
An honest two-sided approach to stale Intune devices: a read-only local evidence script plus an admin-side Graph query, so cleanup decisions rest on evidence, not guesswork.

Deploy iPads at scale in Intune: ADE profiles, Shared iPad mode with federated accounts and temporary sessions, education setups, kiosk single-app builds, and fixes.

A read-only Intune detection script that queries the firmware with Confirm-SecureBootUEFI, cross-checks the registry mirror, and reports drift honestly.

Bench-stage enterprise hardware with Autopilot pre-provisioning (White Glove): technician flow, ESP phases, reseal discipline, failure recovery, and scaling tips.

Detect SCEP certificate delivery failures from the device side: scan machine certs for SCEP or NDES candidates and harvest certificate errors from the MDM event log.

Build a safe PowerShell detection and remediation pair that finds devices where the Intune Management Extension is missing or unhealthy and repairs what can be repaired locally.

smsts.log locations per phase, TS variable debugging, failure code dissection and driver injection fixes — read ConfigMgr task sequences like a pro.

Audit WinHTTP and machine WinINET proxy state with a read-only PowerShell script and prove whether manage.microsoft.com is actually reachable from SYSTEM context.

Check the EnterpriseMgmt scheduled tasks that drive MDM policy sync, flag devices whose last run is too old, and re-trigger them with a gated remediation.
Windows Autopilot Device Preparation vs Traditional Autopilot: 2025 Decision Guide
Autopilot · 12 min
Deploying Win32 Apps with Intune: Step-by-Step Tutorial
Application Packaging · 11 min
Conditional Access Design Patterns for Enterprise Entra ID (2026 Edition)
Entra ID · 11 min
Troubleshooting Windows Autopilot ESP Timeouts (Error 0x800705b4)
Autopilot · 9 min
Get the latest Intune & Azure tutorials, exam prep tips, and exclusive discounts — delivered weekly. Join 500+ cloud engineers.
No spam. Unsubscribe anytime. We respect your privacy.