In-depth guides, scripts, and analysis for endpoint specialists, Windows admins, and IT engineers who need signal — not noise.
Growing library of real sysadmin guides, scripts & analysis — written for working engineers.
Written for engineers working with
Why AdminSignal
Every article, guide, and alert is written for working IT engineers — no filler, no SEO padding. If it's here, it earned its place.
Step-by-step guides that go beyond surface documentation. From Group Policy internals to Intune Graph API calls, we go where the manuals stop.
Production-tested PowerShell, ready for enterprise environments. Reviewed, documented, and built for real deployments, not just demos.
Honest, practitioner-reviewed recommendations. No affiliate fluff — just tools that experienced sysadmins actually reach for on hard days.
Latest Signals
Microsoft will remove trust for kernel drivers signed under the deprecated cross-signed root program in the April 2026 Windows update, starting in evaluation mode. Affects Windows 11 24H2/25H2/26H1 and Windows Server 2025.
The Remote Desktop client for Windows (MSI) and the Remote Desktop web client are no longer supported in commercial clouds as of March 27, 2026. Microsoft is directing organisations to the Windows App, which also gains keyboard input protection in this update.
Microsoft's Intune Customer Success team has published a security hardening guide covering least-privilege admin role assignments, phishing-resistant authentication, privileged access hygiene, and Multi Admin Approval for sensitive configuration changes.
Featured Guides
Step-by-step technical guides that go where official documentation stops — from GPO internals to Graph API edge cases.
A step-by-step guide to rolling out Windows Local Administrator Password Solution across your Intune-managed fleet, including policy configuration, reporting, and migration from legacy LAPS.
Apply the CIS Level 1 benchmark to Windows 11 22H2 and 24H2 endpoints using Group Policy, Intune profiles, and a validation script that reports compliance gaps.
Windows Autopilot v2 changes how enrollment profiles work. This guide covers device preparation, the Enrollment Status Page, and a decision tree for diagnosing the most common deployment failures.
Script Library
Tested, documented scripts for endpoint management, compliance, and automation.
Identifies devices inactive for a configurable threshold across Intune, Entra ID, and on-premises Active Directory. Outputs CSV and HTML reports with remediation actions.
Applies a configurable subset of CIS Level 1 and Level 2 controls to Windows 10/11 endpoints. Runs locally or via Intune remediation script. Generates a pre/post compliance delta report.
Queries WSUS or Windows Update for Business status via WMI and Graph API. Produces a per-device patch lag report with severity breakdown and exportable HTML dashboard.
Topic Hubs
Focused hubs for every discipline in your stack — signals, guides, and scripts in one place.
MDM, MAM, Autopilot, compliance policies, and app deployment.
Active Directory, DNS, DHCP, file services, and server hardening.
Automation, scripting, modules, DSC, and Graph API integration.
Identity, Conditional Access, PIM, SSPR, and hybrid join.
AV, EDR, attack surface reduction, Defender for Endpoint.
GPO design, ADMX templates, WMI filters, and loopback processing.
WSUS, Windows Update for Business, patch rings, and compliance reporting.
Exchange Online, Teams, SharePoint, licensing, and tenant governance.
Recommended Tools
Practitioner-reviewed. No affiliate fluff — just the tools that show up in real sysadmin toolkits.
The essential diagnostic toolkit for Windows: Process Monitor, Autoruns, TCPView, and 70+ utilities for deep system inspection.
Cross-platform, open-source shell and scripting language. The standard for Windows automation, now with foreach-parallel and improved error handling.
Cloud-native MDM and MAM platform for managing Windows, macOS, iOS, and Android. Integrates natively with Entra ID and Defender for Endpoint.
Overlays live system information — IP address, hostname, OS version, domain — onto the desktop background. Essential for multi-server environments.
Native Windows package manager for automated software deployment, updates, and removal. Scriptable via PowerShell and supported in Intune remediations.
Microsoft Security Compliance Toolkit utility that compares GPOs, security baselines, and local policy snapshots side-by-side to identify drift and conflicts.
From the community
Finally, Intune content that actually works in enterprise.
These scripts saved me hours every week.
The only sysadmin site I actually read.