EXPLORE THE NOTEBOOK
Notes from the command line, the workbench, and the vintage computer shelf.
A plain-spoken tour of what Intune actually handles, where it stops, and the identity decisions you want settled before the first device shows up.
Getting devices into Intune · Note 1 ↗The Settings app route into Intune, which of its three options to pick, and why the device might show up as personal when you didn't want it to.
Getting devices into Intune · Note 2 ↗A practical checklist for taking a device that gets its security policy through Defender for Endpoint and enrolling it in Intune without leaving a gap.
Getting devices into Intune · Note 7 ↗My upgrade plan for a dual-Xeon Dell Precision T7500, with 96GB of ECC RAM, an LSI SAS/SATA controller and two 12TB drives, plus the one cabling detail I'd double-check.
The retro workbench · Note 10 ↗Point each domain controller at a partner DC first and itself (127.0.0.1) last, the way Microsoft recommends, across all your DCs in one pass.
Keeping Active Directory tidy · Note 7 ↗Audit who still talks SMBv1 to your machines, then switch it off for good, with one script and three modes.
PowerShell craft · Note 6 ↗Turn on Dell's Password Bypass so patch reboots don't sit at a power-on password prompt all night, then turn it back off when you're done.
Dell BIOS passwords, without the pain · Note 4 ↗How I think about patch risk now. Sort updates by blast radius, roll them out in rings, decide what "bad" looks like up front, and know your way back before you need it.
Windows Update, untangled · Note 1 ↗List the preview handlers installed on a PC, see which one each file type uses, and point extensions like .log, .ps1 or .json at the handler you want.
File wrangling · Note 5 ↗Create the Tier 2 OU, its sub-OUs and the group that manages them, and delegate just enough rights for workstation and user admin work.
Keeping Active Directory tidy · Note 2 ↗Dump every OU in the domain to a spreadsheet, with a readable path, depth, GPO link count and, if you want, how many objects live in each one.
Keeping Active Directory tidy · Note 3 ↗My v2 build spec for an all-in-one cyberdeck built around AMD's BC-250 mining board, a printed slim console case, a 15.6-inch touch panel, and Bazzite running the niri window manager.
The retro workbench · Note 11 ↗
