Production-tested tutorials for IT admins
Step-by-step guides for sysadmins and infrastructure engineers, based on real deployments, with verification steps so you know the fix actually worked.
80 results
Protect Exchange OWA from Brute Force Attacks with reCAPTCHA
Add Google reCAPTCHA v2 to Exchange OWA and ECP login pages to block brute force bots - free, no Azure AD Premium needed, works on Exchange 2013-2019.
Migrate Distribution Groups to Microsoft 365 with PowerShell
Migrate on-premises Exchange distribution groups to Microsoft 365 in 8 PowerShell steps - preserving members, owners, and moderation settings without downtime.
Download OneDrive Files with PowerShell and Microsoft Graph
Bulk-export OneDrive files for multiple Microsoft 365 users using PowerShell and the Microsoft Graph API - no third-party tools required. Step-by-step for sysadmins.
Manage Windows Fast Startup via Intune: PowerShell Guide
Control Windows Fast Startup across your fleet by setting one registry DWORD via Intune PowerShell. Step-by-step guide for Windows 10/11 sysadmins.
GPO Block Websites in Microsoft Edge: Step-by-Step Guide
Block websites in Microsoft Edge via GPO across your Windows domain in under 30 minutes - no third-party tools needed. Full step-by-step guide with ADMX setup.
Microsoft Entra Connect Migration: Move to a New Server
Move Microsoft Entra Connect V2 to Windows Server 2016, 2019, or 2022 in 7 steps - export config, enable TLS 1.2, and verify sync without downtime.
Align Windows 11 Taskbar Left via Intune: Step-by-Step
Use a 3-line PowerShell script in Microsoft Intune to enforce left-aligned taskbar on Windows 11 22H2+ - no GPO or third-party tools needed across your fleet.
Enforce Chrome Auto-Updates via Intune: Step-by-Step
Import Chrome ADMX templates into Intune and enforce auto-updates on Windows 10/11 devices in under 15 minutes. Works across all Intune-enrolled machines.
Exchange Server Send Connector: EAC + PowerShell Setup
Exchange Server send connector missing by default. Configure outbound mail via EAC or PowerShell in under 15 minutes with this step-by-step guide.
Disable Driver Signature Enforcement in Windows 11: 4 Methods
Disable driver signature enforcement in Windows 11 via 4 methods tested on 22H2: Startup Settings (session-only), bcdedit, Group Policy, and Advanced Boot Options for fleet deployments.
WSReset.exe: Clear Microsoft Store Cache Step by Step
Run WSReset.exe on Windows 10 and 11 to clear the Microsoft Store cache and fix download errors in under 60 seconds - no restart needed.
Intune Unattended Remote Help: Access Windows Devices Without User Interaction
Configure Intune Unattended Remote Help (GA July 2026, requires Intune Suite) to remotely access Windows devices with no end-user prompt. Full setup guide.
Disable WinRM Basic Authentication via Intune: Step-by-Step
Block plain-text credential exposure over WinRM with an Intune Settings Catalog policy. Applies to Windows 10 1709+ (build 16299) and later. Deploy in minutes.
Configure NTP Time Source on a Windows Domain Controller
Configure an external NTP source on your PDC Emulator to keep Kerberos clock skew under the 5-minute limit - with PowerShell commands and verification steps.
Intune Remediation: Lock Windows Logon to Current User
Use an Intune Remediation PowerShell script to restrict Allow logon locally to one assigned user, cutting lateral movement risk per CISA guidance. Setup takes under 30 minutes.
Deploy uBlock Origin Lite via Intune: Enterprise Guide
Deploy uBlock Origin Lite across managed Windows devices with PowerShell and Intune, blocking malvertising at scale across Windows 10/11 in under 30 minutes.
PowerShell Intune Remediations: Set Outlook Default Font
Deploy a PowerShell Intune Remediations package that writes Outlook classic default font registry values to every targeted Windows device - no Group Policy needed.
Deploy a Trusted Root Certificate with Intune: Step-by-Step
Export your Enterprise CA root certificate and push it to Windows devices using an Intune Trusted Certificate profile. Full walkthrough for sysadmins.
Disable Office Update Notifications in Intune: Step-by-Step
Use Intune Settings Catalog to push the Hide Update Notifications policy to Windows 10/11 devices and silence Microsoft 365 update prompts in under 10 minutes.
Intune Scope Tags: Step-by-Step Setup for Sysadmins
Learn how to create Intune scope tags in 6 steps, assign them to RBAC roles, and isolate admin visibility by department or region in Microsoft Intune.