sbd.org.uk
All topics

Endpoint Management

Intune policies, application packaging, security baselines, and device lifecycle.

8 articles

M365 Add-On Costs: Evaluation Framework
·16 min read

M365 Add-On Costs: Evaluation Framework

Control M365 add-on costs: a five-question framework for Intune Suite, Entra ID Governance, Copilot, and Purview, plus a PowerShell audit script.

microsoft-365licensingcost-optimisationintuneentra-idcopilotpurviewgovernancedefenderteams-premiumpowershellgraph-api
M365 Solution Architect: What the Role Does
·13 min read

M365 Solution Architect: What the Role Does

What an M365 Solution Architect actually does: standards ownership, security architecture, licensing strategy, and delivery oversight. Beyond diagrams.

microsoft-365architecturegovernanceentra-idintuneautomationsecuritylicensing
Intune Security Baselines vs CIS Benchmarks
·19 min read

Intune Security Baselines vs CIS Benchmarks

Compare Intune security baselines against CIS benchmarks with a PowerShell export-and-diff workflow: ASR deployment and deviation tracking included.

microsoft-365intunesecurityendpoint-managementpowershellgraph-apiwindows-security
Self-Maintaining Intune App Catalogue with AI
·12 min read·Practical AI for Endpoint Management

Self-Maintaining Intune App Catalogue with AI

How I built a self-maintaining Intune app catalogue: Graph API pulls inventory, AI classifies it, and surfaces your MSIX migration shortlist automatically.

windowsintuneaigraph-apipower-automatemsixautomation
Intune Endpoint Management: AI, APIs, Copilot
·15 min read·Windows Endpoint Management

Intune Endpoint Management: AI, APIs, Copilot

How AI changes Intune endpoint management: Copilot agents, API-driven policy configuration, and intelligent drift detection instead of manual clicks.

intuneaiautomationcopilotdevopsendpoint-managementagentic-aimicrosoft-graph-apidrift-detection
Application Packaging: Win32 vs MSIX vs Store
·12 min read·Windows Endpoint Management

Application Packaging: Win32 vs MSIX vs Store

Win32 vs MSIX vs Microsoft Store for Intune: a decision framework covering COM interoperability, kernel drivers, deployment rings, and MSIX App Attach.

windowsintunedevopsmsixapplication-packaging
Configuration as Code for Endpoint Management
·7 min read·Windows Endpoint Management

Configuration as Code for Endpoint Management

Configuration as Code for Intune with Microsoft365DSC: version control, drift detection, and automated deployment via Git, without becoming a developer.

intunegitopsdevopsmicrosoft365dscautomation
Windows Estate Standardisation: The Foundation
·8 min read·Windows Endpoint Management

Windows Estate Standardisation: The Foundation

How to build a repeatable, auditable Windows estate using Intune, Autopilot, and GitOps: the foundation for Zero Trust and Copilot-ready endpoints.

windowsintunegitopszero-trust

Get the next one by email

Long, specific write-ups on M365 architecture and security, worked out against real tenants rather than summarised from documentation. Sent rarely, and only when it is worth your time.