NAVANEM

Production-tested tutorials for IT admins

Step-by-step guides for sysadmins and infrastructure engineers, based on real deployments, with verification steps so you know the fix actually worked.

80guides

80 results

Intune admin themed image showing a OneDrive auto sign-in configuration profile applied to Windows 10 and 11 endpoints
easy6 steps · 5 min

OneDrive Auto Sign-In via Intune Settings Catalog

Deploy an Intune Settings Catalog policy to silently sign users into OneDrive in under 10 minutes - no manual login, no credential prompts.

jun 16, 2026 · start →
Intune admin themed image showing Edge favorites and folders pushed centrally to Windows 10 and 11 endpoints
medium5 steps · 6 min

Deploy Microsoft Edge Favorites via Intune: Step-by-Step Guide

Learn how to build an Edge favorites JSON file and push it to managed Windows devices using a 6-step Intune Settings Catalog workflow in under 10 minutes.

jun 16, 2026 · start →
Intune admin themed image showing cloud-only OneDrive files and reduced disk usage after Files On-Demand is enabled
easy5 steps · 5 min

OneDrive Files On-Demand via Intune: Step-by-Step Guide

Deploy OneDrive Files On-Demand using Intune Settings Catalog. Filter Event ID 814 in Event Viewer to confirm MDM applied FilesOnDemandEnabled across enrolled Windows devices.

jun 16, 2026 · start →
Identity security themed image showing Entra cloud policies applied to on-premises AD via password protection proxy and DC agents
medium6 steps · 6 min

Entra Password Protection: On-Premises AD Setup Guide

Deploy Microsoft Entra Password Protection to block weak passwords in on-premises AD. Stolen credentials cause 22% of breaches; this guide covers proxy and DC agent setup.

jun 15, 2026 · start →
IT support themed image showing a script-based Office scrubber tool wiping Office from a Windows PC
easy5 steps · 5 min

Office Scrubber Tool: Completely Uninstall Microsoft Office

Office Scrubber removes all Microsoft Office files, registry entries, and licenses. Our testing confirmed 100% cleanup across M365, LTSC, and legacy versions.

jun 15, 2026 · start →
Windows 11 tutorial themed image showing BitLocker being removed from an encrypted drive
easy5 steps · 5 min

BitLocker Removal Guide: Disable Encryption in Windows 11

Remove BitLocker encryption from Windows 11 drives using Control Panel. Decryption takes 1-3 hours depending on drive size. Includes Rufus method to prevent 24H2 auto-encryption.

jun 15, 2026 · start →
Visualization of dsregcmd status output showing Azure AD joined and domain joined state on a Windows device
medium6 steps · 6 min

Dsregcmd Command: Check Azure AD Join Status Windows 10/11

Run dsregcmd /status to verify Microsoft Entra ID device registration, diagnose SSO failures, and check Primary Refresh Token status on Windows systems.

jun 15, 2026 · start →
Illustration of enabling Remote Desktop on Windows devices via Intune using OMA-URI and PowerShell
medium5 steps · 6 min

Enable Remote Desktop via Intune: OMA-URI & PowerShell Guide

Configure RDP on Windows 10/11 via Intune custom OMA-URI policies and PowerShell scripts. Works in under 30 minutes with Entra ID authentication.

jun 15, 2026 · start →
Illustration of deploying FortiClient VPN with Intune using an extracted MSI and PowerShell scripts without EMS Premium
advanced5 steps · 6 min

FortiClient VPN Intune Deployment Without EMS Premium

Extract FortiClient MSI, deploy via Intune LOB app, and configure VPN settings with PowerShell registry scripts. Works with Windows 10/11 x64 devices.

jun 15, 2026 · start →
Check Secure Boot 2023 certificates on Windows - NAVANEM tutorial cover
medium5 steps · 6 min

Check Secure Boot 2023 Certificates: PowerShell & UEFI Guide

Verify Windows has Secure Boot 2023 certificates before the June 2026 expiry. PowerShell scripts and UEFI methods to check KEK 2K CA 2023 and UEFI CA 2023.

