Leading the team that runs a mixed Windows and Mac environment for approximately 1,000 users: two distinct platforms, unified through Intune, with the standards and processes that keep both productive and secure.
Leading end-user computing for approximately 1,000 users across a mixed Windows and Mac environment means setting consistent policies, security baselines, and support standards across two distinct platforms, and making sure the team can deliver on them.
Overseeing procurement, enrollment, and retirement of Windows laptops and MacBooks: Autopilot for Windows, Jamf for Mac, both managed through Intune.
Managing software packaging, distribution, and updates through Intune, ensuring users have the right tools with minimal disruption.
Enforcing device compliance policies and configuration baselines, backed by a layered endpoint security stack: application allowlisting, EDR, browser security, data loss prevention, and continuous vulnerability management.
User provisioning and deprovisioning, Entra ID group management, MFA enforcement, and Conditional Access policy administration.
Supporting hybrid work through Azure Virtual Desktop and remote access solutions that keep distributed users productive and secure.
Owning the escalation path for complex desktop and application issues, working with the helpdesk to fix root causes and reduce repeat contacts.
A mixed Windows and Mac environment at approximately the 1,000-user scale, managed through a single Intune tenant with platform-specific configuration profiles.
| Device Type | Platform | Management | Notes |
|---|---|---|---|
| Windows Laptops | Windows 11 | Intune / Autopilot | Zero-touch provisioning via Windows Autopilot. |
| MacBooks | macOS (current release) | Intune / Jamf | Enrolled and managed via Jamf with Intune integration for compliance policies. |
| Mobile Devices | iOS / Android | Intune MAM/MDM | BYOD and COPE policies enforced via Intune app protection. |
| Virtual Desktops | Windows 11 (AVD) | Azure Virtual Desktop | Remote and contractor access. Centrally managed session hosts. |
The platforms and tools that keep approximately 1,000 endpoints managed, secure, and supported.
A snapshot of the recurring operational work my team runs to keep approximately 1,000 endpoints running smoothly.
Reviewing Intune compliance dashboards, addressing non-compliant devices, and reviewing escalations from the EUC queue with the team.
Monitoring Windows Update for Business rings and macOS update policies in Intune, reviewing application update deployments across both platforms, and validating patch compliance targets.
Coordinating device setup via Autopilot for Windows and Jamf for Mac, account creation, license assignment, and application access for new employees and contractors.
Reviewing Entra ID group memberships, application assignments, and license utilization, removing stale access and reclaiming unused licenses.
Generating device health, compliance, and software inventory reports for IT leadership and, where applicable, compliance evidence packages.
Identifying devices approaching end of life, coordinating procurement cycles, and planning deployment waves to minimize user disruption.
Keeping device configuration policies, runbooks, and onboarding documentation current as the environment evolves.
Happy to connect with IT teams navigating the complexities of modern endpoint management at scale.
Get in Touch Back to Home