Field notes on enterprise endpoint management — Jamf Pro, Microsoft Intune, Windows Autopilot, Apple Business Manager, zero-touch deployment, Conditional Access and compliance. Written from work on real 1,000+ device fleets in regulated environments, not lab setups.
A guided macOS app that replaces hand-edited XML for Jamf Setup Manager and Setup Checklist configs, with a live plist preview and workflow preview.
The Restrict access to Microsoft Entra admin center toggle blocks casual browsing only -- it does nothing to PowerShell, Graph, or admin roles. Here is what actually closes the gap: Conditional Access.
How to set up user-centric access reviews in Microsoft Entra ID Governance -- build a catalog, pick the right template, and let reviewers approve or deny everything for a person in one…
A practical, staged-rollout walkthrough for configuring Windows update rings in Microsoft Intune — IT pilot, department, fleet, and a dedicated ring for RDS/RDP hosts.