matt-taylor.tech
← Back to projects

Work · National food brokerage

Intune fleet management and proactive remediations

Microsoft Intune PowerShell Proactive Remediations Win32 app packaging Autopilot

I built the Intune automation that keeps a Windows-heavy fleet across 51 offices consistent, clean, and self-healing without hands-on visits. It is the endpoint layer of running IT for a national footprint: standardizing how machines provision, stay on baseline, and recover from common drift.

Proactive remediations

Scheduled detect-and-remediate pairs let devices correct common drift without a hands-on visit. Coverage includes bloatware and OEM-cruft removal, disabling Fast Boot, forcing printer defaults, clearing unwanted browsers, and posting reboot-warning notifications, alongside supporting endpoint scripts.

App packaging and provisioning

  • Win32 packaging line-of-business apps and OEM utilities packaged as .intunewin for managed deployment, including a BIOS-password automation.
  • Cleanup at scale batch removal of legacy antivirus and inherited agents during onboarding.
  • Consistent naming per-division device rename scripts keyed off the hardware serial, so every machine lands on the naming standard automatically.
  • Policy assets per-division browser bookmark templates and winget/Chocolatey update orchestration to keep software current.

The result is a fleet that provisions itself onto standard, stays on baseline, and heals common drift without a technician touching each machine.