90 Minutes to PAW
A Privileged Access Workstation is still one of the strongest ways to reduce risk around admin accounts. In hybrid environments, that matters even more — privileged access tends to sprawl across cloud consoles, on-prem tooling,…
Windows 365 Cloud Apps: App Streaming Without the VDI Headaches
Windows 365 Cloud Apps lets you publish individual Windows apps from the cloud—without giving every user a full Cloud PC. Here’s where it shines, how it compares to AVD RemoteApp, and what it takes to…
Get started with Windows Backup for Organizations
Have you ever upgraded your smartphone and marveled at how quickly everything just works again? You log in, and suddenly all your apps, settings, and wallpapers are exactly where you left them. Until recently, that…
Managing HP BIOS Passwords with Intune
When it comes to managing BIOS passwords on HP devices, the real challenge is rarely setting them once. The hard part is handling them at scale, keeping them consistent, and avoiding fragile manual processes that…
Deploy Windows 11 with PXE
You’ve got a stack of new machines that need Windows 11 — and they need it yesterday. But setting up SCCM, MDT, or WDS feels like launching a spaceship just to light a candle. You…
Windows 11 Kiosk, Intune and Smartsign
SmartSign is a flexible digital signage platform that makes it easy to manage and display content across screens of any size. In this post, I’ll show how I build a Windows 11 kiosk with Intune…
Managing Dell BIOS Passwords with Intune(Dell Command | Endpoint Configure)
A Dell fleet that’s half “old SCCM-era BIOS password” and half “new devices with no password” will break BIOS policy consistency unless you plan for it. Use Dell Command | Endpoint Configure for Microsoft Intune…
Intune device cleanup, keep your tenant tidy
Your Intune tenant doesn’t get messy because you’re doing a bad job. It gets messy because device management is messy. People leave, laptops get re-imaged, pilots come and go, and suddenly your device list is…
Multi-Admin Approval (MAA) in Intune
Protecting your IT environment from a "catastrophic click" or a compromised admin account is the hallmark of a mature security posture. In Microsoft Intune, Multi-Admin Approval (MAA) is the "four-eyes" principle brought to endpoint management.…
Block & Whitelist URLs in Edge
Sometimes you want an environment so locked down that only approved sites can be accessed, and everything else is blocked. In a recent scenario, I did exactly that on W365 machines, and the Intune URLBlocklist…