Endpoint protection MSPs can sell without shipping client logs to a vendor cloud. Self-host HQ. $3-8/endpoint.github.com/alivirgo/Sentr… Remote · MSPJoined October 2026
@remotetopc Is service start and stop logged somewhere the client can see? For MSPs that's the first audit question once remote service control is on the table.
@PJ_Marcum@johngagef@IntuneSuppTeam How are you handling detection rules on the Win32 side? That's usually where managing outside Intune gets messy, especially once supersedence chains pile up.
@geekcubano@xenappblog@MVPAward Search results for Autopilot hash upload errors are already bad enough. Add a second product with the same name and every troubleshooting thread gets twice as confusing.
@johngagef@PJ_Marcum@IntuneSuppTeam Do it. The part I'd worry about is beta endpoints shifting under you with no notice. Would the beta toggle be global or per feature? Global feels like it bites someone on a Friday.
@wintive That E5 shelfware pattern is painfully common. When you walk an unused E5 tenant, what do you usually find first: Defender off, Conditional Access gaps, or license assignment sprawl?
@cjk365@acjuelich The gap that still bites me is how much of Group Policy's 'just works on the domain' muscle got replaced by waiting on CSP coverage. What on-prem piece do you miss most on the client side: scripts, WMI filters, or something else?
@scanmalware@patialavii@skocherhan@Malwarehunterr@getbstr The RMM-of-the-week pattern is nasty. Same kit, different remote tool per site, so hunting one RMM signature misses the rest. On those ~30, are you seeing ScreenConnect self-hosted more than cloud, or roughly even?
@madebyarden Clean explainer. One gotcha I've seen: help desk grabs the LAPS password then leaves the local admin session open until the next rotation. Do you make the desk sign out or force a rotation after use, or is that still tribal knowledge?
@aruntikaram Intune control 'coming soon' is the part that matters for anyone managing more than a handful of boxes. until then is it GPO/registry only, or is there a CSP you can push through OMA-URI? permissive-then-enforce is right but nobody reads the log on 300 machines by hand
@Don_henzo mover is the step I'd want to see. leaver is easy to audit, but mover quietly stacks access over a few role changes. does your pipeline strip old groups on department change automatically, or send the removal to the old manager to sign off?
@LorisAmbrozzo useful, didn't know the built-in policy skipped some sub-plans. which ones did it miss in your testing? and does it also leave them off when a new subscription gets created later, or is that only on the initial assignment?
@kkaminsk the Connect Health one surprised me. is that the registration role change, or something that only shows if you still have the agent on old DCs? trying to work out if it's worth checking on small tenants that barely touch hybrid
@adriananglin putting an end date in the policy name, like 'RO until 22 Oct', is crude but it makes it show up in every review. do you alert on how long something's been report-only, or just catch it in audits?
@penasarajarvi yeah self-updaters wreck version-based detection. are you detecting on file version or just existence? existence is lazier but survives the auto-update
@NANDSHARMA1991 Good list. The one I'd put first is device compliance tied to Conditional Access. Identity rules mean little if an unmanaged laptop can still sign in.
14 Followers 31 FollowingMGProTech | IT Solutions
Cloud + on-prem without the chaos. 🚀
Security-first. Cost-smart. Human.
Microsoft 365 | Azure | IT Management
1K Followers 1K FollowingRemote access, monitoring & IT management for businesses, IT teams & small MSPs. More than remote access. Lighter than a full RMM.
548 Followers 839 FollowingTechie, father, runner and little squirrel trying to get a nut in a big man's world. The opinions on this account are my own.
30 Followers 29 FollowingCYBER CIC solves your organization’s cyber, information, and decision-making challenges with personal attention, quality service, and professional experience.
82 Followers 26 FollowingThe future-thinking managed IT support & solutions provider for startups, SMBs, & non-profits.
⭐⭐⭐⭐⭐ 100% 5-Star Reviews on Google. Our clients do the talking.
14 Followers 31 FollowingMGProTech | IT Solutions
Cloud + on-prem without the chaos. 🚀
Security-first. Cost-smart. Human.
Microsoft 365 | Azure | IT Management
495 Followers 912 FollowingMake good trouble every chance you get
Eyes on the prize! We're not finished yet.
Don't tolerate injustice, my friend.
Call them out, then call them in.
2K Followers 582 FollowingBlogging, speaking, and learning about Intune, MS Graph, Modern Workplace technology | Cloud Endpoint TS at Microsoft | Former MS MVP | All views are my own
5 Followers 4 FollowingHelping Bolton & Manchester SMEs with IT Support & Cybersecurity| 🎙️ Host of Love SMEs Podcast (coming soon) | Founder @greatitservices
777 Followers 350 FollowingFind it. Fix it. Prove it. Vulnerability management and cyber automation for SMBs, MSPs and enterprise teams. Start free at https://t.co/2WjcaDdDWP 🚀
41 Followers 103 FollowingAI that earns its keep. Managed IT, cyber & automation for AU business — governance first, then the bots. NATC (NZ) · Nexcentric (AU) @nexcentric @NATC
147 Followers 24 FollowingBLOKWORX defends managed service providers and their clients from cybercrime and financial loss. We defend. We protect. You grow.
635 Followers 266 FollowingPassionné (MVP) par les technologies Microsoft (Microsoft Intune, Windows, Windows Autopilot, Purview, Defender, Sentinel, Agent365 et autres bizarreries)
956 Followers 350 FollowingInto all things infosec, risk management, metrics, analytics, cloud, AI/ML, positive leadership & productivity. Army Aviation Veteran. Views are my own :.
292 Followers 98 FollowingCtrlaltnod is an independent cybersecurity and IT intelligence publication built for system administrators, security engineers and IT professionals. FR/EN/DE