A quiet summer week in EUC: Thomas Marcussen's Entra SMS and voice MFA retirement playbook, a passkey migration setting, Login Enterprise 6.8.6, ControlUp, IGEL UMS and more.

This week's EUC roundup leans on the community: Niehaus on WSUS, Reinhard on Enterprise App Management, Billekens' vendor-neutral Workspace Optimizer, a GO-EUC benchmark, and Omnissa's Forrester win.

Weekly End User Computing roundup for 15-22 July 2026: NetScaler CVE-2026-8451 still exploited, a record Windows Patch Tuesday, Entra retiring SMS/voice MFA, XenServer 9 preview, Nutanix and vSphere deadlines, Intune E3/E5 changes and more.

A few years back, VMware Verify reached end of life (2022). Since then, we basically had two options left from the Omnissa perspective: a TOTP authenticator app based on RFC 6238 or Intelligent Hub MFA with push notifications. The TOTP option works well, especially for Bring Your Own Devices (BYOD) , but users still end up typing in codes constantly. Intelligent Hub MFA solves that with push, but the downside is that it requires some level of device management or registration

If you’ve integrated Workspace ONE Access with Microsoft 365 before, the steps will look familiar. Omnissa Access is the evolution of VMware Identity Manager, and while the interface and URLs have changed slightly, the principle remains the same: let Microsoft 365 trust Omnissa Access as the identity provider for your domain. This post walks through the new way to federate Entra ID with Omnissa Access using the Microsoft Graph PowerShell SDK. It replaces the legacy MSOnline m

Omnissa Intelligence has been in the stack for a while now. Most people knew it existed, but it often got ignored, to many day-to-day concerns like UEM, Horizon, or App Volumes. Intelligence always looked promising, but it felt like another dashboard with too many lines and not enough relevance. That... is changing. The Digital Employee Experience (DEX) side of Omnissa Intelligence has received serious attention. It is now mature enough to actually do something useful in r

On december 18, 2024, I had the honor to do a live webinar with Leee Jeffries. "Mastering the Multi-Layered EUC Environment: A Journey Through the Maze" We show how we test and validate the layers with Login VSI. Some of the technologies mentioned are Omnissa Horizon and Appvolumes, Liquit part of Recast Software, IGEL Technology and Microsoft EntraID Conditional Access... sounds like a challenge right!? In case you missed it, here is a link to the recording: Mastering the M

So… on December 19th of 2024, Omnissa released App Volumes 2412. One change I’m most thrilled about: MSI for Windows Endpoints AND and discovered: Physical Endpoint support! App Volumes now supports MSI-wrapped VHD packages, alongside traditional VHD and VMDK formats. This allows the App Volumes agent to operate independently within existing delivery infrastructures such as Workspace ONE UEM, Microsoft Intune, and Microsoft Configuration Manager. and with the parameters of th

Although with many implementations of the Workspace One platform Workspace One Access is configured as the IDP (personally preferred when using this platform) I also encounter customers where EntraID is the preferred IDP with mostly valid reasons. There are use cases this is the better choice. With the flexibility Workspace One Access offers this is no issue at all. But when shifting the IDP to EntraID I usually advice to also shift the Conditional Access policies to EntraID.