Have you tried restarting? #6
Events, events, events, Intune remediations that don’t behave as you expect, Windows 11 25H2, inspiring new reads, Jedi cats.
Hi there! Let’s get straight to the point: this issue is all about events, especially two of them: AperiTeams Conference and WPC 2025.
Let’s start with AperiTeams Conference: it took place on October 8, 2025, and I was there as a speaker. It’s always fun to attend and a great opportunity to chat with other speakers and, most importantly, to connect with the people who actually use the technologies we talk about: our customers.
I owe a double thank-you to Silvio Di Benedetto and Irene Bugatti: the first “thank you” is for inviting me and trusting me, the second because, unintentionally, I… “stole” something. Yes, really… let me explain. 😆
When I started this newsletter, I already had in mind that, editorially, there would be two sections: a technical video tutorial and a more “chatty” column, the one you’re reading now: “Have you tried restarting?” Back then, though, I hadn’t decided on the title yet, so I posted a poll on LinkedIn with several options.
One of those options was exactly “Have you tried restarting?” The rest is history. Too bad that… deep in the dark corners of Silvio and Irene’s data centers, without us talking to each other, they were also planning a column with the same title. 😅
How did it end? With a few (joking) curses from Silvio and Irene and an awesome T-shirt! 👇🏻
Thanks again and see you at the next AperiTeams! I owe you the title of a column. 😜
Now let’s talk about WPC 2025! This year, besides being a speaker, I’ll also be the agenda lead for the Security & Compliance and Infrastructure & Devices tracks. What does that mean? It means I helped Overnet select the sessions and speakers for WPC. I still can’t believe it: a few years ago I almost “envied” (constructively, of course 😅) those who stepped on that stage and thought I’d never make it there. Today, in 2025, I’ve been speaking at WPC for some time, and this year I even contributed a little during the planning phase. I’m thrilled and super happy. This WPC will be special! Thanks to Overnet and Michele Sensalari for the trust and the opportunity. 🙏🏻
You’ll find all the WPC details later in this email, including the full agenda and my session.
Thanks and talk soon!
📌 In this issue
FAQ… with style: “I’ve set up an Intune remediation to run every day at 2:00 PM. Today is November 5, and when I created and assigned the remediation it was 5:00 PM. When will the first execution happen? Today, November 5, right after the client receives the policy, or tomorrow, November 6 at 2:00 PM?”
Microsoft News Radar: updates straight from Microsoft sources.
Community Picks: the best content from the IT Specialist community in Italy and beyond. This month, a special mention for the AperiTeams Conference held on October 8, 2025.
Events: I’ll just say… WPC 2025! The Italian event dedicated to Microsoft technologies. Less than a month to go…
On a personal note: cats named after Star Wars princesses.
❓ FAQ… with style
Question
“I’ve set up an Intune remediation to run every day at 2:00 PM. Today is November 5, and when I created and assigned the remediation it was 5:00 PM. When will the first execution happen? Today, November 5, right after the client receives the policy, or tomorrow, November 6 at 2:00 PM?”
Answer
This is one of those real-world cases where I thought I knew how a feature behaved. Turns out… I didn’t.
Logic suggests that if I create and assign a remediation at 5:00 PM on November 5 to run daily at 2:00 PM, the first execution should happen on November 6 at 2:00 PM. But no.
Here’s the actual behavior:
Once created and assigned, the remediation policy “lands” on the client as soon as it checks in with Intune.
As soon as the policy is received, the detection runs immediately for the first time, regardless of the scheduled time.
The usual mechanism doesn’t change: if
exit = 1, remediation is triggered; otherwise, nothing happens.Future executions will follow the schedule set in the portal. So, in our case, the second run will actually happen on November 6 at 2:00 PM.
Is this documented? No. But I’ve tested it in the field.
Here’s an example: a remediation created and assigned in my lab on October 16 in the late afternoon (around 5:45 PM), definitely after 2:00 PM. The policy is clear: I want it to run daily at 2:00 PM.
The test detection I wrote was designed to trigger the remediation. The remediation was supposed to write a text file to C:\.
My expectation was that no file would be written until October 17 at 2:00 PM.
And yet… the image speaks for itself: the remediation ran on October 16, 2025, at 6:25 PM.
So, detection and remediation were executed immediately upon policy receipt, regardless of the fact that I had set 2:00 PM.
