NAVANEM

Production-tested tutorials for IT admins

Step-by-step guides for sysadmins and infrastructure engineers, based on real deployments, with verification steps so you know the fix actually worked.

80guides

80 results

Illustration of a user reducing eye strain by turning on dark mode across Microsoft 365 apps on Windows and Mac, showing system-wide dark themes in both operating systems and per-app dark mode toggles in Office and Microsoft 365 web in just a few steps
easy5 steps · 5 min

Dark Mode in Microsoft Office: Step-by-Step Guide

Enable dark mode in Microsoft Office 365 in under 2 minutes - 3 methods for Windows 11 and macOS, including PowerShell scripts for fleet deployment.

jun 21, 2026 · start →
Diagram of a hybrid identity setup where an admin enables password writeback in Azure AD Connect and Microsoft Entra self-service password reset so when an on-premises AD user resets their password in the cloud portal, that new password is written back to the local Active Directory
medium5 steps · 6 min

Azure AD Password Writeback: Step-by-Step Setup

Enable Azure AD password writeback in 15 min - requires Azure AD Connect 1.0.8641.0+ and an AAD Premium P1 license. Step-by-step hybrid identity guide.

jun 21, 2026 · start →
Illustration of a Microsoft 365 admin using the Microsoft Entra ID portal to turn off the tenant-wide “remember multi-factor authentication on trusted devices” setting so users can no longer bypass MFA on trusted devices during sign-in
easy5 steps · 5 min

Disable Remember MFA on Trusted Devices in Microsoft Entra ID

One checkbox in the Per-user MFA Service settings disables trusted-device bypass tenant-wide in under 2 minutes. Step-by-step guide for sysadmins.

jun 20, 2026 · start →
Microsoft 365 admin themed image showing a ghosted Teams team, an Azure Portal deleted group restore action and a PowerShell restore command, all under a strict 30-day countdown
medium5 steps · 5 min

Restore Deleted Microsoft Teams Team: PowerShell & Portal

Recover a soft-deleted Microsoft Teams team in under 5 minutes using PowerShell or the Azure Portal. The 30-day retention window is your only chance.

jun 19, 2026 · start →
Endpoint management themed image showing a workflow from Intune Expedite policy creation through group assignment to compliance reporting for urgent Windows security updates
medium5 steps · 6 min

Intune Expedited Windows Quality Updates: Step-by-Step

Deploy emergency Windows security patches using Intune expedited update policies - requires Windows E3/E5 or Intune Plan 1, reaching devices in as little as 0-2 days.

jun 19, 2026 · start →
Endpoint management themed image showing the flow from downloading Firefox ADMX files, importing them into Intune and configuring a Windows SSO policy that delivers seamless single sign-on in Firefox with no add-on required
medium6 steps · 6 min

Firefox SSO with Intune: Step-by-Step for Sysadmins

Configure Firefox SSO with Intune using two Mozilla ADMX templates. No extension required. Works with Firefox 91+ on Entra ID Joined, Hybrid-Joined, and Registered devices enrolled in Intune. 157 chars.

jun 19, 2026 · start →
Microsoft 365 admin themed image showing a large SharePoint library being tuned with column indexing, filtered views and PnP PowerShell batching as part of a structured optimisation guide
advanced5 steps · 6 min

SharePoint Online Large Document Libraries: 5-Step Optimization Guide

Fix SharePoint Online slowdowns in large document libraries: index columns before the 5,000-item threshold, build filtered views, and batch metadata with PnP PowerShell.

jun 18, 2026 · start →
Windows 11 deployment themed image showing a UUP-based ISO creation step feeding into a bootable USB creation step in a simple three-stage pipeline
medium6 steps · 6 min

Windows 11 ISO Download & Build Guide for Sysadmins

Build or download a Windows 11 25H2/26H1 ISO in under 20 minutes using UUPdump files pulled from Microsoft CDN. Includes Rufus USB, in-place upgrade, and TPM bypass steps.

jun 18, 2026 · start →
Intune admin themed image showing the CompanyPortal-Installer.pkg being installed on macOS and the user signing in with Microsoft Entra credentials
medium6 steps · 6 min

Install Microsoft Intune Company Portal on Mac: Step-by-Step

Install Microsoft Intune Company Portal on Mac in 15 minutes. Covers the .pkg installer, MDM profile approval on macOS 13-14, and compliance verification.

