matt-taylor.tech
← Back to projects

Work · National food brokerage · Since 2023

Intune fleet management and proactive remediations

Microsoft Intune PowerShell Proactive Remediations Win32 app packaging Autopilot

The endpoint side of running IT for a national footprint: a body of Intune automation that keeps a Windows-heavy fleet across 80+ offices consistent, clean, and self-healing without hands-on visits.

Proactive remediations

Eleven detect-and-remediate pairs run on a schedule, each pairing a detection script with a remediation script so a device fixes itself when it drifts. Coverage includes bloatware and OEM-cruft removal, disabling Fast Boot, forcing printer defaults, clearing unwanted browsers, and posting reboot-warning notifications, alongside roughly 29 supporting scripts.

App packaging and provisioning

  • Win32 packaging line-of-business apps and OEM utilities packaged as .intunewin for managed deployment, including a BIOS-password automation.
  • Cleanup at scale batch removal of legacy antivirus and inherited agents during onboarding.
  • Consistent naming per-division device rename scripts keyed off the hardware serial, so every machine lands on the naming standard automatically.
  • Policy assets per-division browser bookmark templates and winget/Chocolatey update orchestration to keep software current.

The result is a fleet that provisions itself onto standard, stays on baseline, and heals common drift without a technician touching each machine.