Author
Donny van Huizen
Microsoft 365 & Intune Specialist
Donny works as a Tech Lead, creating technical and functional designs for Microsoft 365 environments and implementing those designs at client organizations. His writing covers Intune, endpoint management, and device compliance.
LinkedIn- Announcement Donny van Huizen
Intune adds deployment plans for staged app and policy rollouts (Preview)
Intune can now roll out a Win32 app, Settings catalog profile, or endpoint security policy in timed rings instead of all at once. Useful, but pausing or cancelling doesn't roll anything back, and the payload isn't locked while the rollout runs.
microsoft intuneendpoint managementwindowsapp deploymentchange management - Announcement Donny van Huizen
Intune adds client-driven compliance evaluation for Windows (Preview)
Seven specific compliance signals on Windows devices now trigger a re-evaluation in near real time instead of waiting for the next scheduled check-in. Everything else still runs on the old cycle, and there's built-in throttling most write-ups have missed.
microsoft intunedevice compliancewindowsendpoint managementconditional access - Announcement Donny van Huizen
User.ReadBasic.All loses access to app roles and license data this month
User.ReadBasic.All has quietly exposed app role assignments and license details since it shipped. That access closes in a rollout completing late September 2026. What breaks, and one discrepancy in Microsoft's own migration guidance worth checking before you act on it.
microsoft 365microsoft graphentra idsecurityidentity security - Announcement Donny van Huizen
Intune multiple managed accounts: what admins need to know
Intune's MMA feature, rolling out in June 2026, lets users hold multiple MAM accounts in one app. Here's what admins managing external access need to know.
intunemamapp protection policymultiple managed accountsbyodexternal usersb2bmmaconditional access - Blog Donny van Huizen
Unmanaged devices with Microsoft Intune (3/3): iOS
iOS MAM covers the full M365 app suite but requires Microsoft Authenticator as broker. 3 BYOD paths, the CA gap most organizations miss, and what goes wrong.
- Blog Donny van Huizen
Unmanaged devices with Microsoft Intune (2/3): Android
Android MAM protects all Microsoft 365 apps on mobile, not just Edge. 3 BYOD paths, different control levels, and the CA gap most organizations miss.
- Blog Donny van Huizen
Unmanaged devices with Microsoft Intune (1/3): Windows
Windows BYOD with Intune has three distinct paths. Most organizations configure the wrong one. MAM, MDM enrollment, Conditional Access, and the enrollment pitfalls clients hit in practice.
- Blog Donny van Huizen
How to configure Intune compliance policies: step-by-step guide for all platforms
Configure Microsoft Intune compliance policies for Windows, macOS, iOS, and Android. Includes recommended settings per platform, Conditional Access wiring, report-only testing, and monitoring.
- Blog Donny van Huizen
Intune compliance policies: what they actually change in your organization
Most organizations running Microsoft 365 have devices connecting without any enforced security requirements. Intune compliance policies close that gap, and the impact goes further than the security team.
- Blog Donny van Huizen
Intune MDM vs MAM: when to use which approach
MDM controls the device, MAM controls the data. A decision matrix for IT admins, including the June 30 Conditional Access deadline you can't miss.