Names withheld, details real.
References available on request.
Intune from nothing
Problem. A growing software company on Business Premium with laptops nobody managed and no MFA policy.
Work. Intune enrolment, compliance, Conditional Access and BitLocker set up from a blank tenant, joiner and leaver process written.
Result. Every device enrolled and encrypted within three weeks, run month to month since.
Windows and Mac, one console
Problem. Macs outside any management and FileVault keys nowhere.
Work. Entra ID Platform SSO on macOS, FileVault escrow, Defender on both platforms, Apple Business Manager for zero touch setup.
Result. One console for both platforms, every recovery key in Intune.
Apps that install the same way every time
Problem. Installers that failed silently on half the fleet.
Work. Packages wrapped to run silently, detection rules that check a real file version, every package tested on a clean machine, an upgrade, and with the app open.
Result. Deployments that report the truth.