asking for a Teams token
We got Microsoft Authenticator to hand over account tokens to a fake Teams app.
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar through Microsoft Graph.
Full write-up by @ofekdavidlevin with code and PoC: enclave.ai/blog/authmask-we-…
Readers added context they thought people might want to know
Microsoft patched this (CVE-2026-80097) in Authenticator v6.2606.4246+. It requires a malicious app already on the device. No exploitation reported at advisory time. Update via Google Play.
enclave.ai/blog/authmask-…
msrc.microsoft.com/update-guide/v…
Sean Huggans retweeted
To the person asking earlier today how to have Windows update CSPs/Cloud policies win over Group Policy - check out the new policy we added to do just that: learn.microsoft.com/en-us/wi…
Sean Huggans retweeted
WDS Deprecation is making the rounds
Like #WSUS, this is a total nothing burger
Still in Server 2028
Supported until 2038, maybe longer
You have, at absolute minimum, 12 years to figure this out. I suspect you have more important things to worry about.
support.microsoft.com/en-us/…
Sean Huggans retweeted
If you're patching but not doing a reboot, you're not patching. Regardless of "hot-patching", it's about memory allocation, temp files, caching, tokens, sessions, etc. It's a hill I will die on.
Sean Huggans retweeted
Well, well, well! :)
At least one pain point for Global Secure Access on Windows will go away in the near future
learn.microsoft.com/en-us/en…
Sean Huggans retweeted
Actually, in my testing TMOG sits at 102MB+ while built-in Task Manager sits at 55MB.
Meanwhile, Task Manager TMOG survives on 55MB and is way sexier than ANY of those apps!
Check it out at tmog.org
Sean Huggans retweeted
Some people asked me what is so bad about Global Secure Access setup, so let me tell you 🫠
For starters, we have the same class of issue as Remote Help - they leave us to package the installer ourselves and provide an installer script to go with it
And it's downhill from here
Sean Huggans retweeted
If you haven't seen the process for deploying Remote Help yet, this thread is for you
Not because it's hard, but because it is even more unhinged than Global Secure Access setup
I honestly can't believe this shipped, and trust me, it only gets worse the more you look at it
@HfordwichHilary Saw you featured on the Pulse today talking about why people aren't having families. A huge part of it is men are wakiglng up. Women have the power in this country to turn a man from a father into an every other weekend fun uncle status simply because they no
avoiding putting themselves through hell.
Obviosuly, cases of proven abuse, etc ate the exception but in the large majority of these cases the fathers are found fit parents, or the kids wouldn't be allowed to be with them alone at all. If you want to promote starting families,
With OSD, you're deploying YOUR environment. With AutoPilot, you're cleaning up the vendor's mess and praying for consistency.
#SCCM #MEMCM #ConfigMgr #Windows11
Sean Huggans retweeted
Microsoft introduces a new capability in Microsoft Teams that allows users to start a chat with ANYONE who has an email address, even if they're not currently using Teams.
The recipient will receive an email invitation to join the chat session as a guest, enabling seamless communication and collaboration. This update simplifies external engagement and supports flexible work scenarios.
This feature will be available across Android, Desktop, iOS, Linux, and Mac platforms.
𝐖𝐡𝐞𝐧 𝐭𝐡𝐢𝐬 𝐰𝐢𝐥𝐥 𝐡𝐚𝐩𝐩𝐞𝐧:
Targeted Release: Rollout will begin in early November 2025 and is expected to complete by mid-November 2025.
General Availability (Worldwide): Rollout will begin in January 2026.
𝐖𝐡𝐨 𝐢𝐬 𝐚𝐟𝐟𝐞𝐜𝐭𝐞𝐝:
All Microsoft Teams users in your organization.
𝐖𝐡𝐚𝐭 𝐰𝐢𝐥𝐥 𝐡𝐚𝐩𝐩𝐞𝐧:
-Users will be able to initiate chats with any external contact using their email address.
-External users will receive an email invitation and can join the chat as guests.
-The chat experience will be governed by your organization's Entra B2B Guest policy.
-Chats will remain within your organization's boundary.
-This feature will be enabled by default.
𝐖𝐡𝐚𝐭 𝐲𝐨𝐮 𝐜𝐚𝐧 𝐝𝐨 𝐭𝐨 𝐩𝐫𝐞𝐩𝐚𝐫𝐞:
-Update internal documentation to reflect this new capability.
-Inform helpdesk and support teams about the change.
-To disable the feature, set the UseB2BInvitesToAddExternalUsers attribute to false using the Set-CsTeamsMessagingPolicy cmdlet.
𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 𝐜𝐨𝐧𝐬𝐢𝐝𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬:
No compliance considerations identified, review as appropriate for your organization.
#MicrosoftTeams #Microsoft365
