June Patch Tuesday drops 200 vulnerabilities, Tony Redmond on sensitivity labels and stale accounts
+ExchangeOnlineManagement 3.10 ships, and PSConfEU 2026 recaps roll in from Adam Driscoll and Miriam Wiesner
A quieter week after the PSConfEU and Build double feature, but only because everyone is catching their breath. Tony Redmond was on fire with five new posts, Andres Bohren kept the module release flag flying at Icewolf, June Patch Tuesday landed with a heavy load, and the first wave of PSConfEU 2026 recaps started rolling in. Plenty to read this weekend.
Mastering PowerShell Parameters with Jeff Hicks at PowerShell + DevOps Global Summit 2026
Jeff Hicks delivered a session packed with demos on advanced parameter design at this year’s PowerShell + DevOps Global Summit in Bellevue, and Confreaks has the recording up on YouTube. He walks through advanced validation methods, leveraging types for greater efficiency, dynamic parameters, experimental features, and the techniques introduced in PowerShell 7 that make your function parameters do real work. If you write functions you ship to other people, this is the kind of session worth a weekend hour.
Microsoft to Delete Unlicensed OneDrive for Business Accounts
Tony Redmond at Office 365 for IT Pros wrote up Microsoft’s decision to start deleting unlicensed OneDrive for Business accounts that have not been paid to be archived, with the change taking effect after July 2026. Up until now those accounts could linger in Microsoft 365 Archive until retention policies and holds expired, but going forward tenants will have to decide which accounts to keep and pay for, and the rest will be removed regardless of retention or eDiscovery holds. This is a meaningful policy shift that anyone with messy offboarding hygiene needs to read before next month rolls around.
https://office365itpros.com/2026/06/12/unlicensed-onedrive-for-business-2/
Cookie Monsters and Defender Live Response with Miriam Wiesner on The PowerShell Podcast
My good friend, Andrew Pla, sat down with Miriam Wiesner at PSConfEU 2026 in Wiesbaden for a wide ranging conversation on cookie theft attacks, Defender live response, and the state of PowerShell security. Miriam, a security research PM at Microsoft working on Defender and Sentinel research, walked through her Return of the Cookie Monsters session where she demonstrated extracting Teams cookies to hijack chats, SharePoint sites, and OneDrive content from a single compromised endpoint. She also recapped the live response session she delivered with Stefan Fanulik on using Defender to investigate and remediate compromised devices without enabling RDP or PowerShell remoting. The conversation closes with a frank discussion of why PowerShell security features make life harder for sophisticated threat actors and why visibility through script block logging matters more than ever.
Adam Driscoll Recaps PSConfEU 2026 and Demos PowerShell Universal AI Tooling
Adam Driscoll posted his PSConfEU 2026 recap over at the Devolutions blog, sharing both the personal experience and the technical headline from his two sessions at the conference. The news from his sessions is PowerShell Universal 2026.2 with new AI tooling focused on MCP tools and agents, where Adam demonstrated building modules, APIs, and web apps using GitHub Copilot connected directly to a PowerShell Universal instance and generating real solutions from simple prompts. Devolutions stepped up as the key sponsor of the conference this year, and the recap is worth a read if you want to understand what has shipped in PowerShell Universal since the acquisition.
https://devolutions.net/blog/psconfeu-celebrating-ten-years-of-powershell-community/
Setting Up Least Privileged MS Graph on PowerShell Wednesday with Morten Mynster and Jake Hildreth
Andrew Pla hosted Morten Mynster and Jake Hildreth on PowerShell Wednesday this week for a walkthrough of the prerequisites to use Morten’s Least Privileged MS Graph module, the open source tool Morten built for auditing and reducing permission exposure across Microsoft Graph applications. Jake plays the friendly guinea pig live on his own tenant while Morten walks him through creating the Azure resource group, log analytics workspace, diagnostic settings for Microsoft Graph Activity Logs, the app registration, and the right API permissions. The session ran as part one of two, with next week’s installment digging into what the module actually reports once the logs roll in.
Tony Redmond Primers Sensitivity Labels with PowerShell
Tony Redmond put together a primer on the three different cmdlets available for fetching sensitivity labels with PowerShell, one in the Exchange Online module and two powered by Graph APIs. The differences come down to scope, properties returned, and whether you get the full set of available labels or just a slice. Worth bookmarking if you have ever stared at the output of one of these cmdlets and wondered why it does not match what you see in the Purview admin center.
https://office365itpros.com/2026/06/11/sensitivity-label-ps/
PowerToys v0.100.0 Released
Andres Bohren over at Icewolf marked the release of PowerToys v0.100.0, the round number milestone version of Microsoft’s open source utility suite for Windows power users. Andres includes his usual install walkthrough using winget along with notes on where to find the release artifacts on GitHub. If PowerToys has earned a spot on your daily driver, this is the version to install this weekend.
