In-depth guides, scripts, and analysis for endpoint specialists, Windows admins, and IT engineers who need signal — not noise.
Growing library of real sysadmin guides, scripts & analysis — written for working engineers.
Written for engineers working with
Why AdminSignal
Every article, guide, and alert is written for working IT engineers — no filler, no SEO padding. If it's here, it earned its place.
Step-by-step guides that go beyond surface documentation. From Group Policy internals to Intune Graph API calls, we go where the manuals stop.
Production-tested PowerShell, ready for enterprise environments. Reviewed, documented, and built for real deployments, not just demos.
Honest, practitioner-reviewed recommendations. No affiliate fluff — just tools that experienced sysadmins actually reach for on hard days.
Latest Signals
Three zero-days confirmed exploited in the wild, plus KB5055523 fixes the Autopilot OOBE timeout regression on Dell and HP hardware that has been blocking zero-touch deployments for six weeks. Prioritise this month.
Microsoft will remove trust for kernel drivers signed under the deprecated cross-signed root program in the April 2026 Windows update, starting in evaluation mode. Affects Windows 11 24H2/25H2/26H1 and Windows Server 2025.
The Remote Desktop client for Windows (MSI) and the Remote Desktop web client are no longer supported in commercial clouds as of March 27, 2026. Microsoft is directing organisations to the Windows App, which also gains keyboard input protection in this update.
Featured Guides
Step-by-step technical guides that go where official documentation stops — from GPO internals to Graph API edge cases.
A production-grade walkthrough for deploying Windows 11 25H2 across existing x86/x64 fleets using Autopilot v2 Device Preparation policies. Covers tenant readiness, ESP configuration, app tiering, update rings, a phased rollout sequence, and a PowerShell pre-flight toolkit.
A step-by-step guide to rolling out Windows Local Administrator Password Solution across your Intune-managed fleet, including policy configuration, reporting, and migration from legacy LAPS.
Apply the CIS Level 1 benchmark to Windows 11 22H2 and 24H2 endpoints using Group Policy, Intune profiles, and a validation script that reports compliance gaps.
Windows Autopilot v2 changes how enrollment profiles work. This guide covers device preparation, the Enrollment Status Page, and a decision tree for diagnosing the most common deployment failures.
Script Library
Tested, documented scripts for endpoint management, compliance, and automation.
Identifies devices inactive for a configurable threshold across Intune, Entra ID, and on-premises Active Directory. Outputs CSV and HTML reports with remediation actions.
Applies a configurable subset of CIS Level 1 and Level 2 controls to Windows 10/11 endpoints. Runs locally or via Intune remediation script. Generates a pre/post compliance delta report.
Queries WSUS or Windows Update for Business status via WMI and Graph API. Produces a per-device patch lag report with severity breakdown and exportable HTML dashboard.
Topic Hubs
Focused hubs for every discipline in your stack — signals, guides, and scripts in one place.
MDM, MAM, Autopilot, compliance policies, and app deployment.
Active Directory, DNS, DHCP, file services, and server hardening.
Automation, scripting, modules, DSC, and Graph API integration.
Identity, Conditional Access, PIM, SSPR, and hybrid join.
AV, EDR, attack surface reduction, Defender for Endpoint.
GPO design, ADMX templates, WMI filters, and loopback processing.
WSUS, Windows Update for Business, patch rings, and compliance reporting.
Exchange Online, Teams, SharePoint, licensing, and tenant governance.
Recommended Tools
These are the exact tools I reach for when managing real fleets. Commissions help keep AdminSignal free — they never influence what I recommend.
As an affiliate partner I earn a small commission if you purchase through these links — at no extra cost to you. I only list tools I've personally verified in production.
Supercharge your Intune deployments with automation, cost optimisation, and enterprise-grade Azure Virtual Desktop management from a single pane of glass.
Protect Exchange Online, SharePoint, OneDrive, and Teams data with immutable, air-gapped backups. Indispensable for compliance and ransomware recovery.
The essential diagnostic toolkit for Windows: Process Monitor, Autoruns, TCPView, and 70+ utilities for deep system inspection and incident response.
Build production-grade Windows Forms GUIs, package scripts as signed executables, and debug complex runbooks directly inside VS Code.
Query and manipulate Intune data via Microsoft Graph API with an interactive UI. Essential for custom reporting, bulk operations, and policy auditing.
Browser-based management hub for Windows Server, clusters, and Azure Arc. Replaces MMC snap-ins with a modern, unified interface requiring no cloud dependency.
Affiliate disclosure: AdminSignal participates in affiliate programmes. Earned commissions help keep this site free. Full disclosure policy →
From the community
Finally, Intune content that actually works in enterprise.
These scripts saved me hours every week.
The only sysadmin site I actually read.
About the Author
Jack
Senior Enterprise Sysadmin · 12+ Years Windows & Intune
Content kept current. All guides and scripts are reviewed and updated as Microsoft ships changes — not published once and left to rot.
Last site-wide review: April 2026
AdminSignal exists because I kept hitting the same wall: Microsoft docs that stop at "click Apply", blog posts written by people who clearly haven't touched a real fleet, and Reddit threads that end with "it depends."
Everything I publish here is drawn from 12+ years managing Windows environments — Intune tenants with 10,000+ devices, Active Directory migrations, endpoint security hardening for regulated industries, and the kind of PowerShell that gets written at 2 AM when something breaks. If a guide is on AdminSignal, it has been run in production, not just a dev VM.
The site covers Microsoft Intune, PowerShell automation, Windows Server, endpoint security, and the day-to-day reality of running enterprise IT. I write the content I wish existed when I was learning — and the content I still reach for when I'm stuck.
Explore the library
AdminSignal content is produced independently. Editorial policy · About this site
Last site-wide review: April 2026
All content written and tested in production environments by a senior enterprise sysadmin.
