Every laptop and phone under Intune, with Autopilot for new devices

60 devices, 2 kinds of ownership, no single view

OnIT had 30 users with 30 Windows laptops and 30 mobile devices: 15 company-owned and 15 personal. Each group needed a different level of control, from fully managed laptops to protecting only company data on personal phones. New laptops were set up by hand, and there was no single view of device security.

Identity first, then devices, then protection

1. 1
   Weeks 1 to 2

   Identity

   Set up Entra Connect to sync on-premises identities, with health alerts, and configured Entra Join or Hybrid Join for the laptops.

2. 2
   Weeks 3 to 4

   Policies

   Applied compliance and configuration policies for BitLocker, Defender, Wi-Fi, passcodes and OS versions, plus Conditional Access requiring compliant devices and MFA.

3. 3
   Weeks 4 to 5

   Apps

   Deployed Microsoft 365 apps, Company Portal, Outlook, Teams and OnIT's line-of-business apps.

4. 4
   Weeks 5 to 6

   Enrollment

   Enrolled the 15 company phones for full management, and protected company data on the 15 personal phones with App Protection Policies.

5. 5
   Weeks 6 to 7

   Defender

   Onboarded all 30 laptops to Defender for Endpoint, checked each one reported in the portal, and ran a test detection.

6. 6
   Weeks 7 to 10

   Autopilot and handover

   Built Autopilot profiles, tested the full out-of-box setup on pilot laptops, then handed over admin documents and user guides.

Every device managed to match who owns it

Every OnIT device is now managed to match who owns it, under one set of security policies, with Defender status in a single portal and a repeatable Autopilot setup for new laptops. Admin documents and user guides were handed over with it.

• One Intune setup for laptops and phones
• Company data protected on personal phones
• Defender status for all 30 laptops in one portal
• A repeatable Autopilot setup for new laptops

• Microsoft Intune
• Entra ID
• Defender for Endpoint
• Windows Autopilot
• Conditional Access