Windows update rings in Intune
Pilot, broad and late rings, deferrals and deadlines, driver updates, pausing a bad update, Windows Autopatch and the reports to check each month.
Guides
Intune, endpoint and Conditional Access guides
Practical guides to device management and sign-in security in Microsoft 365, written for owners, office managers and internal IT people at businesses of 10 to 150 staff. Each one is checked against Microsoft's documentation and dated.
Intune configuration profiles
Settings catalog, templates, endpoint security policies and baselines; assignment and filters; how conflicts are settled; and a starting set for a small fleet.
Compliance policies and Conditional Access
What compliance can check on Windows, Mac, iPhone and Android, grace periods and actions, and the safe order to require compliant devices.
A Conditional Access baseline
Emergency accounts, MFA, blocking legacy authentication, managed devices and risky sign-ins, in the order to build them and with report-only testing.
Rolling out Intune and Autopilot
Prerequisites, the order to do things in, what staff see on day one, and the pitfalls that stall a small-business rollout.
Is Business Premium worth it?
What Business Premium adds over Business Standard, when the upgrade earns its keep for a 10 to 150 person business, and seven licensing mistakes to avoid.
Handover checklist for changing providers
A printable list of what to collect from an outgoing IT provider: admin accounts, break-glass, domains and DNS, licensing, Intune, backups and documentation.
Microsoft 365 tenant self-check
22 yes or no questions that sort your answers into what to look at first. Runs in your browser and sends nothing.
Optional, lower-priority topics
Most businesses don't need these. We focus on managing company laptops and computers, and we don't recommend enrolling phones by default. Where protecting work data on personal phones is genuinely needed, this guide covers the lighter option.
Work data on personal phones (optional)
An optional, lower-priority topic. Most businesses don't need it. Where they do, Intune app protection guards work data on staff-owned phones without enrolling them.
Which guide fits your situation
- Windows updates restart people mid-meeting, or nobody knows which laptops are patched. Start with Windows update rings in Intune.
- Intune is set up but nobody can explain what each policy does. Read Intune configuration profiles, especially the sections on conflicts and assignment.
- You want only company devices to reach company data. Intune compliance policies covers the checks and the safe order to enforce them.
- Laptops are set up by hand. The Intune and Autopilot rollout guide sets out the order of work.
- You've had a suspicious sign-in, or an insurer is asking about MFA. The Conditional Access baseline covers the sign-in rules and how to test them safely.
- You're renewing licences. Read Business Premium, explained before you sign.
- You're changing IT providers. Print the tenant handover checklist and send it to them.
- You're not sure where you stand. The tenant self-check sorts your answers into what to look at first.
How these guides are written
Each guide covers one job we do on every tenant we manage. Technical details are checked against Microsoft Learn, with the pages listed at the end of each guide and the month we last checked them. Where we give our own suggested values or approach, we say so. We leave out licence prices, because they change and we pass licences through at cost anyway.
If something here is out of date or unclear, email [email protected] and we will fix it.
Book a free tenant review.
Read-only, no obligation, and you keep the findings either way. We usually respond same day.