Modern Management Summit 2026

Redefine Endpoint Resiliency and Deployment Simplicity with Windows Quality Updates during OOBE, Policy-Based Inbox App Removal, and Windows Backup for Organizations.
Discover how Microsoft is redefining endpoint resiliency and deployment simplicity through three transformative initiatives: Windows Quality Updates during OOBE, Policy-Based Inbox App Removal, and Windows Backup for Organizations. This session dives into:
•Windows Quality Updates during OOBE: Start out with the latest security and quality updates at first sign in.
•Policy-Based Inbox App Removal: Streamlining deployments and eliminating fragile scripts for removal of unwanted inbox apps.
•Windows Backup for Organizations: Bringing enterprise-grade backup and restore to life—empowering IT admins to recover apps, settings, and user experiences seamlessly.

Stop by to talk through real‑world Windows Kiosk deployments on Windows 11. In this kiosk session, we’ll share what’s changed in the Windows Kiosk space, what we’re seeing from customers in the field, and how organizations are using cloud‑native management (Intune and Entra) to deploy and manage kiosk and restricted‑user devices at scale.
This is an informal, open discussion — bring your scenarios, questions, and pain points.

The rise of Copilot+ PCs and AI-powered features in Windows is transforming how organizations work. From Improved Windows Search and Click to Do to Accessibility Enhancements, these innovations promise productivity gains, but they also introduce new management challenges. In this session, we’ll explore the latest AI features in Windows, their enterprise value, and how IT admins can securely deploy and manage them using tools like Microsoft Intune. You’ll leave with actionable strategies to balance innovation with compliance and control.

For those who appreciate the joy of digging interesting information from log files, this session is for you.

Intune and Windows logs are packed with valuable insights, if you know where to look. We'll explore where you find the log files and what tools (e.g. CMTrace, Notepad++) you need to understand the information from the different Windows and Intune logs. One great tool is Intune Suite’s single device query, which will be included in Microsoft 365 E3 licenses. Plus, there are multiple community tools to help with troubleshooting.

We’ll share tips on how to efficiently collect and analyze logs from globally roaming devices, ensuring you never miss a critical clue.

Join us and become Sherlock Holmes of Windows and Intune logs – your IT career will thank you.

In this session we will cover how to manage Windows 11 in 2026, using Microsoft Intune.

We will cover configurations such as:
- Time zone settings for global organizations
- Remove modern apps, the modern way
- Startmenu and taskbar
- Windows backup for organizations
- Important security settings
- and more!

 Join us to gain takeaways to bring back home!

Don’t let annual updates take a year to manage. Managing yearly Windows feature updates and Windows 11 upgrades in large enterprises requires control, scale, and minimal disruption. This session delivers practical Intune strategies for fast, reliable deployments.
We cover the core options - Autopatch Groups, Autopatch Phased Deployments, and Feature Update policies—with pros/cons (automation vs. granular control), plus smart grouping and targeting for complex device estates.

You’ll see how to:
• Pre-stage custom scripts for pre-upgrade tasks (compatibility checks, cleanup, app prep)
• Automate error diagnostics with SetupDiag.exe extraction
• Monitor upgrades effectively using Log Analytics
• Leverage Delivery Optimization for efficient, bandwidth-friendly content distribution
• Deliver targeted end-user notifications to minimize support tickets

Walk away with actionable techniques to streamline your annual update cadence, improve reliability, and maintain compliance in large-scale Intune environments.

Secure Boot is a foundational platform security feature within UEFI (Unified Extensible Firmware Interface) that ensures only trusted and verified code is allowed to be executed during the system boot process.The chain of trust during boot is established through Secure Boot certificates stored in the firmware trust database (DB), which are pre-installed by OEMs during device manufacturing.The current Secure Boot trust certificates used to validate Windows and third-party boot loaders are approaching expiration and must be updated to the new set of certificates released by Microsoft in 2023 to maintain platform integrity and ensure continued device security and update compliance.In this session —“Secure Boot Chain Update: What, How, You Are Already Late!” — we will cover:

• Why updating Secure Boot certificates is critical for maintaining device trust and servicing continuity
• How to monitor certificate update status and deployment status across your enterprise fleet
• Recommended approaches to safely update your devices
• Troubleshooting Secure Boot update issues