jun 15, 2026 · start →
Change the SharePoint domain in Microsoft 365, a PowerShell tenant rename guide
medium6 steps · 6 min

Change SharePoint Domain: PowerShell Rename Guide

Rename your SharePoint tenant domain using PowerShell. Schedule 24-30 days ahead, preserve all data and permissions, complete in hours to days.

jun 14, 2026 · start →
Fix Intune Error 65000 Secure Boot certificate expiry tutorial cover
advanced6 steps · 6 min

Intune Error 65000: Fix Secure Boot Certificate Expiry

Intune Error 65000 signals licensing conflicts, not Secure Boot failures. Registry workaround resolves 90% of cases on Windows Pro and Enterprise devices.

jun 13, 2026 · start →
Stop Outlook password prompts on Exchange Server - tutorial cover
medium8 steps · 15 min

Outlook Password Prompts: Fix Exchange Server Auth Loops

Stop Outlook password loops on Exchange Server with 8 verified fixes in under 10 minutes. Covers credential clearing, profile repair, and server config for Outlook 2016-2024.

jun 12, 2026 · start →
Illustration of an admin enabling Send from Alias in Microsoft 365 and a user sending email from a secondary SMTP address in Outlook.
medium5 steps · 5 min

Send from Alias in Microsoft 365: Step-by-Step for Admins

Enable Send from Alias in Microsoft 365 via one PowerShell cmdlet, verify it with Get-OrganizationConfig, and show users how to pick any alias in Outlook, OWA, or mobile.

jun 10, 2026 · start →
Illustration of an IT administrator safely removing Exchange Hybrid Configuration after all mailboxes have moved to Exchange Online.
advanced7 steps · 6 min

Remove Exchange Hybrid Configuration: Step-by-Step Guide

Follow these 7 steps to safely remove Exchange Hybrid Configuration after migration: clear connectors, disable OAuth, and update DNS in under 30 minutes.

jun 2, 2026 · start →
Illustration of repairing or rebuilding the Master Boot Record on Windows 10 and 11 using bootrec commands from the recovery environment
medium5 steps · 6 min

MBR Repair on Windows 10 and 11: Fix Boot Errors Fast

Fix 'BOOTMGR is missing' or 'Operating System not found' by repairing the Master Boot Record with bootrec.exe — four commands that resolve most MBR errors in under 10 minutes, no reinstall needed.

jun 1, 2026 · start →
Illustration of an Exchange administrator renewing a self-signed certificate with PowerShell, MMC, and IIS Manager without service interruption.
medium7 steps · 6 min

Renew Exchange Self-Signed Certificate: Step-by-Step

Renew a Microsoft Exchange self-signed certificate on Exchange 2016/2019 in under 20 minutes using EMS, MMC, and IIS Manager - restoring a 5-year cert with zero service disruption.

may 20, 2026 · start →
Illustration of CyberChef running locally in Docker with multi-step data recipes for security analysis.
easy6 steps · 6 min

CyberChef Tutorial: Decode, Encrypt & Analyze Data

CyberChef offers 483 built-in operations, all client-side. Learn to self-host it with Docker in one command, build multi-step recipes, and decode, encrypt, or extract data in minutes.

may 13, 2026 · start →
Illustration of Wazuh 4.x XDR deployed with Docker Compose and Windows and Linux agents enrolled for SIEM monitoring.
medium6 steps · 6 min

Wazuh XDR Docker Lab: Deploy and Enroll Agents

Deploy Wazuh 4.x XDR in under 20 min using Docker Compose, then enroll Windows and Linux agents on ports 1514/1515 for real-time SIEM monitoring.

apr 16, 2026 · start →
Illustration of installing the SCCM console on a Windows 10 device using three different methods for sysadmins.
medium5 steps · 6 min

Install SCCM Console on Windows 10: 3 Methods

Install the SCCM console on Windows 10 three ways: wizard, ConsoleSetup folder, and /q silent install. Includes exact log paths for CB 1902+ and verification steps.

feb 11, 2026 · start →
show