jun 18, 2026 · start →
Intune admin themed image showing custom ADMX-based configuration profiles creating mapped network drives via Group Policy-like settings
medium6 steps · 6 min

Map Network Drives in Intune Using Custom ADMX Files

Deploy persistent network drive mappings to Entra-joined devices via Intune Imported Administrative Templates using custom ADMX files - no PowerShell scripting required for deployment.

jun 18, 2026 · start →
Illustration of creating a dynamic Microsoft Teams team using a dynamic Microsoft 365 group backed by Entra ID rules
medium4 steps · 6 min

Create a Dynamic Team in Microsoft Teams with Entra ID Groups

Learn to create a dynamic Microsoft Teams team backed by an Entra ID P1 dynamic group — membership updates automatically within two hours as user attributes change.

jun 18, 2026 · start →
Identity admin themed image showing users being denied access to Microsoft 365 apps by a Conditional Access block policy
medium7 steps · 6 min

Block Microsoft 365 Apps with Conditional Access - Stepy by Step

Block Microsoft 365 apps on unmanaged devices using Entra Conditional Access. Covers licensing, break-glass exclusions, Report-only testing, and sign-in log verification.

jun 18, 2026 · start →
Intune admin themed image showing PowerShell-based shortcut deployment to the public desktop across a managed fleet
medium5 steps · 6 min

Deploy Desktop Shortcuts with Intune Using PowerShell

Deploy app and web URL desktop shortcuts to all Intune-managed Windows devices using PowerShell in under 30 minutes. Step-by-step guide for sysadmins, tested on Windows 11 23H2.

jun 18, 2026 · start →
Endpoint security themed image showing ASR policies blocking malicious Office macros, scripts and ransomware across a device fleet
advanced6 steps · 6 min

ASR Rules Deployment: Step-by-Step Guide for Sysadmins

Deploy Microsoft Defender ASR rules safely using Intune and PowerShell. Audit, test, and enforce 14 rules across Windows 10 1709+ endpoints in a phased rollout.

jun 17, 2026 · start →
Illustration of resetting the Windows 10 and 11 Start menu layout back to default using registry edits and PowerShell commands
medium5 steps · 5 min

Reset Windows Start Menu to Default: 5 Methods for Sysadmins

Start Menu broken, frozen, or cluttered? This step-by-step guide covers five proven methods to reset it on Windows 10 and 11 in under 30 minutes.

jun 17, 2026 · start →
Identity admin themed image showing an Entra application toggle set to deactivated to temporarily block tokens and access
medium5 steps · 6 min

Deactivate an Entra ID App Registration: Step-by-Step Guide

Deactivate an Entra ID app registration in 4 steps using the admin center or Graph API PATCH request — blocks token issuance without deleting the app.

jun 17, 2026 · start →
Intune admin themed image showing a cloud integration between Microsoft Intune and Dell Management Portal for managing a Dell device fleet
easy5 steps · 5 min

Dell Management Portal for Intune: Integration Setup Guide

Connect Dell Management Portal to Intune in 5 steps - retrieve BIOS credentials, manage 5 Dell enterprise apps, and sync device data every 30 minutes.

jun 17, 2026 · start →
Intune admin themed image showing automated cleanup of unused user profiles on Windows 10 and 11 devices
medium6 steps · 6 min

Intune: Auto-Delete Old User Profiles - Step-by-Step Guide

Configure an Intune Settings Catalog policy that auto-deletes Windows user profiles inactive for 30-120 days, recovering disk space and reducing credential exposure on every restart.

jun 17, 2026 · start →
Intune admin themed image showing centralized management of local admin rights through Local user group membership
medium5 steps · 6 min

Intune: Add a Local User to the Administrators Group

Promote an Entra user to the local Administrators group on Windows 10/11 devices using Intune Account Protection policy - completed in 5 steps, no manual machine access required.

jun 16, 2026 · start →
Intune admin themed image showing Windows 11 devices with the taskbar weather widget turned off centrally
easy6 steps · 5 min

Remove Weather Widget from Windows 11 Taskbar via Intune

Step-by-step guide for sysadmins to disable the Windows 11 weather widget via an Intune configuration profile. Policy applies within 8 hours, locking the toggle for end users.

jun 16, 2026 · start →
show