The moral of the story? If you plan remediations, remember that the first execution will always happen as soon as the policy is received. Subsequent runs will follow the schedule you set, whether that’s “once every hour” or at a specific time.
As I mentioned, this behavior isn’t documented, but if you want to dive deeper into Intune remediations, here are the usual links that survived Halloween night, plus a few examples! 🎃
📎 Use Remediations to Detect and Fix Support Issues - Microsoft Intune
📎 PowerShell Scripts for Remediations - Microsoft Intune
🛰️ Microsoft Radar
Top picks from official Microsoft sources.
Microsoft Intune
Windows IT Pro
Microsoft Entra
🌐 Community Picks
The most useful community content I’ve come across in recent weeks. This month, a special mention goes to the resources from AperiTeams Conference, the event organized by Inside Technologies for CIOs, IT Managers, and decision makers, where key IT topics are explored: Cloud, Security, Modern Work, and Infrastructure.
🔗 AperiTeams Conference - Security Day 2025
👤 Silvio Di Benedetto, Vito Francavilla, Michele Sensalari, Simone Frigerio, Mario Serra, Nino Crudele, Francesco Castano
The full playlist of all conference sessions: the main theme of the day was Identity and its security. Tons of must-watch content and, best of all, it’s free.🔗 Getting Windows Kiosks to work in Intune whilst avoiding InPrivate browsing
👤 Andrew Taylor
A practical guide to configuring Windows Kiosks in Intune while avoiding InPrivate mode, which causes issues with conditional access policies.🔗 Balancing Control and Convenience: Preventing Edge Password Sync on Unmanaged Devices
👤 Kenneth van Surksum
This guide explains how to block password sync in Microsoft Edge on unmanaged devices, protecting corporate data. Perfect for those looking to balance security and convenience in browser management.
🎭 Events and Call for Speaker
Eventi di community e Microsoft, oltre alle principali Call 4 Speaker aperte.
⌚ Be Connected Hour
📅 28 November 2025 - 💻 Online
Monthly update on what’s new in Microsoft 365, Teams, MTR, Purview, MDO, and Copilot, together with Luca Vitali, Fabrizio Volpe, and Raffaele Colavecchi.🔴 WPC 2025 - 30a edizione
📅 2, 3, 4 December 2025 - 🌍 On site
WPC is Italy’s #1 ICT conference dedicated to Microsoft technologies, featuring over 100 brand-new technical sessions. It brings together MVPs, experts, and decision makers for three days of training, networking, and innovation. A must-attend event to stay up to date, exchange ideas, and bring new solutions to your team. Spoiler: I’ll be there with my own session!
All the details about my session: what, where, when.
🧑🏻💻 Windows Autopilot Device Preparation: provisioning cloud‑ready… in every sense
With Windows Autopilot Device Preparation, provisioning becomes truly cloud-ready. After covering prerequisites and comparing it with Autopilot v1, we’ll dive into practice: configuring Device Preparation, optimizing Microsoft 365 app deployment, various script-based automations, creating Intune profiles for physical PCs and (plot twist!) Windows 365 Frontline Cloud PCs. As promised… cloud in every sense!
📅 Tuesday December 2 at 12:00 PM
📍 NH Milano Congress Centre - Assago (MI)
⚫ Black Room
📑 Here’s the full WPC agenda with all sessions and speakers.
🎧 On a personal note
Beyond Tech: what’s inspiring me right now.
📖 What I’m Reading (Books, Newsletters & More)
I’ve realized that a good part of the time I dedicate to reading is spent on newsletters as well as books. So, why not share some interesting newsletters too?
Newsletter
Books
No books this month, even though I already have a few in my sights. If you have any suggestions, reply to this email with your recommendation! 😉
🎵 What I’m Listening To (a.k.a. This Month’s Musical Obsessions)
✍️ Random Thoughts
Soft and purring news: a little furry princess named Padmé has joined our home. The Force is strong with her, and we’re already head over heels in love. 🤩 Plus, she seems to have a certain IT Specialist vibe… 😄
Talk to tou soon!
Riccardo
Some of the links on this site point to products or books sold by third parties. If you decide to purchase through these links, I may earn a commission as an affiliate, at no additional cost to you. This helps support the work I do and allows me to keep providing quality content.