Overview
Designed and deployed a complete Intune device management framework for an organization with 5+ regional offices. Every stage of the device lifecycle is automated - from Autopilot enrollment and naming through app deployment, VPN configuration, and ongoing remediation.
Key Features
- Autopilot hardware hash collection and enrollment automation
- Location-specific device naming conventions (ACE, ANE, AMW, ASE, ASW) applied automatically during provisioning
- Per-site VPN profiles deployed based on office location
- Dell bloatware and optimizer removal scripts
- Standardized power settings for desktop and remote access scenarios
- Initial Windows Update orchestration post-deployment
- Browser bookmark deployment per location for quick access to admin portals
- 14+ remediation script pairs (detection + remediation) for ongoing compliance
Technical Highlights
- PowerShell scripts deployed as Intune Win32 apps and remediation packages
- Autopilot profile assignment with group tags
- VPN configuration via PowerShell with site-specific connection parameters
- Task Scheduler integration for recurring maintenance tasks
- Registry-based run frequency limiting to prevent redundant executions
- Structured logging for deployment troubleshooting