Modern Workplace projects overview
Read about my completed projects.
Windows 365 cloud PC’s (NautaDutilh)
Customer request: replace the externally managed Azure Virtual Desktops with internally managed cloud pc’s.
Solution: I configured 2 types of cloud pc’s. The User Desktop is the virtual variant of the physical Modern Workplace laptop and is configured with identical setup, security, apps and look-and-feel. The Admin Desktop is configured from scratch with extra security like WDAC and a private PowerShell repository. Both types are fully Intune managed. Provisioning of new cloud pc’s and offboarding is automated through group membership.
Modern Workplace specials (NautaDutilh)
Customer request: develop Modern Workplace variants for specific goals reusing the current Intune setup.
Solution: there were different types of specials. I created the user less single app (browser) kiosk for non-personal website access. The multi-user Modern Workplace laptop is used for the reception desk. Both types are fully managed from Intune.
The Universal Write Filter laptop is a physical non-persistent laptop build with Autopilot. After the build it is removed from Intune. It reverts back to a pristine state after every reboot.
Modern Workplace laptops (NautaDutilh)
Customer request: change the Modern Workplace to be deployable to all employees without using SCCM and App-V.
Solution: my solution started with adapting the Autopilot and ESP flows to the customer needs. Next, I tweaked policies, compliancy, and remediations to deploy the Modern Workplace cloud only password less zero trust laptops to 800 employees. Tweak examples are: distributing and removing start menu shortcuts plus icons and periodic forced laptop reboots with deferrals and user notifications, both through remediations. After the rollout I completely removed SCCM and App-V.
From SCCM to Intune (NautaDutilh)
Customer request: phase out SCCM and App-V for application deployment.
Solution: first I moved 150+ applications from SCCM to Intune. Some of them were migrated to Patch my Pc. Some others were converted from App-V to MSIX. Most of them were repackaged as Win32 packages using the PowerShell App Deployment Toolkit. I added existing application settings from GPO/GPP to the apps (using PowerShell scripts) or to remediation scripts. Then I rebuild the SCCM Operating System Deployment in OSDcloud, enabling bare metal deployments via internet with tweaks during OOBE.
Intune + Suite full setup (FL)
Customer request: implement the Modern Workplace using Intune.
Solution: this was a major redesign of my own IT setup. I changed everything to Intune, Autopilot and the Intune Suite. Device and user certificates are now deployed from the Intune PKI. Applications are distributed and updated from the Enterprise App Catalog. Test VM’s are built with OSDcloud and Autopilot/ESP. Defender hardening settings are deployed from Intune.
SCCM / Intune co-management (NWO)
Customer request: enable automatic Intune enrollment and move workloads from SCCM to Intune.
Solution: this was a hybrid setup where I enabled co-management with auto-enrollment in Intune for SCCM managed devices. I recreated several SCCM and GPO settings in Intune policies and scripts. The corresponding workloads were moved from SCCM to Intune.
Customers
These are the customers where I have contributed to a more efficient IT.
International law firm
Erasmus University Rotterdam
Dutch agency for Scientific Research
Shared Service Center ICT
Natural resources
The Hague Library – Part of Municipality of The Hague
Agricultural products, formerly part of Glencore AG
Merger of municipalities of Binnenmaas, Cromstrijen, ‘s-Korendijk, Oud-Beijerland and Strijen
Insurance firm
Discover how I can solve your IT challenges
Contact me for professional advice about Microsoft Modern Workplace solutions and discover how I can strengthen your organization.