Designing, deploying, and operating Microsoft Intune. Home of the Intune Deployment Guide.
Most Intune incidents aren’t caused by external threats or platform failures. They’re caused by changes – policy updates, application deployments, configuration adjustments – that behaved differently in production than expected. Change management in Intune isn’t bureaucracy. It’s the practice that…
Intune generates a lot of data. Most of it isn’t worth watching closely. The skill in day-two operations isn’t finding more things to monitor – it’s identifying the small set of signals that tell you something real, and ignoring the…
The most common iOS management mistake is looking for a middle ground that doesn’t exist. Organizations want some device control without full management, or they want to protect data without requiring full enrollment. Android has a model for this –…
The choice between Work Profile and Fully Managed isn’t primarily a technical decision – it’s a device ownership decision that has technical consequences. Getting the ownership question right first makes the technical configuration straightforward. Getting it wrong produces a model…
Android enrollment generates more support tickets than almost anything else in a mobile deployment. Not because the process is technically complicated – it isn’t – but because the app requirements, the order of operations, and what users actually see during…
App Protection Policies are the mechanism that makes MAM work – they define what managed applications can and can’t do with corporate data. Getting the design right matters because a policy that’s too restrictive creates user friction that drives people…
Assignment intent is one of the most consequential decisions in application deployment and one of the least deliberate. Required, Available, and Uninstall aren’t interchangeable options for achieving the same outcome – they’re fundamentally different contracts between Intune and the device,…
Detection logic is where application deployment fails silently. The application installs. The user can open it. The help desk has no tickets. And Intune keeps reinstalling it every few hours because the detection rule never returns true. This happens more…
