All Intune, AI and Azure Blog Posts
Guides, code and lessons from working with Intune, AI agents and Azure. Find your topic with search or the filters below.
Read Azure API Management MCP: The Control Plane for Agent ToolsAzure API Management MCP: The Control Plane for Agent Tools
MCP makes it easy to connect an AI agent to tools. That is useful for a demo, but an enterprise needs more than a connection string. It needs identity, a controlled tool surface, rate limits, monitoring and a clear owner. In this blog post I show how I would use Azure API Management MCP as the control plane between agents and enterprise tools.
Read article: Azure API Management MCP: The Control Plane for Agent Tools
Read Detect and Block Shadow AI with Intune: OpenClaw in PracticeDetect and Block Shadow AI with Intune: OpenClaw in Practice
Local AI agents are moving from developer experiments to normal Windows endpoints. They can read files, call tools and act with the permissions of the signed-in user. That makes them useful, but it also creates a new blind spot for endpoint teams. In this blog post I show how the new Intune Shadow AI controls can discover local agents such as OpenClaw, give you useful inventory data and help you decide what to control.
Read article: Detect and Block Shadow AI with Intune: OpenClaw in Practice
Read Work IQ API: Query Microsoft 365 Data With AIWork IQ API: Query Microsoft 365 Data With AI
Your Microsoft 365 tenant already contains the context that many AI agents are missing: meetings, email, Teams conversations, documents, people and decisions. The hard part is not generating another answer. The hard part is giving an agent the right work context without building a second data platform or bypassing Microsoft 365 permissions. This is exactly where the Work IQ API becomes interesting. Microsoft currently provides Work IQ as a public preview across CLI, MCP, A2A and REST experiences. In this guide I focus on the path that is easiest to test: install the official package, connect the MCP server and ask useful questions against your own Microsoft 365 context. I also cover the part that matters in an enterprise: tenant enablement, user permissions, tool boundaries and a rollout that starts read-only.
Read article: Work IQ API: Query Microsoft 365 Data With AI
Read Desk Setup 2026: Every Product I Use and What I Would SkipDesk Setup 2026: Every Product I Use and What I Would Skip
After my post about the Oakywood Standing Desk Pro, many of you asked what else is on my desk. This is my complete desk setup 2026: the hardware I use every day, why I chose it and what I would not buy again. This is not a list of products that look good in a photo. My desk is where I write, code, record videos, join calls and prepare community sessions. Every item must remove friction from that work. I will also explain where I would start if I had to build the setup again with a smaller budget. Sponsored-product disclosure: Oakywood provided the Standing Desk Pro and the Oakywood accessories shown in this article free of charge as part of a sponsored collaboration. I did not pay for these products. Oakywood did not approve or edit my verdicts, and all opinions and trade-offs are my own. I bought every non-Oakywood product in this article myself.
Read article: Desk Setup 2026: Every Product I Use and What I Would Skip
Read Fabric Data Agents: Chat With Your Data in OneLakeFabric Data Agents: Chat With Your Data in OneLake
Every company has the same gap: the data sits in lakehouses and semantic models, and the people with questions cannot write SQL or DAX. In this blog post I explain what a Fabric data agent is and how you build one. A Fabric data agent is the conversational analytics piece of Microsoft Fabric — your colleagues ask questions in plain English, and the agent generates and runs the queries against your governed data in OneLake.
Read article: Fabric Data Agents: Chat With Your Data in OneLake
Read Agent Skills vs MCP: When to Use Which for AI AgentsAgent Skills vs MCP: When to Use Which for AI Agents
In February I wrote about why CLI tools are beating MCP for AI agents. It became my most read post so far, and one follow-up question came up again and again: "Okay, and where do Agent Skills fit in?" That is a fair question, because Skills vs MCP is not an either-or decision. They solve different problems, and they work well together. In this blog post I explain the difference, compare the context cost, and give you a simple decision guide for when to use which.
