In-depth guides, scripts, and analysis for endpoint specialists, Windows admins, and IT engineers who need signal — not noise.
Growing library of real sysadmin guides, scripts & analysis — written for working engineers.
Written for engineers working with
Why AdminSignal
Every article, guide, and alert is written for working IT engineers — no filler, no SEO padding. If it's here, it earned its place.
Step-by-step guides that go beyond surface documentation. From Group Policy internals to Intune Graph API calls, we go where the manuals stop.
Production-tested PowerShell, ready for enterprise environments. Reviewed, documented, and built for real deployments, not just demos.
Honest, practitioner-reviewed recommendations. No affiliate fluff — just tools that experienced sysadmins actually reach for on hard days.
Latest Signals
May 2026 Patch Tuesday deployment notes covering KB5089549 for Windows 11, Windows Server updates, BitLocker PCR7 known issue, Secure Boot certificate readiness, Intune Autopatch hotpatch, and WSUS deployment checks.
Three zero-days confirmed exploited in the wild, plus KB5055523 fixes the Autopilot OOBE timeout regression on Dell and HP hardware that has been blocking zero-touch deployments for six weeks. Prioritise this month.
Microsoft will remove trust for kernel drivers signed under the deprecated cross-signed root program in the April 2026 Windows update, starting in evaluation mode. Affects Windows 11 24H2/25H2/26H1 and Windows Server 2025.
Featured Guides
Step-by-step technical guides that go where official documentation stops — from GPO internals to Graph API edge cases.
A practical operational guide for planning Exchange Online SMTP AUTH Basic Authentication and credential-based Exchange Online PowerShell automation migrations, covering inventory, EAC and Entra checks, mailbox and tenant settings, OAuth, High Volume Email, Azure Communication Services Email, relay caveats, app-only PowerShell, managed identity, rollback, and prevention controls.
PowerShellA practical migration guide for replacing production AzureAD and MSOnline PowerShell scripts with Microsoft Graph PowerShell SDK, covering module strategy, delegated and app-only authentication, managed identity, permission discovery, cmdlet mapping, paging, OData filters, eventual consistency, throttling, beta endpoint risk, logging, rollback, and prevention checks.
Endpoint SecurityA practical operational guide for rolling out Microsoft Defender for Endpoint with Intune across a managed Windows fleet, covering tenant connection, licensing, Plan 1 versus Plan 2, onboarding, endpoint security policies, antivirus, firewall, ASR, EDR, baselines, pilot rings, reporting, coexistence, rollback, and prevention checks.
Microsoft IntuneA practical migration guide for moving Intune Administrative Templates and older configuration profiles to Settings Catalog, covering inventory, duplicate settings, assignments, Graph PowerShell checks, conflict detection, pilot design, validation, reporting, rollback, and prevention controls.
Script Library
Tested, documented scripts for endpoint management, compliance, and automation.
Identifies devices inactive for a configurable threshold across Intune, Entra ID, and on-premises Active Directory. Outputs CSV and HTML reports with remediation actions.
Applies a configurable subset of CIS Level 1 and Level 2 controls to Windows 10/11 endpoints. Runs locally or via Intune remediation script. Generates a pre/post compliance delta report.
Queries WSUS or Windows Update for Business status via WMI and Graph API. Produces a per-device patch lag report with severity breakdown and exportable HTML dashboard.
Topic Hubs
Focused hubs for every discipline in your stack — signals, guides, and scripts in one place.
MDM, MAM, Autopilot, compliance policies, and app deployment.
Active Directory, DNS, DHCP, file services, and server hardening.
Automation, scripting, modules, DSC, and Graph API integration.
Identity, Conditional Access, PIM, SSPR, and hybrid join.
AV, EDR, attack surface reduction, Defender for Endpoint.
GPO design, ADMX templates, WMI filters, and loopback processing.
WSUS, Windows Update for Business, patch rings, and compliance reporting.
Exchange Online, Teams, SharePoint, licensing, and tenant governance.
Recommended Tools
These are the tools I reach for when managing real enterprise fleets — tested in production, not picked for referral fees.
Links go directly to each vendor's official site — no middlemen. I only list tools I've personally used in production environments.
Supercharge your Intune deployments with automation, cost optimisation, and enterprise-grade Azure Virtual Desktop management from a single pane of glass.
Protect Exchange Online, SharePoint, OneDrive, and Teams data with immutable, air-gapped backups. Indispensable for compliance and ransomware recovery.
The essential diagnostic toolkit for Windows: Process Monitor, Autoruns, TCPView, and 70+ utilities for deep system inspection and incident response.
Build production-grade Windows Forms GUIs, package scripts as signed executables, and debug complex runbooks directly inside VS Code.
Query and manipulate Intune data via Microsoft Graph API with an interactive UI. Essential for custom reporting, bulk operations, and policy auditing.
Browser-based management hub for Windows Server, clusters, and Azure Arc. Replaces MMC snap-ins with a modern, unified interface requiring no cloud dependency.
These are practitioner recommendations. If affiliate arrangements are ever established, they will be clearly disclosed. Full disclosure policy →
About the Author
Jack
Senior Enterprise Sysadmin · 12+ Years Windows & Intune
Certifications
Content kept current. All guides and scripts are reviewed and updated as Microsoft ships changes — not published once and left to rot.
Last site-wide review: May 2026
AdminSignal exists because I kept hitting the same wall: Microsoft docs that stop at "click Apply", blog posts written by people who clearly haven't touched a real fleet, and Reddit threads that end with "it depends."
Everything I publish here is drawn from 12+ years managing Windows environments — Intune tenants with 10,000+ devices, Active Directory migrations, endpoint security hardening for regulated industries, and the kind of PowerShell that gets written at 2 AM when something breaks. If a guide is on AdminSignal, it has been run in production, not just a dev VM.
The site covers Microsoft Intune, PowerShell automation, Windows Server, endpoint security, and the day-to-day reality of running enterprise IT. I write the content I wish existed when I was learning — and the content I still reach for when I'm stuck.
Explore the library
AdminSignal content is produced independently. Editorial policy · About this site
Last site-wide review: May 2026
All content written and tested in production environments by a senior enterprise sysadmin.
