Endpoint Management with Microsoft Intune
Welcome to this coast! Learn everything on Endpoint Management with Microsoft Intune to deploy, manage, secure and monitor endpoints from all platforms through the cloud.
Introduction, experience and thoughts
Introduction to the Microsoft Intune product family
Microsoft Intune product family overview: products, features and services explained for newcomers, with links to Entra ID and Defender resources.
Niklas Tinner
Intune & Endpoint News 2026
Intune and endpoint news 2026: Windows as an agent platform, Intune licensing changes, new Entra ID features and what is in development for Intune.
Niklas Tinner
My Top 10 Intune Community Tools
Top 10 Intune community tools for daily admin work: IntuneManagement, Intune Assignment Checker, Autopilot diagnostics, debugging and more.
Niklas Tinner
Inside Intune: The architecture behind the scenes
Inside Microsoft Intune: the server-side and client-side architecture behind the scenes and how its cloud services and components work together.
Niklas Tinner
The Jurassic Park of Intune
How Intune talks to Windows: the client technologies behind the scenes, from MDM and OMA-DM to the Intune Management Extension, explained.
Niklas Tinner
My dream setup - powered by Microsoft Cloud
A dream IT setup on Microsoft Cloud: a MacBook managed by Intune, a Windows 365 Cloud PC, Global Secure Access, Defender XDR and favorite tools.
Niklas Tinner
Unboxing the Intune Suite
Microsoft Intune Suite unboxed: Cloud PKI, Advanced Analytics, Enterprise App Management, Endpoint Privilege Management, Remote Help and licensing.
Niklas Tinner
Intune operations par excellence
Run Microsoft Intune operations with excellence: RBAC, use cases, app inventory, device lifecycle, monitoring, change management and piloting.
Niklas Tinner
Intune best practices
Microsoft Intune best practices: governance, updates, automation, security, apps, certificates, profiles and compliance for a modern workplace.
Niklas Tinner
The easy Microsoft 365 license guide
Microsoft 365 licensing made easy: license suites, Entra ID P1 and P2, the E5 Security step-up, Intune and Windows 365 licenses explained.
Niklas Tinner
Intune challenges (community edition)
The biggest Microsoft Intune challenges according to the community, with practical advice and field experience on how to solve each of them.
Niklas Tinner
Transition to modern Endpoint Management
Move to modern endpoint management with Intune: hybrid vs. cloud-only, configuration types, common technical challenges and security design.
Niklas Tinner
Windows and Autopilot
Is Autopilot Device Preparation it?
Windows Autopilot vs. Autopilot Device Preparation: the provisioning flow compared, best practices, device association and which one to choose.
Niklas Tinner
Autopilot identities and assignments
Windows Autopilot identities and assignments: corporate vs. personal ownership, hardware hashes, group tags and dynamic group syntax.
Niklas Tinner
Intune - a reference to Kiosk/shared PC mode
Windows kiosk and shared PC mode with Intune: enrollment, configuration profiles, local admin, apps and Windows and Office activation explained.
Niklas Tinner
macOS, iOS and Android
Intune + macOS: why and how to get started
Manage macOS with Microsoft Intune: why Mac in the enterprise, prerequisites, enrollment, settings, remote actions, security and Defender for Endpoint.
Niklas Tinner
Secure macOS Intune Deployment with Defender and Global Secure Access
Secure macOS deployment with Intune, Defender for Endpoint and Global Secure Access: configuration steps for a protected Mac in the enterprise.
Niklas Tinner
Intune and your mobile journey
Manage iOS and Android with Intune: MDM vs. MAM, ownership models, enrollment, configuration, compliance, app protection and app configuration.
Niklas Tinner
Kickstart macOS management with Intune
Kickstart macOS management with Intune: set up a macOS VM, prepare Intune, enroll your Mac and apply first policies from ready-made templates.
Niklas Tinner
Updates
Windows updates - write up
Windows updates explained: update methods, release channels and servicing, and how to manage Windows updates with Intune and Windows Update for Business.
Niklas Tinner
Intune + driver update management - concept summary
Windows driver and firmware updates with Intune: features, prerequisites, deployment rings, automatic approval and the driver update lifecycle.
Niklas Tinner
Summarized: Windows Update for Business reports (former Update Compliance)
Windows Update for Business reports explained: Log Analytics setup, Intune configuration and how the solution replaced Update Compliance.
