Intune guides

What Azure Virtual Desktop is: host pools, session hosts, multi-session Windows, FSLogix profiles, and when it beats Windows 365 or a physical desktop.

How co-management bridges on-prem Configuration Manager and cloud Intune during the migration to cloud-native endpoint management.

Deploying and managing Microsoft Defender for Endpoint on Mac fleets via Intune.

How Defender for Endpoint's vulnerability management surfaces CVEs, misconfigurations, and prioritises remediation.

Designing a Conditional Access baseline: the policies, the principles, the order to write them in, and the habits that keep the estate healthy.

What breaks in a Teams Rooms fleet when a certificate expires — Wi-Fi, 802.1X, proxy roots, hybrid Exchange — how to tell which, and renewing fleet-wide.

How to bulk-assign Intune configuration profiles: assignment groups, filters, All devices vs All users, exclusions, and a Graph script for many profiles.

How to deploy a Win32 app with Intune: wrap the installer into an .intunewin, set install and uninstall commands, detection rules, requirements, and assign it.

How to offboard a user in Microsoft 365: block sign-in, revoke sessions, handle the mailbox and OneDrive, wipe devices, remove licences, delete on schedule.

How to register devices for Windows Autopilot: OEM registration, the hardware-hash CSV route, group tags, dynamic groups, and the deployment profile assignment.

How to remote wipe a lost device with Intune: Wipe vs Retire vs selective wipe, triggering the action, what happens while offline, and BitLocker recovery keys.

How to require a compliant or hybrid-joined device with Conditional Access: the Intune compliance policy first, the grant control, exclusions, report-only.

How to plan the hybrid-identity journey from on-premises AD to Entra ID-only — staged, with the right choices at each stage.

Managing Android devices with Intune through Android Enterprise — work profiles, fully managed, dedicated devices.

How to deploy and manage Microsoft 365 Apps (Word, Excel, etc.) through Intune — channels, updates, and policies.

How MAM-WE protects corporate data inside specific apps on personal devices — without managing the device itself.

A minimum viable Intune configuration for Windows 365 Cloud PCs: enrolment, compliance, configuration profiles, Autopatch, and the differences from laptops.

Combining Intune compliance with Conditional Access gives you device-aware access control — the heart of zero trust.

Endpoint Analytics measures device performance and user experience across the Windows fleet.

EPM lets standard users run specific tasks with elevated privileges without making them local admins.

How Intune manages Mac devices — enrolment via Apple Business Manager, configuration, app deployment, and compliance.

How Intune runs PowerShell scripts and proactive remediations on managed Windows devices.

Intune vs Jamf for managing Macs: where Jamf's Apple depth still wins, where Intune's bundle price and Conditional Access integration win, and when to run both.

Intune vs Kandji for Apple device management: Kandji's opinionated Mac automation and Blueprints against Intune's bundled price and Microsoft 365 integration.

Intune vs Omnissa Workspace ONE (ex-VMware): Workspace ONE's cross-platform and rugged-device depth against Intune's Microsoft 365 integration and price.

How to package and deploy Win32 applications via Intune — the IntuneWin format, detection rules, and dependencies.

Windows Autopilot provisions new PCs straight to the end user with zero IT touch. Here's how it works.

The Entra ID admin roles that gate Microsoft 365 administration — and how to assign them with least privilege.

The Microsoft 365 Apps Cloud Policy service applies Office app policies to users regardless of device, replacing per-device Group Policy.

Deploying and managing Office apps on macOS — installation, updates, Intune management, and Mac-specific features.

How Microsoft ships changes to Microsoft 365, and how to set up deployment rings to control what your users see.

What to document for a Microsoft 365 tenant, how to structure it, and how to keep it from rotting.

How Microsoft 365 Education differs from commercial Microsoft 365 — plans, features, and admin specifics.

F1 vs F3 Microsoft 365 plans for deskless workers — capabilities, sharing, and deployment patterns.

Microsoft 365 Lighthouse is the multi-tenant management portal for managed service providers running many SMB tenants.

Securing mobile access to Microsoft 365 — MAM, MDM, Conditional Access, and the BYOD vs corporate distinction.

Microsoft 365 plans and pricing, made navigable: Business Premium for SMB, E3 plus add-ons for enterprise, E5 when you'll use it — with every comparison.

The minimum security configuration every Microsoft 365 tenant should have — and how to get there.

Migrating from one Microsoft 365 tenant to another — the workloads, the tools, and the realistic timeline.

Microsoft 365 vs Google Workspace compared without marketing: feature by feature, where each wins, where it doesn't matter, and how the decision gets made.

How to configure Microsoft Defender Antivirus for Windows endpoints — the settings that matter and how to manage them.

Defender for Business is the SMB-targeted EDR product bundled with Microsoft 365 Business Premium.

Defender for Endpoint is Microsoft's EDR/XDR platform for laptops, servers, and mobile. Here's what it does.

Microsoft Intune explained: what it manages, how policies work, how enrollment and compliance fit together, and where it sits in Microsoft 365.

Microsoft's AI assistant for security analysts — what it does, where it's embedded, and how it's licensed.

Microsoft Teams Rooms explained: what the hardware does, Windows vs Android, Basic vs Pro licensing, and the operating rhythm that keeps a fleet healthy.

Shifts is the schedule-management app in Teams for shift-based work. Here's what it does and where it fits.

Microsoft Tunnel provides per-app VPN for managed mobile devices — the Intune-integrated way to access on-prem resources.

Known Folder Move redirects Desktop, Documents, and Pictures into OneDrive, so user files are backed up by default.

What OneDrive Personal Vault is, why it exists only in consumer OneDrive, and the equivalent protections for sensitive files in a work or school tenant.

How to deploy and govern the OneDrive sync client at scale — Intune configuration, Known Folder Move, and operational patterns.

How to govern Outlook mobile on iOS and Android — app protection policies, security settings, and feature controls.

How to move Autopilot-registered devices to a different tenant: deregister from the old, re-register in the new, the OEM route, and what happens per device.

What still needs on-premises Active Directory in a Microsoft 365 organisation — Kerberos, file servers, RADIUS, printing — what replaces each, and the order.

Teams Walkie Talkie provides push-to-talk for frontline workers on Wi-Fi or cellular — alongside Shifts and Tasks for shift-based work.

Intune Suite explained: Endpoint Privilege Management, Remote Help, Advanced Analytics, Enterprise App Management, Tunnel, Cloud PKI — and when it pays.

How to use the Office Deployment Tool (ODT) for granular Microsoft 365 Apps deployment.

Common reasons Microsoft 365 Apps fail to activate, and how to diagnose them.

What Microsoft 365 is: what's in the suite, who each plan is for, how the pieces fit together, and what changed since the Office 365 days.

How Windows 11 feature updates work now: shared servicing branches, enablement packages, the 36-month enterprise clock, and running the annual update.

What Windows 365 is: how Cloud PCs work, the licensing tiers, how it connects to Intune and Entra ID, and when it beats AVD or a physical laptop.

Windows 365 vs Azure Virtual Desktop cost, worked for task worker, knowledge worker, and developer patterns — with the assumptions behind the numbers.

Microsoft's two cloud-hosted Windows products — what each is for and how to choose.

Microsoft's managed Windows update service — what it does, where it differs from Windows Update for Business, and when to use it.