
The Zero-Touch Way to Move a Domain-Joined Fleet Into Intune
Group Policy can bulk-enroll devices that are already joined to on-premises Active Directory into Intune, with no local admin rights and no end-user interaction required.

Nick is not just a CEO, he's a respected thought leader and influencer in the MSP space. Tens of thousands of MSPs learn through his YouTube channel, T-Minus365. Nick has been honored as a three-time Microsoft MVP for his educational content; his expertise and influence are the backbone of our mission, ensuring that you are in the best hands when it comes to security.
Nick joined Pax8 in 2017, where he would ultimately oversee product management for PSA and Microsoft integrations. Following his tenure at Pax8, Nick has continued to demonstrate his leadership prowess as an executive at various MSPs, culminating in his most recent role at Sourcepass.
Nick holds a Bachelor's Degree in Business Management from Florida State University, as well as a Minor Degree in Entrepreneurship. In his free time, Nick is an avid hiker, reader, and fitness-junkie.

Group Policy can bulk-enroll devices that are already joined to on-premises Active Directory into Intune, with no local admin rights and no end-user interaction required.

Intune tags every enrolled device corporate or personal automatically, and that tag decides whether it lands under MDM or MAM. Here is exactly how the classification is made.

Intune's default auto-enrollment puts every device under full MDM, including the cell phones your users never wanted managed. Here is how to scope MDM and MAM the right way.

Federating an Azure AD domain to Apple Business Manager lets users sign in with their existing Azure AD credentials and creates Managed Apple IDs automatically. Here is what it unlocks.

A PowerShell script that builds an IT Glue flexible asset and fills it with every Intune-enrolled device across all your customers, including compliance state, encryption, and Autopilot status.

A PowerShell script that documents Microsoft 365 license usage per tenant in Syncro: every licensed and unlicensed user, plus available versus consumed seats, across all your customers.

April 2021 for MSPs: Teams adds webinars, meeting locks and dial-in IDs, Exchange ships a new admin center and spoof controls, and Conditional Access gains GPS-based named locations.

Five PowerShell scripts that auto-document licensing, MFA status, Exchange, and Intune into Syncro, and create user contacts on the customer record, so the documentation maintains itself.

Forgotten licenses on converted shared mailboxes quietly drain margin. Here is a scheduled Azure Function, plus a local script, that finds and strips them across all your customers.

Move recurring PowerShell jobs off an on-prem server and into serverless Azure Functions, authenticating to every customer tenant with the secure application model.

Microsoft lets end users buy subscriptions on their own credit card, outside your CSP margin. Here is a one-script way to disable self-service purchasing across all the tenants you manage.

March 2021's Microsoft 365 changes that matter to MSPs: attendee camera controls in Teams, granular EOP quarantine release, new least-privilege admin roles, and self-service purchase expansion.