This is the home of device management on OngoingIdeas: SCCM/MECM, Microsoft Intune, and everything in between. You will find the structured SCCM Learning series, a 15-day Intune real-time troubleshooting series built from enterprise scenarios, and the migration guides for admins moving from Group Policy to the cloud.
Start here
- From GPO to Microsoft Intune: A Practical Guide to Cloud-First Policy Management
- Windows Device Not Enrolling into Intune — Day 1 of the Microsoft Intune Real-Time Troubleshooting Series
- SCCM Learning – Part 5: Software Update Management & Patch Deployment
SCCM Learning – Part 06: Software Update Troubleshooting
Software Update Management is one of the most critical components of Microsoft Configuration Manager (SCCM/MECM). Keeping systems patched and compliant is essential for security, stability, and operational efficiency. However, administrators frequently encounter situations where updates fail to appear, download, install, or report compliance correctly. The key to successful troubleshooting is understanding where the software update…
SCCM Learning – Part 5: Software Update Management & Patch Deployment
Keeping systems secure and compliant is one of the most critical responsibilities of any SCCM/MECM administrator. A well-designed patch management strategy helps organizations reduce security risks, maintain system stability, and ensure endpoints remain up to date with the latest Microsoft updates. In Part 05 of the SCCM Learning Series, we’ll explore the key components of…
Win32 App Packaging
Win32 App Packaging in Intune: What Really Happens After Deploying a Win32 Application from Intune? What happens after you package an installer with Intune WinAppUtil and upload it to Microsoft Intune? This guide follows the complete Win32 application lifecycle, from the original installer and encrypted package to device download, requirement evaluation, installation, detection, and reporting.…
From GPO to Microsoft Intune: A Practical Guide to Cloud-First Policy Management
For years, Group Policy Objects (GPOs) have been the backbone of Windows device management in enterprise environments. As organizations continue embracing cloud-first strategies, remote work, and modern device management, the question is no longer whether to move to Microsoft Intune, but how to approach the transition strategically. The reality is that migrating from GPOs to…
SCCM Learning – Part 4: Application Deployment
Application deployment is one of the most important and practical aspects of Microsoft Configuration Manager (SCCM/MECM). Whether you’re managing a home lab or an enterprise environment with thousands of endpoints, understanding how applications are deployed is essential for successful software management. In this article, we’ll explore the core concepts behind SCCM Application Deployment, including deployment…
SCCM Learning – Part 3: SCCM Client Communication Flow
Understanding how the SCCM client communicates with the various infrastructure components is essential for effective administration, troubleshooting, and deployment management. In this part of the SCCM Learning Series, we’ll explore the complete client communication flow and how different SCCM roles work together to deliver policies, applications, operating systems, and software updates. Whether you’re new to…
SCCM Learning – Part 02: Site System Roles Explained
Microsoft Configuration Manager (SCCM/MECM) is built on a collection of Site System Roles that work together to manage devices, deploy applications, deliver updates, and support operating system deployments. Understanding these roles is essential for every SCCM Administrator because each plays a specific part in keeping the environment healthy, secure, and efficient. In this article, we’ll…
Microsoft 365: Understanding the Architecture Behind the Modern Workplace
Microsoft 365 is far more than a collection of productivity applications. It is a tightly integrated cloud ecosystem that connects identity, collaboration, device management, security, and compliance into a single platform. For IT professionals, administrators, and anyone beginning their Microsoft 365 journey, understanding how these core services work together is essential. Once you understand the…
SCCM Learning – Part 01: Understanding the Core Components That Power Enterprise Device Management
Microsoft Configuration Manager (SCCM), now part of Microsoft Endpoint Configuration Manager, remains one of the most widely used enterprise management solutions for Windows environments. Understanding the architecture behind SCCM is essential for administrators responsible for software deployment, patch management, operating system deployment, compliance reporting, and endpoint management. In this article, we’ll explore the key SCCM…
Intune Admin? Knowing Intune Alone Is Not Enough
Modern endpoint management is no longer limited to deploying policies and managing devices through Microsoft Intune. In today’s enterprise environments, successful endpoint administrators must understand how multiple Microsoft technologies work together to deliver secure, compliant, and productive user experiences. Many IT professionals focus heavily on learning Intune, but when real-world issues arise, troubleshooting often extends…
Microsoft Intune: Deployment Plan vs. Deployment – Do You Know the Difference?
Managing enterprise endpoints at scale requires more than simply assigning an application or configuration policy and clicking Deploy. Successful endpoint management depends on having a structured approach that balances speed, stability, and risk. One area that often causes confusion is the difference between a Deployment Plan and a Deployment within an organization’s device management strategy.…
Still Packaging MSI Applications as Win32 Apps in Intune? Here’s Why I Do.
When deploying applications with Microsoft Intune, one question comes up regularly: Why package an MSI application as a Win32 app when Intune can install it directly as a Line-of-Business (LOB) app? The short answer is simple: Because “it installs” is not the same as “it is manageable.” In enterprise environments, application deployment is only one…
Microsoft Pauses KB5002907 Update After Office License Deactivations
Microsoft has temporarily paused the rollout of the KB5002907 update after reports surfaced that the update was unexpectedly deactivating, and in some cases completely removing, perpetual Microsoft Office 2016 and Office 2019 installations. The update, officially titled “Optional update for out-of-date Microsoft 365 Apps installations,” was designed to help organizations bring Microsoft 365 Apps installations…
Microsoft Entra Removes the First MFA Barrier: Passwordless Can Now Be the Starting Point
Microsoft is making a significant change to the authentication registration experience in Microsoft Entra. Soon, users will be able to register phishing-resistant authentication methods as their very first MFA method, eliminating the previous requirement to first enroll weaker methods such as SMS or voice authentication. This update represents another important step toward a passwordless future…
Azure Virtual Desktop Alert: Windows App Endpoint Changes Are Now in Effect — What to Check
Organizations using Azure Virtual Desktop (AVD) should take note of an important change that is now in effect. Microsoft has transitioned the Windows App for Azure Virtual Desktop to new client-side endpoints. Administrators who have not yet updated their network configurations should review and update them now to ensure uninterrupted access for end users. What’s…
Microsoft Fixes File History Backup Failures Caused by September 2026 Windows Updates
Organizations and home users affected by recent File History backup issues can finally breathe a sigh of relief. Microsoft has released a fix for a known problem introduced by the September 2026 Windows security updates that prevented File History from creating or updating backups on affected systems. File History Backups Impacted After September Updates Following…
Microsoft 365 Admin Alert: Critical September 30 Deadlines and Upcoming Changes You Can’t Ignore
Microsoft 365 administrators have a busy roadmap ahead, and September 30 is shaping up to be one of the most important dates of the year. Alongside two critical deadlines, Microsoft is rolling out several significant changes that will impact identity management, authentication, storage, and the overall user experience. Organizations that fail to prepare could face…
IAM vs PAM: What’s the Difference and Why Your Organization Needs Both
Identity and access management is one of the foundations of modern cybersecurity. However, many professionals use IAM and PAM interchangeably, even though they solve different security challenges. While both are focused on controlling access, they operate at different levels of risk. What is IAM? Identity and Access Management (IAM) manages digital identities and access across…
Follow My Blog
Get new content delivered directly to your inbox.