How Intune Autopilot Works
Reading Time: 5 minutesHow Windows Autopilot actually works, how the hardware hash and deployment profile fit together, and how the Enrollment Status Page installs your company app and sets up the user account during OOBE.
Authentication Policy Silos
Reading Time: 4 minutesAuthentication Policy Silos and the Protected Users group contain admin credentials so a stolen Tier 0 login cant be cached or replayed. Here’s how to set up both.
Does Intune Monitor Your Activity?
Reading Time: 5 minutesDoes Intune monitor your activity? Here’s what Intune actually sees, what it never sees regardless of settings, and how that changes once Microsoft Purview or Defender is added.
Intune: Which License One Do You Actually Need?
Reading Time: 5 minutesConfused about which Intune license you need? Here’s what Plan 1, Plan 2, Suite, Education, Government, and device-only licenses actually cover, and when to use each.
Build a Tiered AD Model
Reading Time: 6 minutesHow to build a tiered AD model with Tier 0 for AD, Tier 1 for servers, and Tier 2 for workstations, including the sg- security groups, per-role account counts, and the deny-logon GPOs that enforce it.
Intune: Who Can Actually Enroll a Device
Reading Time: 5 minutesWho can actually enroll a device into Intune, how MDM user scope and enrollment restrictions control it, and when to use a Device Enrollment Manager account for kiosks.
Simple Room Resources: Setting Up Room Calendars in Exchange Online
Reading Time: 8 minutes If you are new to Microsoft 365 administration, simple room resources are one of the first things people will ask you to fix. Someone double-booked the big conference room. A meeting got auto-declined for no clear reason. The room shows up in…
GPOs with PowerShell
Reading Time: 5 minutes Every AD environment I’ve inherited has had the same problem. Hundreds of GPOs, half of them doing nothing, and nobody willing to delete any of them because nobody knows which ones are actually in use. So they sit there. They slow down…
Working In the System
Reading Time: 5 minutes Working Within the System: Notes from a Sysadmin I’ve been doing this work long enough to watch the same pattern play out over and over. An admin gets handed a problem, sees a cleaner way to solve it, and instead of working the problem inside…
