Modern Management Summit 2026

This session will provide a comprehensive introduction to table-top cybersecurity exercises, focusing on their importance, design, and execution. Participants will gain insights into the benefits of conducting table-top exercises, including improved incident response readiness, enhanced communication and coordination among stakeholders, and identification of gaps in policies and procedures. Practical guidance will be provided on structuring exercises to align with organizational objectives, selecting relevant scenarios, and engaging participants effectively.

If you’ve ever managed multiple Intune tenants, you know the feeling:different policies, different apps, different baselines… and the same tasks repeated over and over — just with a slightly different logo each time.

In this session, Scaling Intune Across Tenants with Microsoft Graph API, we’re going to show you how to take back control.

We’ll start with a simple introduction to Microsoft Graph API — what it is, why it matters, and how it can become your best friend when you're juggling multiple environments. No heavy theory, just the essentials you need to understand how it works under the hood and why it’s so powerful.

From there, we’ll look at real multi-tenant challenges:
✔️ Keeping configurations consistent
✔️ Onboarding new tenants without spending your entire weekend on it
✔️ Fixing drift before your phone blows up
✔️ Getting insights across all your customers without checking 20 portals

Using PowerShell and Graph API, we’ll walk through practical examples that show how automation can turn hours of manual work into a couple of seconds. You’ll see how you can standardize setups, deploy apps and policies across tenants, and pull reporting — all from one place.

This session is built on real-world experience, not theory. Expect honest explanations, clear code samples, and tips you can use the moment you get back to work. And of course, plenty of demos — because seeing it in action is half the magic.

Whether you’re an MSP, part of an enterprise with multiple tenants, or simply tired of doing the same tasks repeatedly, you’ll walk away with strategies that actually make your day easier.

Kusto Query Language (KQL) is a powerful tool for endpoint admins managing Windows environments.

This beginner-friendly session demystifies KQL, breaking down its syntax and demonstrating its use in data analysis. Through practical examples using tools like Intune’s Single and Multi Device query, Intune data within Log Analytics, ConfigMgr's CMPivot, and Microsoft Defender’s Advanced hunting, you'll learn to craft queries that provide insights, troubleshoot issues, and enhance management capabilities. By the end, you'll have the foundational skills to confidently use KQL in your IT operations.

When companies are affected by a breach, usually they contact an Incident Response provider to get help eradicating the threat actor from their environment.

This procedure generally speaking takes place when all computers and servers are encrypted and the only thing that matters is the RTO and RPO.

This session however, will look at one case where the threat actor was unable to execute their end goal.

Join this session to learn a number of hardening settings you must have in place, tips and tricks on monitoring, and last but not least the importance of end user awareness.

Ready to tackle Apple device management at scale but not sure where to start? This workshop cuts through the complexity and gets you building a working infrastructure fast. You'll configure Apple Business Manager, connect with resellers, pick the right MDM for your environment, and get devices enrolled with solid security from day one. We'll wire up identity providers, push apps efficiently, and show you how Apple's ecosystem actually works in practice. No vendor pitches—just straight-up technical guidance you can implement immediately, whether you're deploying your first Mac or scaling to thousands of devices.

Security teams are often overwhelmed by large numbers of security recommendations in Defender, many labeled as high or critical. The real challenge is not finding risks, but deciding which ones truly matter first. This session shows how a tier-based risk analysis model can bring clarity and focus to security prioritization.

We introduce a practical approach that combines security impact and real-world consequences into a custom risk score, which is then translated into clear priority tiers (Tier 0–3). These tiers make it easier to understand urgency, align actions across teams, and focus remediation efforts where they have the highest effect.

In this session, you will learn:
* Why traditional severity ratings fail to support effective prioritization
* How to calculate risk based on impact and consequence, not just likelihood
* How Tier 0–3 prioritization simplifies decision-making and remediation planning
* How tiering helps align security priorities with business-critical assets

By the end of the session, you will understand how tier-based risk analysis reduces noise, improves consistency, and enables security teams to act faster and more confidently on the recommendations that matter most.

The rise of Copilot+ PCs and AI-powered features in Windows is transforming how organizations work. From Improved Windows Search and Click to Do to Accessibility Enhancements, these innovations promise productivity gains, but they also introduce new management challenges. In this session, we’ll explore the latest AI features in Windows, their enterprise value, and how IT admins can securely deploy and manage them using tools like Microsoft Intune. You’ll leave with actionable strategies to balance innovation with compliance and control.

This session highlights how Microsoft Intune enables secure, modern, and unified management across iOS, iPadOS, tvOS, and visionOS. Built on a platform-native approach powered by Declarative Device Management (DDM), it demonstrates how to achieve responsive configuration, reduced administrative overhead, and enhanced device autonomy.
We will examine core security capabilities, device hardening strategies, and methods for protecting corporate data while maintaining a seamless user experience across the Apple ecosystem. Participants will gain guidance on designing a scalable and resilient Apple device management strategy suited for modern environments.

Modern macOS management begins at first boot. This session explores the complete macOS lifecycle using Microsoft Intune, from zero-touch provisioning with Setup Assistant to establishing a strong, identity-driven security foundation.
Attendees will learn how Platform SSO during Setup Assistant enables secure, passwordless authentication from day one, and how Declarative Device Management (DDM) delivers more reliable and responsive policy enforcement. We will also cover macOS recovery partition protection, device hardening strategies, and how Intune supports a comprehensive Zero-Trust approach for macOS.

Don’t let annual updates take a year to manage. Managing yearly Windows feature updates and Windows 11 upgrades in large enterprises requires control, scale, and minimal disruption. This session delivers practical Intune strategies for fast, reliable deployments.
We cover the core options - Autopatch Groups, Autopatch Phased Deployments, and Feature Update policies—with pros/cons (automation vs. granular control), plus smart grouping and targeting for complex device estates.

You’ll see how to:
• Pre-stage custom scripts for pre-upgrade tasks (compatibility checks, cleanup, app prep)
• Automate error diagnostics with SetupDiag.exe extraction
• Monitor upgrades effectively using Log Analytics
• Leverage Delivery Optimization for efficient, bandwidth-friendly content distribution
• Deliver targeted end-user notifications to minimize support tickets

Walk away with actionable techniques to streamline your annual update cadence, improve reliability, and maintain compliance in large-scale Intune environments.

Everyone knows the struggle, packaging in Microsoft Intune... but what is the best solution for your organization? Buy a third party product and let it manage the application or build a solution yourself in Azure DevOps and everything in between?

We discuss every use case and let you know what we would choose in every case. Also show you some examples related to a custom build solution in Azure DevOps.

The world IT Pros live in is messy. Legacy systems that never got upgraded, new systems built as if history doesn't exist, and standards with spotty coverage at best.  Also, Microsoft has a long, distinguished history of abandoning technologies after getting people completely committed to them - VBScript, Silverlight, Zune, take your pick.

PowerShell’s architecture was designed from day one for third-party extensibility, so that even if we got killed, you could keep going. This talk details those mechanisms.