https://blog.icewolf.ch/archive/2026/06/11/powertoys-v0-100-0-released/
ExchangeOnlineManagement PowerShell Module 3.10.0 Released
Andres Bohren also covered Microsoft pushing version 3.10.0 of the ExchangeOnlineManagement PowerShell module to the gallery. The headline change is that the minimum required version of PowerShell 7 is now 7.6, while Windows PowerShell 5.1 remains unaffected. The release also fixes an issue where certificate authentication failed in Connect-IPPSSession when using the EnableSearchOnlySession switch, which is worth knowing if you script against Exchange Online in production.
https://blog.icewolf.ch/archive/2026/06/10/exchangeonlinemanagement-3-10-0-released/
PDQ Breaks Down June 2026 Patch Tuesday
The PDQ team is back with their monthly Patch Tuesday recap, and June is one of the larger releases in recent memory. Microsoft published patches for roughly 200 vulnerabilities including three actively exploited zero days, with critical remote code execution issues in core Windows infrastructure components and elevation of privilege bugs across the stack. If you handle patching for your fleet, this is your reading material before you start deploying.
https://www.pdq.com/blog/patch-tuesday-june-2026/
Tony Redmond on Finding Inactive User Accounts
Tony Redmond covers how to find inactive user accounts in Microsoft 365 tenants, with extra urgency given the Microsoft 365 license price increases coming into effect on July 1, 2026. He walks through two approaches: the Microsoft 365 Licensing Report for a quick view, and a PowerShell script that assesses inactivity based on sign in dates and refresh token baselines for more nuanced results. The point is that inactive accounts soak up licenses that suddenly cost more, and there has never been a better time to clean house.
https://office365itpros.com/2026/06/09/find-inactive-accounts/
Exchange Server SE Cumulative Update SU7 Available
Andres Bohren ran through Microsoft’s release of the SU7 update for Exchange Server Subscription Edition, including the post installation reboot requirement and his usual reminder to check for pending reboots before kicking off the installer. The KB number is 5094139 and the security update is available for direct download from Microsoft. For shops still running Exchange on premise or in a hybrid configuration, this is on the list of things to schedule for the next maintenance window.
https://blog.icewolf.ch/archive/2026/06/09/exchange-server-SE-SU7-has-been-released/
Andres Bohren Checks Azure VM Extension Versions
Andres Bohren circled back to his earlier Icewolf article on activating VM Automatic Extension Upgrade and added some practical guidance on checking the current extension version on running Azure VMs. The walkthrough uses PowerShell to inspect what version is deployed and confirms whether the automatic upgrade has run. Useful if you manage a fleet of Azure VMs and want to make sure they are not falling behind on agent and extension updates.
https://blog.icewolf.ch/archive/2026/06/08/check-azure-vm-extension-version/
Andrew Taylor’s Intune Newsletter Lands from Experts Live UK
Andrew Taylor published this week’s Intune Newsletter live from Experts Live UK in London, with content put together between trains, hotel rooms, and conference rooms. Highlights include a guide from Andrei Shchetkin on converting any Azure VM into a Windows 365 image using only Graph commands, and a script from T-Bone on modern drive and printer mapping for cloud native Windows with Intune and PowerShell. The full newsletter is worth your time if you manage endpoints.
https://andrewstaylor.com/2026/06/12/intune-newsletter-12th-june-2026/
PSConfEU Session Recordings
PSConfEU session recordings are starting to land on the SynEdgy YouTube channel following the conference wrap in Wiesbaden, and the 2026 lineup includes deep technical sessions from Steven Bucher on the state of the shell, Thorsten Butz on AI in PowerShell workflows, and Adam Driscoll on what is new in PowerShell Universal 2026.2. Sessions get uploaded over the coming weeks, so subscribing keeps you current.
Slides, scripts, and session materials from PSConfEU 2026 are collected at the conference GitHub repository, where speakers continue to drop their decks and demo code through June. This is the companion resource to the YouTube recordings.
https://github.com/psconfeu/2026
Upcoming Events
Experts Live UK wraps up today in London after two full days of sessions across Microsoft 365, Azure, AI, security, and the modern workplace. Recordings and recap content typically land in the weeks following the event from attendees and speakers, so keep an eye on the schedule page and social posts from the Intune and SCCM crowd.
https://eluk26.expertslive.co.uk/
The PowerShell + DevOps Global Summit returns to Bellevue, Washington in April 2027, the premier community event hosted by The DevOps Collective. Early bird registration usually opens late summer, so worth bookmarking now if you are planning ahead.
https://powershellsummit.org/
Looking further out, MMS Midway Edition heads to San Diego October 25 through 28, the smaller West Coast sibling of the main Midwest Management Summit.
https://mmsmoa.com/