Read article: Agent Skills vs MCP: When to Use Which for AI Agents
Read Claude Code in GitHub Actions: Automate Standard TasksClaude Code in GitHub Actions: Automate Standard Tasks
Most of us use AI coding agents interactively: you sit in the terminal, type a prompt, and watch the agent work. But a lot of the work in a repository is not interactive at all. Reviewing pull requests, triaging new issues, writing release notes, updating documentation — these are standard tasks that repeat every week. In this blog post I show you how to run Claude Code inside your GitHub pipelines with Claude Code GitHub Actions, so these tasks run automatically while you do something else.
Read article: Claude Code in GitHub Actions: Automate Standard Tasks
Read Multi-Agent Orchestration in Microsoft Foundry: A Deep DiveMulti-Agent Orchestration in Microsoft Foundry: A Deep Dive
One agent alone rarely solves a real business process. As soon as you build something serious, you want a triage agent, a specialist for your knowledge base, maybe one that creates tickets — and something that coordinates them. In this blog post I do a deep dive into multi-agent orchestration in Microsoft Foundry. I explain how the story changed three times within one year, how the Microsoft Agent Framework patterns work, and which pattern I would choose for which scenario. At the end you will know exactly where to build your orchestration today so that it does not get deprecated next year. I already wrote about building your first agent in Microsoft Foundry. This post is the next step: making several agents work together.
Read article: Multi-Agent Orchestration in Microsoft Foundry: A Deep Dive
Read My Agentic OS: How I Run Notion, Outlook, Codex and OneDriveMy Agentic OS: How I Run Notion, Outlook, Codex and OneDrive
I do not need another AI chat window. I need an agentic operating system that knows where my work starts, where every result belongs and which actions still require me. That difference sounds small, but it is the reason my daily setup keeps working even as I add more agents, repositories, documents and content channels. My current system connects Notion, Outlook, Codex, reusable skills, OneDrive, GitHub and scheduled automations. Codex is my primary execution layer. Claude Code gives me a second coding path when its strengths fit the task better or when I need to distribute a long coding day across both subscriptions. Notion gives me the working context for the day. Outlook owns communication and time. OneDrive remains the system of record for documents and media, while GitHub owns code. The tools are not interchangeable, and that is the point. This post is not a list of apps I like. It is the operating model I use every day: how work enters the system, how I choose what matters, how an agent gets the right instructions, where the output is stored and where I deliberately keep a human approval step.
Read article: My Agentic OS: How I Run Notion, Outlook, Codex and OneDrive
Read Security Copilot Agents in Intune: What You Get in 2026Security Copilot Agents in Intune: What You Get in 2026
Microsoft is bringing AI agents into more and more admin portals. In this blog post I explain the Security Copilot agents in Intune: the Policy Configuration Agent, the Change Review Agent, and the new Vulnerability Remediation Agent. I show what each agent actually does, how you can enable them, and what you should watch out for. I also cover an important licensing change: Microsoft 365 E5 and E7 tenants get Security Copilot capacity included at no additional cost.
Read article: Security Copilot Agents in Intune: What You Get in 2026
Read Microsoft Foundry Model Deployment: A Practical GuideMicrosoft Foundry Model Deployment: A Practical Guide
Seeing a model in the Microsoft Foundry catalog is not the same as having a model that an application can use. The bridge is the deployment. Think of it as the saved, named configuration that your app talks to. Your code does not call a vague catalog entry; it calls the deployment name you create. That makes the portal form more important than it looks. It connects a model, a deployment type and a name that people and code will depend on. In this post I explain those three choices in plain English before you put a model behind an agent or an application. The video below shows the practical deployment path in German. Here I add the questions that are easy to miss while the portal is open — and a simple path for a first deployment.
