Modern Management Summit 2026

Redefine Endpoint Resiliency and Deployment Simplicity with Windows Quality Updates during OOBE, Policy-Based Inbox App Removal, and Windows Backup for Organizations.
Discover how Microsoft is redefining endpoint resiliency and deployment simplicity through three transformative initiatives: Windows Quality Updates during OOBE, Policy-Based Inbox App Removal, and Windows Backup for Organizations. This session dives into:
•Windows Quality Updates during OOBE: Start out with the latest security and quality updates at first sign in.
•Policy-Based Inbox App Removal: Streamlining deployments and eliminating fragile scripts for removal of unwanted inbox apps.
•Windows Backup for Organizations: Bringing enterprise-grade backup and restore to life—empowering IT admins to recover apps, settings, and user experiences seamlessly.

AI Agents are no longer a concept demo—they’re quickly becoming a new operating model for endpoint management. In this Level 400 session, we’ll go past the “what” and focus on the how: how Intune agents are designed to fit real admin workflows, how we avoid fragmented “agent sprawl,” and what it takes to make agent experiences secure, consistent, and measurable at scale.
We’ll break down the practical agent architecture patterns that matter in the Intune world—tools, memory, reasoning loops, and extensibility—and why the industry is shifting from hard-coded flows to agentic reasoning for complex, multi-step admin tasks.
From there, we’ll get concrete about governance and access control, including why RBAC becomes the hardest problem when agents move from chat answers to real investigation and remediation guidance—and how teams are thinking about aligning agent workflows with Intune conventions instead of creating parallel experiences.

What can you do to do built your own AI assistant for Microsoft Intune based on Microsoft Azure services. You might have looked at security copilot and thought it was quite pricey.

We show what you can do yourself to build an AI assistant that can help you administer your Microsoft Intune environment.

This assistant gives you advise about your current environment, conflicts and configuration issues.

Come to this session if you want to leverage AI without breaking the bank!

Over 15 things to watch for when configuring a tenant, or troubleshooting one you have inherited.

With over 20 years in IT and having configured hundreds of tenants, there aren't many things I haven't come across. Here are some big ones to save you the trouble...

Few Microsoft solutions gets as much attention as Windows 365, and few solutions gets overlooked as much by marketing as Azure Virtual Desktop - but together they form Microsofts new way of delivering Windows to every person and organization on the planet. In this session, Simon will walk you through the latest innovations, features and changes in both products, and how they complement each other. You will learn about the features you cant miss, the once that arent fully there yet and possible even the once to ignore... It wont be your regular "What's new"-session, it will be straight forward, honest and demo-rich - dont miss out!

The topic of Privileged Access Workstations (PAW) is hot again. But, many companies struggle to understand exactly what it means, how it will affect operations, and why to bother in the first place.

This session aims to remedy that, with a dive into theoretical practices regarding PAWs, and of course, live demoes of how they work with each other, and the intended administrative interfaces.

Buckle up, and get ready to gain insights into Administrative Tiering as a concept, the roles of PAWs, and how to implement them in your environment.

Connect the dots between productivity and endpoint risk.
Learn how Microsoft Intune accelerates endpoint security by unifying access controls, data protection, and threat signals - so only trusted users and compliant devices are used every day in your organization.
We'll dive into how IT and SecOps temas can minimize data exposure, reduce risky access, and respond faster by turning risk signals into real enforcement outcomes.
Intune is the Microsoft 365 integrated policy execution plane for Windows resiliency, Zero Trust security, and unified operations across agentic and cloud-based device lifecycle workflows.

One of the latest additions to the Cloud PC range are the AI enabled CPC - no surprising in the beginning of the AI era, but is it really something for the masses? In the session, you will learn more about why the addition of an NPU to Windows 365 might be a game-changer, for whom they are useful and what you should think about before deploying them. Learn their limits, but more important, their opportunities and if they might be a match for your organization.

As endpoint environments grow more complex, controlling high impact administrative actions—such as privilege elevation, sensitive configuration changes, and security critical operations—has become just as important as managing devices themselves. In this session, we’ll take a deep dive into how Endpoint Privilege Management (EPM), Multi Admin Approval (MAA), and Admin Tasks work together in Microsoft Intune to provide strong governance, visibility, and operational control—with and without AI.
We’ll start with the non AI foundations, explaining how EPM enforces least privilege access through policy based elevation, how MAA protects sensitive actions by requiring approvals, and how Admin Tasks centralize these requests into a single, actionable workflow. Attendees will gain a clear understanding of where each capability applies, how they interoperate, and how they support auditability, compliance, and Zero Trust principles in real world Intune environments.
From there, we’ll explore how AI and agent assisted capabilities enhance—but do not replace—these controls. We’ll look at how AI can provide contextual insights, impact analysis, and recommendations for elevation requests and approval workflows, helping admins make faster, better informed decisions while keeping humans firmly in control. We’ll also discuss how agent generated recommendations surface alongside traditional tasks, and how organizations can adopt these capabilities incrementally without disrupting existing governance models.

In this session we will see:
- What is Log Analytics
- How to use the Log Analytics API
- Securing your API calls (Azure Automation or Azure function)
- Sending data from your devices
- Sending data from Azure Automation
- Creating reports (drivers, BSOD, warranty)

As you probably know I have a weekly Intune newsletter so I see a LOT of content.

In this session I will run through what I think were the most impactful contributions made in 2025. You may have missed some, you may disagree, you may have some I have missed, it's a shared learning session.

- Graph API basics
- What is Azure Automation
- What is a managed identity
- Why to use managed identity
- Create our first automation account
- Runbook and PowerShell
- Graph API in Azure Automtion
- Schedule tasks with Azure Automation
- Modular runbooks in Azure automation
- Call runbook on-demand from devices
- Secure a bit more API calls
- Cloud automation samples