Endpoint Management mit Microsoft Intune

Willkommen an dieser Küste! Lerne alles zu Endpoint Management mit Microsoft Intune, um Endpoints aller Plattformen über die Cloud bereitzustellen, zu verwalten, abzusichern und zu überwachen.

---

Einführung, Erfahrung und Gedanken

Introduction to the Microsoft Intune product familyMicrosoft Intune product family overview: products, features and services explained for newcomers, with links to Entra ID and Defender resources.Oceanleaf · Niklas Tinner

Intune & Endpoint News 2026Intune and endpoint news 2026: Windows as an agent platform, Intune licensing changes, new Entra ID features and what is in development for Intune.Oceanleaf · Niklas Tinner

My Top 10 Intune Community ToolsTop 10 Intune community tools for daily admin work: IntuneManagement, Intune Assignment Checker, Autopilot diagnostics, debugging and more.Oceanleaf · Niklas Tinner

Inside Intune: The architecture behind the scenesInside Microsoft Intune: the server-side and client-side architecture behind the scenes and how its cloud services and components work together.Oceanleaf · Niklas Tinner

The Jurassic Park of IntuneHow Intune talks to Windows: the client technologies behind the scenes, from MDM and OMA-DM to the Intune Management Extension, explained.Oceanleaf · Niklas Tinner

My dream setup - powered by Microsoft CloudA dream IT setup on Microsoft Cloud: a MacBook managed by Intune, a Windows 365 Cloud PC, Global Secure Access, Defender XDR and favorite tools.Oceanleaf · Niklas Tinner

Unboxing the Intune SuiteMicrosoft Intune Suite unboxed: Cloud PKI, Advanced Analytics, Enterprise App Management, Endpoint Privilege Management, Remote Help and licensing.Oceanleaf · Niklas Tinner

Intune operations par excellenceRun Microsoft Intune operations with excellence: RBAC, use cases, app inventory, device lifecycle, monitoring, change management and piloting.Oceanleaf · Niklas Tinner

Intune best practicesMicrosoft Intune best practices: governance, updates, automation, security, apps, certificates, profiles and compliance for a modern workplace.Oceanleaf · Niklas Tinner

The easy Microsoft 365 license guideMicrosoft 365 licensing made easy: license suites, Entra ID P1 and P2, the E5 Security step-up, Intune and Windows 365 licenses explained.Oceanleaf · Niklas Tinner

Intune challenges (community edition)The biggest Microsoft Intune challenges according to the community, with practical advice and field experience on how to solve each of them.Oceanleaf · Niklas Tinner

Transition to modern Endpoint ManagementMove to modern endpoint management with Intune: hybrid vs. cloud-only, configuration types, common technical challenges and security design.Oceanleaf · Niklas Tinner

Windows und Autopilot

Is Autopilot Device Preparation it?Windows Autopilot vs. Autopilot Device Preparation: the provisioning flow compared, best practices, device association and which one to choose.Oceanleaf · Niklas Tinner

Autopilot identities and assignmentsWindows Autopilot identities and assignments: corporate vs. personal ownership, hardware hashes, group tags and dynamic group syntax.Oceanleaf · Niklas Tinner

Intune - a reference to Kiosk/shared PC modeWindows kiosk and shared PC mode with Intune: enrollment, configuration profiles, local admin, apps and Windows and Office activation explained.Oceanleaf · Niklas Tinner

macOS, iOS und Android

Intune + macOS: why and how to get startedManage macOS with Microsoft Intune: why Mac in the enterprise, prerequisites, enrollment, settings, remote actions, security and Defender for Endpoint.Oceanleaf · Niklas Tinner

Secure macOS Intune Deployment with Defender and Global Secure AccessSecure macOS deployment with Intune, Defender for Endpoint and Global Secure Access: configuration steps for a protected Mac in the enterprise.Oceanleaf · Niklas Tinner

Intune and your mobile journeyManage iOS and Android with Intune: MDM vs. MAM, ownership models, enrollment, configuration, compliance, app protection and app configuration.Oceanleaf · Niklas Tinner

Kickstart macOS management with IntuneKickstart macOS management with Intune: set up a macOS VM, prepare Intune, enroll your Mac and apply first policies from ready-made templates.Oceanleaf · Niklas Tinner

Updates

Windows updates - write upWindows updates explained: update methods, release channels and servicing, and how to manage Windows updates with Intune and Windows Update for Business.Oceanleaf · Niklas Tinner

Intune + driver update management - concept summaryWindows driver and firmware updates with Intune: features, prerequisites, deployment rings, automatic approval and the driver update lifecycle.Oceanleaf · Niklas Tinner

Summarized: Windows Update for Business reports (former Update Compliance)Windows Update for Business reports explained: Log Analytics setup, Intune configuration and how the solution replaced Update Compliance.Oceanleaf · Niklas Tinner