Read article: Microsoft Foundry Model Deployment: A Practical Guide
Read Foundry IQ Deep Dive: Knowledge Bases for AI AgentsFoundry IQ Deep Dive: Knowledge Bases for AI Agents
Every team that builds AI agents ends up building the same thing: a retrieval pipeline that feeds company knowledge into the agent. And most of these pipelines are built again and again, per agent, per project. Foundry IQ is Microsoft's answer to this problem — a shared knowledge layer in Microsoft Foundry that any number of agents can plug into. In this blog post I explain how Foundry IQ works under the hood, how you create a knowledge base and wire it into an agent, and where the limits are. At the end you can decide if it should replace your custom RAG setup.
Read article: Foundry IQ Deep Dive: Knowledge Bases for AI AgentsComplete archiveAll articles by year
All articles by year
2026
- Azure API Management MCP: The Control Plane for Agent Tools
- Detect and Block Shadow AI with Intune: OpenClaw in Practice
- Work IQ API: Query Microsoft 365 Data With AI
- Desk Setup 2026: Every Product I Use and What I Would Skip
- Fabric Data Agents: Chat With Your Data in OneLake
- Agent Skills vs MCP: When to Use Which for AI Agents
- Claude Code in GitHub Actions: Automate Standard Tasks
- Multi-Agent Orchestration in Microsoft Foundry: A Deep Dive
- My Agentic OS: How I Run Notion, Outlook, Codex and OneDrive
- Security Copilot Agents in Intune: What You Get in 2026
- Microsoft Foundry Model Deployment: A Practical Guide
- Foundry IQ Deep Dive: Knowledge Bases for AI Agents
- Microsoft Foundry Setup: Project, Model and Deployment
- Intune Multi Admin Approval Now Enforced on Graph API Calls
- Microsoft Foundry Observability: Trace AI Agents in Production
- Microsoft Foundry Realtime Voice Agent: Talk to Your Screen
- Enterprise App Management Auto-Update: Now Generally Available
- Azure AI Inference SDK Migration: OpenAI v1 Guide
- Microsoft Foundry Model Router and Catalog: A Deep Dive
- Microsoft Foundry June 2026: Build More Than a Demo
- Secure Microsoft Foundry: Network, Identity and Guardrails
- Microsoft Foundry vs Copilot Studio: Which Agent Platform?
- Admin By Request Unboxed: My Full EPM Walkthrough
- How to Evaluate AI Agents in Microsoft Foundry Step by Step
- Agent Skills Explained: How to Build Your First Skill
- Build Your First AI Agent in Microsoft Foundry Step by Step
- Protect AI Agents with Microsoft Defender for Endpoint
- Azure Private Networking, End to End: Service Endpoints, Private Endpoints, VNet Integrat...
- The Ultimate Intune Troubleshooting Guide: How It Works and How I Fix It
- AI Models in 2026: What I Would Actually Pick
- Foundry Local: Run AI Models Offline on Your Mac
- Intune Advanced Analytics: How It Compares to Other Tools
- Microsoft Build 2026: A Field Guide to the Agentic Stack
- My New Setup: Why the Oakywood Standing Desk Pro Has Actually Made Me More Productive
- Skills, MCP, CLI, Computer Use: Mapping the AI Tooling Surface in 2026
- Microsoft Agent 365 vs. Microsoft 365 Agents: A Field Guide for IT and Architects
- AI-Powered Intune Policy Documentation and Conflict Analysis
- CLI Tools vs MCP: Better AI Agents With Less Context
- Azure AI Content Safety Guide: Filters and Best Practices
- 8 Productivity Tools I Use Daily for AI, Coding, and Planning
- Azure OCR Comparison: Mistral, GPT & Document Intelligence
- Build a Microsoft Intune AI Agent with Foundry
2025
- How to Create an AI Selfie Tour Video with Tech Icons
- Microsoft IQ Explained: Making Enterprise AI Agents Work
- AI Document Manager with Azure OpenAI for Paperless Offices
- Right Click Tools for SCCM & Intune: Patch, Report, Elevate
- AI-Driven Endpoint Management: The Future with Intune
- Right Click Tools for Intune: Free Community Edition
- Simplify App Management and Patching with Recast
2024
- Become a Prompt Engineering Pro: Mastering the Art of Talking to AI in 2025
