
The Zero-Touch Way to Move a Domain-Joined Fleet Into Intune
Group Policy can bulk-enroll devices that are already joined to on-premises Active Directory into Intune, with no local admin rights and no end-user interaction required.
Microsoft product

Group Policy can bulk-enroll devices that are already joined to on-premises Active Directory into Intune, with no local admin rights and no end-user interaction required.

Intune tags every enrolled device corporate or personal automatically, and that tag decides whether it lands under MDM or MAM. Here is exactly how the classification is made.

Intune's default auto-enrollment puts every device under full MDM, including the cell phones your users never wanted managed. Here is how to scope MDM and MAM the right way.

Federating an Azure AD domain to Apple Business Manager lets users sign in with their existing Azure AD credentials and creates Managed Apple IDs automatically. Here is what it unlocks.

A PowerShell script that builds an IT Glue flexible asset and fills it with every Intune-enrolled device across all your customers, including compliance state, encryption, and Autopilot status.

A PowerShell script that documents Microsoft 365 license usage per tenant in Syncro: every licensed and unlicensed user, plus available versus consumed seats, across all your customers.

April 2021 for MSPs: Teams adds webinars, meeting locks and dial-in IDs, Exchange ships a new admin center and spoof controls, and Conditional Access gains GPS-based named locations.

Five PowerShell scripts that auto-document licensing, MFA status, Exchange, and Intune into Syncro, and create user contacts on the customer record, so the documentation maintains itself.

Microsoft lets end users buy subscriptions on their own credit card, outside your CSP margin. Here is a one-script way to disable self-service purchasing across all the tenants you manage.

March 2021's Microsoft 365 changes that matter to MSPs: attendee camera controls in Teams, granular EOP quarantine release, new least-privilege admin roles, and self-service purchase expansion.

Pair Apple Business Manager with Microsoft Intune to ship preconfigured Macs and iPhones straight to remote users, with corporate data kept separate from personal.

A GoDaddy-federated Microsoft 365 tenant can't move to CSP or Direct. Here is how to defederate it in place, keep every user account, and bring it under your management with no downtime.