Designing, deploying, and operating Microsoft Intune. Home of the Intune Deployment Guide.
Before Autopilot can provision a device, that device needs to be registered. Registration ties a specific piece of hardware to your tenant. Without it, the device powers on and goes through a standard Windows setup – Autopilot never triggers. There…
The Enrollment Status Page is the most visible part of the Autopilot experience and the most common source of Autopilot failures. Getting it right matters more than almost any other provisioning decision. The ESP holds the device at the setup…
The Autopilot profile is the first decision point in the provisioning flow. It determines the deployment mode, the out-of-box experience, and how much control the user has during setup. Most environments need one profile. Some need two. Almost nobody needs…
Mobile enrollment is where Intune’s flexibility becomes its complexity. Windows and Mac enrollment paths are relatively constrained. Mobile is not. iOS and Android each have multiple enrollment modes, each with different management capabilities, different user experiences, and different implications for…
Enrollment restrictions are the first line of control over what gets into your Intune environment. Most deployments leave them at default. That’s a mistake. The default enrollment restriction allows any device on any platform to enroll. That’s fine for a…
Naming conventions are not bureaucracy. In an environment without the hierarchy that Group Policy provided, names are the only structural documentation you have. The architecture article explained why naming discipline matters – Intune has no OU structure, no inheritance, no…
Group structure is one of those decisions that feels low-stakes early and becomes load-bearing later. Get it wrong and you spend the next two years working around it. The architecture article covered the principles – dynamic versus assigned groups, the…
Zero Trust is easy to agree with in principle and easy to get wrong in practice. The model is sound. The gap is in understanding what actually changes when you operate inside it. The previous article covered why the trust…