- Patch My PC Home Updater 5.0: What’s New and How It Works
- Convert Intune Device Groups to User Groups via Graph API
- Robopack A bis Z: Alles, was du wissen musst (Sponsor)
- Graph Batch Endpoint
- Set Up a Windows Autopilot Lab on macOS
- Azure AI Search: Build a Powerful AI Search Engine
- Microsoft Intune Mac Management: A Complete Guide
- IME Log Summarizer for Microsoft Intune
- How to create a custom SSO Teams bot
- How to build your custom GPT apps
- Cloud-Native Endpoint Deployment with Microsoft Intune
- Microsoft Copilot for Security: Getting Started Guide
- Automate Local Admin Rights Removal with Privilege Manager
- Build an Intune Copilot with Microsoft Copilot Studio
- Build a No-Code Intune Copilot in Azure OpenAI Studio
- Re-enroll Intune Devices Without a Wipe
- GPT Remediation creator
2023
- Easy and Effective App Management in Intune
- How Copilots Work: LLM Architecture, Grounding, and Intune
- Microsoft Defender for Endpoint: Setup and Best Practices
- Data Science with Microsoft Intune — Quick Start
- Detect new Intune Management Extension Updates
- How to Onboard Devices to Microsoft Defender for Endpoint
- GPT Intune Device Troubleshooter: AI-Powered Admin Help
- Intune Group Assignment Script: Find Policy and App Targets
- How to activate the uninstallation feature in the Company Portal
- Azure Monitor Agent to monitor Windows devices (1/2) – Setup
- Intune Driver Update Management — Quick Start
- Export Intune Data to OneLake for Power BI with Fabric
- Management of external devices (peripherals) with Intune
- V2 – Get a Daily Device Report via Email or Teams with Logic Apps (Step by Step)
- Mastering Intune Reporting and Analytics
- Tracking Windows 11 Upgrades with Azure Automation and Intune
- Building an Intune AI Voice Bot with Azure OpenAI
- Creating and Configuring Bash Scripts for Ubuntu Devices in Intune
- Automate Intune Tasks with Azure Automation Runbooks
- Intune Suite Part 3: Advanced Endpoint Analytics
- Intune Endpoint Privilege Management: Setup Guide
- How to Get a Report of All New Enrolled Devices
- Endpoint analytics remediation script community repository
- Intune Suite Part 1: Easy start with Remote Help
- How to use Custom Compliance Script + Example script
- Intune Wave Deployment: Create Smart Device Groups
- Automate Intune Tasks with PowerShell and Microsoft Graph
- How to Export Intune Assignment Errors with PowerShell
- Get Assignments of a Device via PowerShell
- Intune Scope Tags: Delegate Administration and Limit Visibility
- Easy way to analyse MDM Diagnostic data on the client
- Intune Quick Start Guide
- System Information and Self Service Tool
2022
- The new multiple administrative approvals (MAAs)
- Deploy Windows Store Apps via Intune
- Intune mass export with the Graph Report API
- How to setup Organizational messages
- Intune Device Inventory UI
- How to Enroll an Ubuntu Device in Intune
- Microsoft Intune Analytics: Reports, Endpoint Analytics & BI
- What is New in Microsoft Intune 2210
- Intune DevOps Pipeline: Move Objects from Dev to Prod Tenant
- Recap Ignite 2022 – New Intune related announcements
- Deep Dive into delivery optimization
- How to skip the ESP for a single app installation
- What is New in Microsoft Intune 2209
- Deep dive into the IME Health check
- Detect Connected Hardware with Intune Endpoint Analytics
- Show user dialog with Endpoint Analytics (Smartphone Replacement Tool)
- Enable Passwordless Authentication with Microsoft Authenticator
- How to Start Blogging about Microsoft Intune (MEM)
- Create and Fill an Entra ID Group based on Local Attributes
- Check Autopilot enrollment prerequisite
- Send Teams Alerts for Top 5 Intune App Install Errors
- Import Custom ADMX and ADML Templates into Intune
- Activate Mac FileVault using Intune
- Detect anomalies in your Intune environment with Azure Cognitive Services – Part 3 Bluesc...
