Intune Environment Remediation & Device Rebuild Preparation

Conduct a full review and remediation of the Microsoft Intune environment, including policy restructuring, update conflict resolution, and device preparation for upcoming user deployments.

1. Environment & Policy Remediation

Audit and clean up Intune policies

Review all current policy assignments (user-targeted vs. device-targeted).

Correct misapplied user-level controls that caused policy conflicts on shared devices (“Intune storm” issue).

Reassign policies appropriately to prevent future multi-user conflicts.

Break up monolithic policies

Split large policies (~20 settings in a single policy) into smaller, granular configurations.

Ensure individual settings can be modified or exempted without impacting unrelated controls.

Create structured Intune groups

Implement at minimum:

Testing group

Production group

Ensure staged rollout capability for validation before full deployment.

Resolve Windows Update policy conflicts

Identify legacy update policies still impacting compliance.

Remove or remediate conflicting assignments.

Validate compliance status post-cleanup.

2. Device-Specific Work

Prepare field laptops for rebuild

Re-provision existing enrolled devices for new users.

Confirm Autopilot configuration is correctly applied.

Validate enrollment flow and policy application.

Tablet build troubleshooting

Investigate build failures related to:

BitLocker

Secure Boot

Hardware-specific policy conflicts

Adjust configurations to align with tablet hardware requirements.

OneDrive policy differentiation

Enable OneDrive sync for tablets (offline sync capability).

Keep OneDrive disabled for field laptops (data exfiltration prevention).

Implement this via separated device-targeted policy structure.

3. Working Approach

Operate independently within the secure environment.

Document all changes.

Review and confirm significant changes before implementation.

Ensure environment stability throughout remediation process.