Case study 012024 — Present
Intune Endpoint Platform
Designed and run Microsoft Intune for 3,700+ Windows and macOS devices, with device compliance feeding Conditional Access.
- 3,700+
- Devices managed
- 0
- Site visits to onboard an acquired entity
The problem
A multi-site Windows and macOS estate needed one management platform, with access decided by the state of the device and not only by the password.
What I did
- 1
Zero-touch provisioning
Autopilot and MDM auto-enrolment, so a new device configures itself on first sign-in.
- 2
Security baseline
Compliance and configuration profiles, BitLocker, and Windows LAPS for a unique, rotated local admin password on every device.
- 3
App delivery
Win32 application packaging and deployment through Intune.
- 4
Posture into access
Device compliance wired into Conditional Access, plus tooling to audit assignments and detect configuration drift.
Supply
- Vendor
- Autopilot registration
Enrolment
- Entra ID
- Intune enrolment
Configuration
- Compliance
- BitLocker
- Windows LAPS
- Win32 apps
Access
- Conditional Access
Result
- New devices reach a compliant state without an engineer touching them.
- Corporate access granted on device posture, not credentials alone.
- An acquired entity brought onto central management with a no-reboot method: no site visits, no downtime.