- Change Windows 11 Context Menu with Intune
- Intune App Creator: Package Chocolatey Apps for Deployment
- Intune Device Troubleshooter: Inspect and Troubleshoot Devices
- Intune Management Extension Deep Dive: How IME Works
- Company Portal System Tray Icon: New Intune Features
- Detect Intune App Installation Anomalies with Azure AI
- macOS Custom Attributes in Intune: Collect Device Inventory
- Automate Intune App Assignment Groups with Azure Runbooks
- Use Endpoint Analytics to clean up the disk
- Set a Default Assignment Filter in Microsoft Intune
- Detect anomalies in your Intune environment with Azure Cognitive Services – Part 1...
- Build a Power BI Dashboard with the Intune Data Warehouse
- Sync Microsoft Entra ID Group with Kiosk Config Profile
- Intune Tool Box – Rebuild of Intune in PowerShell
- Applicability Rule: Gone but still there
- Convert Microsoft Entra ID User and Device Groups with PowerShell
- Copy Intune Discovered Apps in Log Analytics Workspace
- Daily Intune Device Reports via Logic Apps, Email & Teams
- Configuration of Windows Update reboot notifications
- Manage and Enroll macOS Devices with Microsoft Intune
- Update Quick Assist with Microsoft Intune
- List All Intune Assignments of an Entra ID Group
- Detect Slow Internet Breakouts with Endpoint Analytics
- Get Microsoft Intune Status Reports with PowerShell
- Clean up Windows 11: Hide task view, widgets and search with Intune
- Dive deeper into the IME log with a simple change of the log level
- Company Portal System Tray Icon
- Decode a Windows Autopilot Hardware Hash
- Create a Windows 11 Hyper-V VM: Step-by-Step Guide
- Add Trusted Publisher Certificates in Intune with PowerShell
- Delay Windows Update pending reboot with toast notification
- Log Toast Notification Responses in Azure Log Analytics
- Back Up and Restore Windows Registry Keys Safely
- Manage Local Windows Groups with Intune: Account Protection
2021
- Remove Windows 11 Built-in Teams App with Intune
- Install Windows 11 without TPM
- Microsoft Intune Users and Groups Management Guide
- Remove the Primary User from Intune Devices with PowerShell (Shared Device)
- Ultimate MEM Tour Part 4: Microsoft Intune Reporting
- Ultimate MEM Tour Part 3: Endpoint Security in Intune
- Add Microsoft Entra ID Users and Groups to Local Groups with Intune
- How to Restrict the Login to Dedicated Users with Intune – Part 1
- Group Windows 11 Devices with Intune
- Microsoft Intune App Management: Ultimate MEM Tour Part 2
- Ultimate MEM Tour Part 1: Microsoft Intune Devices
- Deploy the Web Company Portal with Microsoft Intune
- Map a Network Drive with Intune
- Create a Desktop Website Shortcut with Microsoft Intune
- How to Align the Windows 11 Taskbar Left with Intune
- Use assignment filter for the update ring assignment
- Enable Tab groups in MS Edge Chromium
- Microsoft Intune Policy Sets: Group and Assign Policies
- Set the Windows 10 background picture
- Deploy a Win32 App with Intune (Cmtrace)
- Set Up a Modern Windows Kiosk PC with Intune
- Get the Application User Model ID (AUMID)
- Duplicate Device Configuration Profiles
- Configure Device Categories in Microsoft Intune
- Set Up a Windows Autopilot Test Lab
- Microsoft Intune and AI Blog by Jannik Reinhard


