Modern Management Summit 2026

macOS has a reputation for being secure out of the box, but don’t believe everything you hear. That’s only part of the story! In this session, we peel back the polished surface of macOS to expose the hidden risks lurking behind default settings, vague permissions, and half-baked configurations.

I’ll walk you through what your Mac isn't telling you and what attackers are quietly hoping you ignore. We'll deep dive into hardening techniques using Microsoft Intune, demystify Apple's native controls, and build a macOS security baseline that doesn’t just look good on paper!

This isn’t just another how-to. This session is about asking the tough questions, challenging assumptions and taking full control of your macOS fleet.

Most MSP use the Microsoft Business Premium License as the base license to serve their customers.

In this session you will get some insights how to get P2 - Identoty Risk features, Free MSSP services and your own endpoint analytics in Business Premium for no extra costs!

Artificial Intelligence is everywhere, but does it truly add value to endpoint management?

In this session, we’ll cut through the noise and take a deep dive into all Intune AI capabilities available today. You’ll learn what’s practical, what’s promising, and what’s pure hype.

We’ll explore real-world use cases, assess ROI, and help you decide which AI-driven features can genuinely improve security, compliance, and efficiency.

If you’ve ever wondered whether Intune AI is a game-changer or just a buzzword, this session will give you the clarity you need.

Gain insights from real-life experiences on how to craft an effective privileged access strategy that supports "Just Enough, Just In Time" access while maintaining control and avoiding potential security breaches.

Explore the various use-cases, potential pitfalls, and limitations inherent in implementing privileged access using the Microsoft Enterprise Access Model, tailored to scale across multi-cloud environments and on-premise Active Directory setups.

Discover how to manage delegations to IT personnel and end-users using Entra Privileged Identity Management. This session will showcase specific examples of privileged access designs for platforms like Power BI, Azure Landing Zones, Intune, and more.

Still using legacy Active Directory, but would like to get PIM for AD, then come to this session to see it - based on PIM for Entra ID combined with AD TTL group membership.

By the session's conclusion, you'll also have learned about various useful (and free) community add-ons developed by the speaker, including tools like PIM Assignment Revoker, PIM Assignment Wizard, PIM Assignment Exporter, and PIM Baseline Automation.

From a historical perspective in the scope of compromising Identitoes. we have a few waves of innovations the last 10 years. We moved from username / password to MFA. Last two years, with the adversary in the middle attacks, we need to move to more secure MFA, phishing resistant MFA. But what's next ? Think about stealing tokens from your device and reuse that on other systems.

Moving Windows management to the cloud is not just a tooling change—it requires a fundamental shift in how identity, devices, access, and security are designed. In this advanced session, Per Larsen from Microsoft’s Customer Acceleration Team (CAT) shares real world lessons learned from helping enterprises adopt cloud native Windows management aligned with Zero Trust principles.
Drawing on hands on customer engagements across complex environments, this session focuses on how organizations have re architected Windows management around verify explicitly, assume breach, and least privilege. You’ll learn how cloud native capabilities in Microsoft Intune enable stronger security posture, simpler operations, and scalable automation—without re creating legacy management patterns in the cloud.
The session highlights practical guidance and common pitfalls across identity driven access, device trust, provisioning, policy design, application control, and operational readiness. Expect concrete recommendations, architectural trade offs, and lessons learned from the field—grounded in real customer outcomes, not theory or marketing.
This is an experience driven session for architects and technical decision makers who are already on the cloud native journey and want to align Windows management with Zero Trust by design.

In this session, we’ll explore the purpose-built options for connecting to your Windows 365 Cloud PC. We’ll take a deep dive into Windows 365-enabled hardware such as Windows 365 Link devices, as well as scenarios leveraging existing endpoints through Windows 365 Boot and Windows 11 Kiosk Mode.

Drawing from real-world experiences and guidance from product engineering teams, this session will help you understand when and how to use each deployment model and equip you with the knowledge to choose the best solution for different business needs.

As Microsoft Intune continues to evolve with Intune Suite and Copilot powered experiences, understanding what is included at each licensing level is essential for effective planning and deployment. This session provides a clear, Intune only breakdown of ME3 and ME5 licensing, with a focus on what capabilities Intune admins get today and how those capabilities expand with ME5.
We’ll begin with a deep dive into ME3 for Intune, covering the core endpoint management and security capabilities available to Intune administrators. Attendees will gain a clear understanding of which Intune scenarios are fully supported under ME3, how to design standard management workflows within those boundaries, and where ME3 provides strong foundational value for organizations standardizing on Intune.
From there, we’ll walk through ME5 from an Intune perspective, highlighting how ME5 expands Intune through Intune Suite features, advanced analytics, and Copilot inclusion within the Intune experience. We’ll explain what additional scenarios ME5 enables for Intune admins, how it changes day to day operational workflows, and why ME5 is positioned as the licensing foundation for more advanced, AI assisted, and agent driven Intune scenarios.
Throughout the session, we’ll focus on practical, side by side comparisons:
•What Intune capabilities are covered in ME3
•What additional Intune Suite and Copilot aligned capabilities ME5 brings
•How Copilot fits into Intune across licensing tiers
•Common Intune specific decision points when evaluating ME3 vs ME5
We’ll close with guidance for Intune admins and decision makers on how to align licensing choices with their endpoint management goals—whether that’s maintaining a strong Intune baseline with ME3 or planning for advanced Intune Suite and Copilot adoption with ME5.
This session is ideal for Intune administrators, architects, and IT leaders who want a precise, no marketing fluff understanding of what each license unlocks inside Intune and how to plan their Intune roadmap accordingly.

We all read about scary 0-day exploit or CVE popping up every now and then forcing us to take action.

However, did you know that most actors use Windows, to attack Windows? Meaning the built in tools and features allowing for Living Of the Land (LOL) and their binaries (Bins). This session will showcase that an environment, protected by using EDR is still susceptible ti these types of attacks, even in Windows 11 and in the year 2026.

In this session we will walk you through the most common threat vectors threat actors use to exploit on client devices. The session will be a mix of practical tips and demos of how to mitigate relevant threat vectors.

Step into the world of application packaging and unlock the secrets every modern endpoint management professional needs to know.

In this session, we’ll explore the essential steps to get started, the tools that can make your life easier, and the key differences between public, private, and vendor repositories.

You’ll leave this session with practical insights and an enhanced toolkit, ready to streamline your packaging process. We’ll also explore some of the most powerful supporting tools available today to help you manage and maintain your application lifecycle with confidence.

In this session we will showcase some Security Copilot agents, how to install them, how to use them