I'm Kevin, an endpoint engineer who writes practical Intune guides, ships open-source tools like Intune Preflight ↗, and shares the scripts I use in production. Feel free to reach out directly if you'd like to chat. I'm always open to speaking engagements.
See what Intune applies to a device — before you deploy it.
Simulate an endpoint's groups, Group Tag and filters and get its merged Intune baseline, with conflicts called out. It runs in your browser, so there's nothing to install.
Opens kevinmalinoski.github.io/intune-preflight in a new tab
The first post in “It’s Not Just You”, a series on the Intune and Windows problems that make you think you broke something. Here’s what we found, how we caught it, and where to start if App Control burned you before. If you’ve clicked through Endpoint security in Intune, you’ve seen App Control for Business…
If you’ve tested the new ADE enrollment policies in Intune and Company Portal fought you afterward, you’re not alone. I was testing the new policies and hit the same issue on every device. Setup Assistant finished, Intune managed the device as expected, and device-level apps installed and removed without a problem. Then Company Portal tried…
If you started patching Macs, iPhones and iPads in Intune in the last year or so, you’re probably already using Apple’s declarative device management (DDM) update policies in favor of the old MDM-based software update policies. Apple has deprecated those and Microsoft has said Intune will soon end support for them, but if you’ve moved…
Autopatch picks your Edge channel, and that’s about it. Here’s how to control when Edge checks for updates, how users are told to restart, and when that restart actually happens. One thing Intune’s native Autopatch groups and policies still lack is real control over the Microsoft Edge update deadline and the notification experience your users…
Have you ever bought a new machine for your organization, set everything up cloud native and cloud first, and then watched a user log in for the first time only to find their primary security software is McAfee with a one year free trial? Loaded at the OEM level, of course. And you didn’t buy…
After roughly a year of writing deep-dive Intune content here on malinoski.me — posts on Assigned Access kiosks, Intune-based McAfee removal, policy conflicts, Autopatch deployments, and the eternal “why isn’t this device getting what I assigned?” question — I kept running into the same fundamental friction. Intune’s admin center is fantastic for creating policy, but…
The posts tell the story; the guides are the checklist you keep open while you build.
Detection scripts, remediation, templates and Settings Catalog exports from the blog.
