Labs & Concepts

A 92-slide lab documenting an existing Microsoft Defender for Endpoint deployment on macOS through Intune. Covers onboarding, permissions, protection policies, local health, a completed quick scan and current telemetry, while retaining an unresolved portal health discrepancy.

A 28-slide guide to the Mac lifecycle and ADE inventory diagnosis, covering Apple Business Manager, Intune token renewal, synchronization recovery and profile assignment. Conceptual illustrations and reconstructed screens distinguish portal results from pending device validations.

A 20-slide illustrated walkthrough of macOS Automated Device Enrollment using Apple Configurator on iPhone, Apple Business Manager and Microsoft Intune. Recreated screens with example data cover MDM assignment, token sync, ADE profile assignment and Setup Assistant.

A 48-slide Ubuntu 24.04 lab covering Microsoft Defender for Endpoint installation, tenant onboarding, agent health changes and Live Response validation. Includes pending detection, stability and licensing checks, plus the Debian baseline for Part 2.

A 43-slide lab walkthrough of macOS Platform SSO registration, browser SSO and Kerberos access to AD file shares. Includes policy delivery, local registration checks, tickets, SMB access and Conditional Access scope, with clear validation boundaries.

A 46-slide lab walkthrough of macOS Direct Enrollment without user affinity, including management profile installation, Intune inventory, device renaming and configuration results. Platform SSO registration, Entra sign-in and encryption remain separate validation tasks.

A 16-slide conceptual guide to macOS Direct Enrollment in Microsoft Intune, covering prerequisites, profile installation, ACME certificates, user affinity, supervision and the comparison with ADE.

A 31-slide conceptual guide to Ubuntu identity, Intune enrollment, compliance and protected access, covering platform requirements, tenant preparation, custom checks, Conditional Access, SSO and pilot validation.

Estimated reading and study time: 45–60 minutes. Allow time to review 48 slides, inspect the evidence and absorb the concepts. This estimate excludes reproducing the procedures and waiting for installation, synchronization or policy delivery. This experimental Debian 13 lab follows enrollment through the Microsoft Intune app, MFA and custom compliance configuration. It records a final Compliant state in the app and Intune inventory and provides a concrete example for discussi

A 22-slide Ubuntu 24.04 lab documenting Entra device identity, Intune enrollment and compliance, Edge access and sign-in logs. Token provenance and require-compliant-device enforcement remain separate validation steps.

A 57-slide lab covering GPO-based Intune enrollment and recovery from domain sign-in error 1787 after correcting an Intune-delivered primary DNS suffix. Final Hybrid Join, PRT, directory DNS/SPN and compliance checks remain separate follow-up items.

A 34-slide Windows lab covering policy delivery, Intune compliance, BitLocker verification and corporate wallpaper on Windows 11 Pro. Includes the remaining checks for dynamic group membership, recovery-key escrow and functional security validation.

A 56-slide Windows lab covering Microsoft Entra join, automatic Intune enrollment, enrollment restrictions and user PRT validation. Compliance and Windows Hello remain follow-up items.

A 35-slide conceptual guide to user-driven Autopilot with Microsoft Entra hybrid join, covering prerequisites, connectivity, Intune Connector and OU permissions, deployment profiles, ESP and post-deployment validation.

A 28-slide conceptual guide to Windows Autopilot requirements, covering software and hardware, connectivity, licensing, tenant configuration and administrative permissions, with a deployment readiness checklist.

A 63-slide lab walkthrough of OOBE, ESP progress and domain sign-in, followed by Hybrid Join, PRT and device identity verification. Final ESP completion, MDE runtime health and the disabled-object cause remain open.

A 67-slide lab walkthrough covering AD DS, Entra Connect, the Intune Connector, Hybrid profiles, VMware preparation and hardware hash registration. Part 1 ends before deployment and enrollment validation.

A 35-slide Hyper-V lab walkthrough covering OOBE, organizational sign-in, ESP completion and desktop access, with Autopilot profile, device identity and Intune validation still pending.

A 24-slide lab documenting hardware hash registration and Autopilot profile assignment for a Hyper-V VM. Deployment validation remains pending.