Archive
Intune's default auto-enrollment puts every device under full MDM, including the cell phones your users never wanted managed. Here is how to scope MDM and MAM the right way.
Federating an Azure AD domain to Apple Business Manager lets users sign in with their existing Azure AD credentials and creates Managed Apple IDs automatically. Here is what it unlocks.
A PowerShell script that builds an IT Glue flexible asset and fills it with every Intune-enrolled device across all your customers, including compliance state, encryption, and Autopilot status.
A PowerShell script that documents Microsoft 365 license usage per tenant in Syncro: every licensed and unlicensed user, plus available versus consumed seats, across all your customers.
April 2021 for MSPs: Teams adds webinars, meeting locks and dial-in IDs, Exchange ships a new admin center and spoof controls, and Conditional Access gains GPS-based named locations.
Five PowerShell scripts that auto-document licensing, MFA status, Exchange, and Intune into Syncro, and create user contacts on the customer record, so the documentation maintains itself.
Forgotten licenses on converted shared mailboxes quietly drain margin. Here is a scheduled Azure Function, plus a local script, that finds and strips them across all your customers.
Move recurring PowerShell jobs off an on-prem server and into serverless Azure Functions, authenticating to every customer tenant with the secure application model.
Microsoft lets end users buy subscriptions on their own credit card, outside your CSP margin. Here is a one-script way to disable self-service purchasing across all the tenants you manage.
March 2021's Microsoft 365 changes that matter to MSPs: attendee camera controls in Teams, granular EOP quarantine release, new least-privilege admin roles, and self-service purchase expansion.
Azure AD Connect Cloud Sync is a lightweight agent that finally syncs multiple disconnected forests into one tenant. Here is where it wins for MSPs and where it still falls short.
Pair Apple Business Manager with Microsoft Intune to ship preconfigured Macs and iPhones straight to remote users, with corporate data kept separate from personal.
A GoDaddy-federated Microsoft 365 tenant can't move to CSP or Direct. Here is how to defederate it in place, keep every user account, and bring it under your management with no downtime.
January 2021's Microsoft 365 changes for MSPs: a stricter Teams lobby setting, more secure connector webhook URLs, the Skype for Business Online Connector retirement, and Intune OS support cutoffs.
GoDaddy email comes in two flavors, IMAP and the 365 syndicate program, and each needs a different move. Here are the tools, the playbooks, and why some tenants need a full migration.
Microsoft retires baseline policies and enforces Security Defaults on February 29, 2020. Here are two ways to require MFA without breaking your copiers, ticketing systems, and PowerShell.
A full walkthrough for migrating on-prem home drives to each user's personal OneDrive: pre-provision the sites, grant impersonation rights, and run the free SharePoint Migration Tool.
An Azure Logic App can pull Microsoft Graph security alerts on a timer and post them to a Teams channel with no scripting. Here is the build, the cost, and where it falls short.
