msnugget

Small nuggets.
Big Impact.

Weekly, bite-sized insights for Intune, Entra, Security & AI in the Microsoft universe.

weekly drops

60-second reads
Written by Microsoft MVPs

100% practical
Jannik Reinhard and Florian Salzmann
Microsoft MVP

What's a nugget?

A nugget is a focused Microsoft cloud tip you can apply in 60 seconds. No fluff, no 45 minute YouTube session. Just one problem solved or one setting improved.

You'll see real-world tips for Intune, Entra ID, PowerShell, Graph, Security and Copilot – the things we actually ship in enterprise projects.

Example nuggets:

  • • Avoid breaking Autopilot with the wrong app mix
  • • Deploy Anthropic's Claude Models in Azure AI Foundry
  • • Safer VPN handling in ESP
Read the latest

Fresh nuggets Every Week

Weekly drops: new content every week, alternating between our MVPs.

One focused concept per nugget, explained clearly and ready to implement.

Battle-tested in real enterprise environments, not just theory. Trusted by admins, architects and security teams across the world.

What We Cover

Intune & Endpoint Management

Entra ID & Identity

PowerShell & Automation

Microsoft Graph API

Security & Compliance

Copilot & AI Integration

Jannik Reinhard

Head of AI

Jannik brings deep expertise in AI integration, modern infrastructure, and enterprise transformation at scale.

View Profile →

Florian Salzmann

Leading Expert

Florian specializes in Intune, endpoint management, and security with extensive real-world enterprise experience.

View Profile →

What's New

Stay informed with the newest nuggets published.

5 AI Defaults That Just Changed in Your Microsoft 365 Tenant
AI & Copilot

5 AI Defaults That Just Changed in Your Microsoft 365 Tenant

Agent blueprints, Copilot Code, premium models and release channels. Five Microsoft 365 AI settings that changed in November 2026 and what admins should check now.

Jannik Reinhard & Florian Salzmann
Stop Handing Out Local Admin for an IP Address Change
Intune

Stop Handing Out Local Admin for an IP Address Change

Intune Endpoint Privilege Management 2610 adds an elevation system settings policy that lets standard users change IP and DNS settings without local admin rights.

Jannik Reinhard & Florian Salzmann
Your BitLocker Compliance Might Fail Because of Your Firewall
Intune

Your BitLocker Compliance Might Fail Because of Your Firewall

Windows 11 device health compliance now attests against Microsoft Azure Attestation. If your firewall blocks the MAA endpoints, encrypted devices show as not compliant.

Jannik Reinhard & Florian Salzmann
AutopilotSnap: Scan the Autopilot QR Code and Send It to IT
Intune

AutopilotSnap: Scan the Autopilot QR Code and Send It to IT

AutopilotSnap is a free web app that reads the QR code Windows shows during setup and sends a ready-made CSV to your IT team. No sign-in, nothing to install.

Jannik Reinhard & Florian Salzmann
Can You Delay a Windows Update Reboot With PowerShell?
Intune

Can You Delay a Windows Update Reboot With PowerShell?

PowerShell can't reliably postpone a Windows Update restart once the deadline is reached. Check the effective policy values and fix it in Intune instead.

Jannik Reinhard & Florian Salzmann
Intune Deployments: Staged Rollouts Without Duplicate Policies
Intune

Intune Deployments: Staged Rollouts Without Duplicate Policies

Intune deployment plans and deployments (preview) roll out apps and policies in rings with built-in deferral, replacing cloned pilot/prod objects.

Jannik Reinhard & Florian Salzmann

Practical Microsoft Admin nuggets

msnugget is built for Microsoft admins, endpoint engineers, identity specialists and cloud architects: Intune, Entra ID, Windows, Microsoft 365, security operations, Copilot and Azure AI, written up by two Microsoft MVPs as one focused nugget per topic instead of full documentation — what changed, why it matters, and the decision to make before it touches production.