Microsoft product
Group Policy can bulk-enroll devices that are already joined to on-premises Active Directory into Intune, with no local admin rights and no end-user interaction required.
Intune tags every enrolled device corporate or personal automatically, and that tag decides whether it lands under MDM or MAM. Here is exactly how the classification is made.
Intune's default auto-enrollment puts every device under full MDM, including the cell phones your users never wanted managed. Here is how to scope MDM and MAM the right way.
Federating an Azure AD domain to Apple Business Manager lets users sign in with their existing Azure AD credentials and creates Managed Apple IDs automatically. Here is what it unlocks.
Forgotten licenses on converted shared mailboxes quietly drain margin. Here is a scheduled Azure Function, plus a local script, that finds and strips them across all your customers.
Move recurring PowerShell jobs off an on-prem server and into serverless Azure Functions, authenticating to every customer tenant with the secure application model.
Microsoft lets end users buy subscriptions on their own credit card, outside your CSP margin. Here is a one-script way to disable self-service purchasing across all the tenants you manage.
March 2021's Microsoft 365 changes that matter to MSPs: attendee camera controls in Teams, granular EOP quarantine release, new least-privilege admin roles, and self-service purchase expansion.
Azure AD Connect Cloud Sync is a lightweight agent that finally syncs multiple disconnected forests into one tenant. Here is where it wins for MSPs and where it still falls short.
Pair Apple Business Manager with Microsoft Intune to ship preconfigured Macs and iPhones straight to remote users, with corporate data kept separate from personal.
A GoDaddy-federated Microsoft 365 tenant can't move to CSP or Direct. Here is how to defederate it in place, keep every user account, and bring it under your management with no downtime.
Microsoft retires baseline policies and enforces Security Defaults on February 29, 2020. Here are two ways to require MFA without breaking your copiers, ticketing systems, and PowerShell.