Security

Endpoint security

Endpoint Privilege Management deployment guideIntune Endpoint Privilege Management (EPM) deployment guide: use cases, elevation settings and rules policies, and file indicators for standard users.Oceanleaf · Niklas Tinner

Dive into Microsoft Security BaselinesMicrosoft security baselines deep dive: updating, deployment methods, Intune baselines, Policy Analyzer and HardeningKitty for Windows hardening.Oceanleaf · Niklas Tinner

Device Control with IntuneDevice control with Microsoft Intune: identify peripherals, build reusable settings and create policies to control USB and removable storage.Oceanleaf · Niklas Tinner

Windows LAPS: the comprehensive guideWindows LAPS guide: features, password backup to Entra ID or Active Directory, password retrieval, post-authentication actions and legacy LAPS migration.Oceanleaf · Niklas Tinner

Local admin/privilege management with IntuneManage local admin rights with Intune: default behavior, Entra ID roles, account protection policies, Endpoint Privilege Management and Windows LAPS.Oceanleaf · Niklas Tinner

The bridge from Intune to Defender for EndpointConnect Microsoft Intune and Defender for Endpoint step by step: enable the integration, onboard devices and use device risk in compliance policies.Oceanleaf · Niklas Tinner

Windows Hello for Business Cloud Trust - Modern approachWindows Hello for Business cloud trust: key facts, deployment and trust models, and how to roll out passwordless sign-in with Intune.Oceanleaf · Niklas Tinner

Tenant security

The easy Intune Multi Admin Approval GuideIntune Multi Admin Approval (MAA) guide: how two-admin approval works for policies, apps and remote actions, plus considerations from the field.Oceanleaf · Niklas Tinner

Protect Intune against AttacksProtect Microsoft Intune against attacks: phishing-resistant MFA for admins, just-in-time access and Multi Admin Approval to prevent mass wipes.Oceanleaf · Niklas Tinner

Top 10 Entra & Intune Security TipsTop Microsoft Entra and Intune security tips: overlooked defaults like compliance settings and practical hardening steps for your tenant.Oceanleaf · Niklas Tinner

Compliance

Intune compliance introIntune device compliance explained: compliance policies, Conditional Access, actions for noncompliance, tenant settings and a deployment plan.Oceanleaf · Niklas Tinner

RBAC

Intune RBAC permissionsIntune role-based access control (RBAC): role concept, migrating roles, governance and auditing who can do what in the Intune admin center.Oceanleaf · Niklas Tinner

Device management RBAC design (Intune & Entra ID)Device management RBAC design with Intune and Entra ID: scope tags, administrative units and a real-world role design example.Oceanleaf · Niklas Tinner

Zertifikate und Netzwerkzugriff

Intune certificate deployment overviewIntune certificate deployment overview: PKCS vs. SCEP/NDES, certificate templates, CA settings and the Intune Certificate Connector.Oceanleaf · Niklas Tinner

Enable network authentication with Entra ID only joined devices & Intune802.1X network authentication for Microsoft Entra ID joined devices managed by Intune: the challenges and a certificate-based solution.Oceanleaf · Niklas Tinner

Intune NDES & SCEP explainedIntune NDES and SCEP certificate deployment explained: solution concept, components, security considerations, prerequisites and field notes.Oceanleaf · Niklas Tinner

Troubleshooting

The ultimate Intune Troubleshooting GuideIntune troubleshooting guide: a structured approach with the admin center, device sync, MDM diagnostics, IME logs and Event Viewer to find the cause.Oceanleaf · Niklas Tinner

Autopilot & Device Preparation TroubleshootingWindows Autopilot and Device Preparation troubleshooting: common error codes, enrollment restrictions, ESP issues and how to fix them in Intune.Oceanleaf · Niklas Tinner

Automation, Graph API und Monitoring

Get started with Graph API + Explorer and Powershell - how to import/export Intune profilesGet started with Microsoft Graph Explorer and PowerShell for Intune: export and import configuration profiles through the Graph API step by step.Oceanleaf · Niklas Tinner

Intune event based automation with alert rulesEvent-based Intune automation: use Azure Monitor alert rules, action groups and Logic Apps to notify admins or trigger remediation.Oceanleaf · Niklas Tinner

Intune automation enlightenment - Azure Logic App + Graph API + Managed IdentityAutomate Intune with Azure Logic Apps, Microsoft Graph and a Managed Identity: secure building blocks and use cases like a device inventory.Oceanleaf · Niklas Tinner

Intune change tracking (Azure Workbook)Track configuration changes in Microsoft Intune with an Azure Monitor workbook: audit profiles, apps, scripts and device operations in one view.Oceanleaf · Niklas Tinner

Azure Managed Identity - access to Graph API and Azure resourcesAzure Managed Identity for Microsoft Graph and Azure resources: assign API permissions and authenticate runbooks without storing any secrets.Oceanleaf · Niklas Tinner