Niklas Tinner
Security
Endpoint security
Endpoint Privilege Management deployment guide
Intune Endpoint Privilege Management (EPM) deployment guide: use cases, elevation settings and rules policies, and file indicators for standard users.
Niklas Tinner
Dive into Microsoft Security Baselines
Microsoft security baselines deep dive: updating, deployment methods, Intune baselines, Policy Analyzer and HardeningKitty for Windows hardening.
Niklas Tinner
Device Control with Intune
Device control with Microsoft Intune: identify peripherals, build reusable settings and create policies to control USB and removable storage.
Niklas Tinner
Windows LAPS: the comprehensive guide
Windows LAPS guide: features, password backup to Entra ID or Active Directory, password retrieval, post-authentication actions and legacy LAPS migration.
Niklas Tinner
Local admin/privilege management with Intune
Manage local admin rights with Intune: default behavior, Entra ID roles, account protection policies, Endpoint Privilege Management and Windows LAPS.
Niklas Tinner
The bridge from Intune to Defender for Endpoint
Connect Microsoft Intune and Defender for Endpoint step by step: enable the integration, onboard devices and use device risk in compliance policies.
Niklas Tinner
Windows Hello for Business Cloud Trust - Modern approach
Windows Hello for Business cloud trust: key facts, deployment and trust models, and how to roll out passwordless sign-in with Intune.
Niklas Tinner
Tenant security
The easy Intune Multi Admin Approval Guide
Intune Multi Admin Approval (MAA) guide: how two-admin approval works for policies, apps and remote actions, plus considerations from the field.
Niklas Tinner
Protect Intune against Attacks
Protect Microsoft Intune against attacks: phishing-resistant MFA for admins, just-in-time access and Multi Admin Approval to prevent mass wipes.
Niklas Tinner
Top 10 Entra & Intune Security Tips
Top Microsoft Entra and Intune security tips: overlooked defaults like compliance settings and practical hardening steps for your tenant.
Niklas Tinner
Compliance
Intune compliance intro
Intune device compliance explained: compliance policies, Conditional Access, actions for noncompliance, tenant settings and a deployment plan.
Niklas Tinner
RBAC
Intune RBAC permissions
Intune role-based access control (RBAC): role concept, migrating roles, governance and auditing who can do what in the Intune admin center.
Niklas Tinner
Device management RBAC design (Intune & Entra ID)
Device management RBAC design with Intune and Entra ID: scope tags, administrative units and a real-world role design example.
Niklas Tinner
Certificates and network access
Intune certificate deployment overview
Intune certificate deployment overview: PKCS vs. SCEP/NDES, certificate templates, CA settings and the Intune Certificate Connector.
Niklas Tinner
Enable network authentication with Entra ID only joined devices & Intune
802.1X network authentication for Microsoft Entra ID joined devices managed by Intune: the challenges and a certificate-based solution.
Niklas Tinner
Intune NDES & SCEP explained
Intune NDES and SCEP certificate deployment explained: solution concept, components, security considerations, prerequisites and field notes.
Niklas Tinner
Troubleshooting
The ultimate Intune Troubleshooting Guide
Intune troubleshooting guide: a structured approach with the admin center, device sync, MDM diagnostics, IME logs and Event Viewer to find the cause.
Niklas Tinner
Autopilot & Device Preparation Troubleshooting
Windows Autopilot and Device Preparation troubleshooting: common error codes, enrollment restrictions, ESP issues and how to fix them in Intune.
Niklas Tinner
Automation, Graph API and monitoring
Get started with Graph API + Explorer and Powershell - how to import/export Intune profiles
Get started with Microsoft Graph Explorer and PowerShell for Intune: export and import configuration profiles through the Graph API step by step.
Niklas Tinner
Intune event based automation with alert rules
Event-based Intune automation: use Azure Monitor alert rules, action groups and Logic Apps to notify admins or trigger remediation.
Niklas Tinner
Intune automation enlightenment - Azure Logic App + Graph API + Managed Identity
Automate Intune with Azure Logic Apps, Microsoft Graph and a Managed Identity: secure building blocks and use cases like a device inventory.
Niklas Tinner
Intune change tracking (Azure Workbook)
Track configuration changes in Microsoft Intune with an Azure Monitor workbook: audit profiles, apps, scripts and device operations in one view.
Niklas Tinner
Azure Managed Identity - access to Graph API and Azure resources
Azure Managed Identity for Microsoft Graph and Azure resources: assign API permissions and authenticate runbooks without storing any secrets.
Niklas Tinner