Who’s in Domain Admins?
Reading Time: 5 minutesHow to audit Domain Admins and the other privileged AD groups, catch nested members and adminCount orphans, and cut membership down to what you actually need.
Intune: How to Enroll Android Devices
Reading Time: 5 minutesHow to enroll Android devices in Intune, covering work profile BYOD, fully managed, corporate owned work profile, dedicated kiosk devices, and device enrollment managers.
How Intune Autopilot Works
Reading Time: 5 minutesHow Windows Autopilot actually works, how the hardware hash and deployment profile fit together, and how the Enrollment Status Page installs your company app and sets up the user account during OOBE.
Authentication Policy Silos
Reading Time: 4 minutesAuthentication Policy Silos and the Protected Users group contain admin credentials so a stolen Tier 0 login cant be cached or replayed. Here’s how to set up both.
Does Intune Monitor Your Activity?
Reading Time: 5 minutesDoes Intune monitor your activity? Here’s what Intune actually sees, what it never sees regardless of settings, and how that changes once Microsoft Purview or Defender is added.
Intune: Which License One Do You Actually Need?
Reading Time: 5 minutesConfused about which Intune license you need? Here’s what Plan 1, Plan 2, Suite, Education, Government, and device-only licenses actually cover, and when to use each.
Build a Tiered AD Model
Reading Time: 6 minutesHow to build a tiered AD model with Tier 0 for AD, Tier 1 for servers, and Tier 2 for workstations, including the sg- security groups, per-role account counts, and the deny-logon GPOs that enforce it.
Intune: Who Can Actually Enroll a Device
Reading Time: 5 minutesWho can actually enroll a device into Intune, how MDM user scope and enrollment restrictions control it, and when to use a Device Enrollment Manager account for kiosks.
Simple Room Resources: Setting Up Room Calendars in Exchange Online
Reading Time: 8 minutes If you are new to Microsoft 365 administration, simple room resources are one of the first things people will ask you to fix. Someone double-booked the big conference room. A meeting got auto-declined for no clear reason. The room shows up in…