Production-tested tutorials for IT admins
Step-by-step guides for sysadmins and infrastructure engineers, based on real deployments, with verification steps so you know the fix actually worked.
80 results

OneDrive Auto Sign-In via Intune Settings Catalog
Deploy an Intune Settings Catalog policy to silently sign users into OneDrive in under 10 minutes - no manual login, no credential prompts.

Deploy Microsoft Edge Favorites via Intune: Step-by-Step Guide
Learn how to build an Edge favorites JSON file and push it to managed Windows devices using a 6-step Intune Settings Catalog workflow in under 10 minutes.

OneDrive Files On-Demand via Intune: Step-by-Step Guide
Deploy OneDrive Files On-Demand using Intune Settings Catalog. Filter Event ID 814 in Event Viewer to confirm MDM applied FilesOnDemandEnabled across enrolled Windows devices.

Entra Password Protection: On-Premises AD Setup Guide
Deploy Microsoft Entra Password Protection to block weak passwords in on-premises AD. Stolen credentials cause 22% of breaches; this guide covers proxy and DC agent setup.

Office Scrubber Tool: Completely Uninstall Microsoft Office
Office Scrubber removes all Microsoft Office files, registry entries, and licenses. Our testing confirmed 100% cleanup across M365, LTSC, and legacy versions.

BitLocker Removal Guide: Disable Encryption in Windows 11
Remove BitLocker encryption from Windows 11 drives using Control Panel. Decryption takes 1-3 hours depending on drive size. Includes Rufus method to prevent 24H2 auto-encryption.

Dsregcmd Command: Check Azure AD Join Status Windows 10/11
Run dsregcmd /status to verify Microsoft Entra ID device registration, diagnose SSO failures, and check Primary Refresh Token status on Windows systems.

Enable Remote Desktop via Intune: OMA-URI & PowerShell Guide
Configure RDP on Windows 10/11 via Intune custom OMA-URI policies and PowerShell scripts. Works in under 30 minutes with Entra ID authentication.

FortiClient VPN Intune Deployment Without EMS Premium
Extract FortiClient MSI, deploy via Intune LOB app, and configure VPN settings with PowerShell registry scripts. Works with Windows 10/11 x64 devices.

Check Secure Boot 2023 Certificates: PowerShell & UEFI Guide
Verify Windows has Secure Boot 2023 certificates before the June 2026 expiry. PowerShell scripts and UEFI methods to check KEK 2K CA 2023 and UEFI CA 2023.

Change SharePoint Domain: PowerShell Rename Guide
Rename your SharePoint tenant domain using PowerShell. Schedule 24-30 days ahead, preserve all data and permissions, complete in hours to days.

Intune Error 65000: Fix Secure Boot Certificate Expiry
Intune Error 65000 signals licensing conflicts, not Secure Boot failures. Registry workaround resolves 90% of cases on Windows Pro and Enterprise devices.

Outlook Password Prompts: Fix Exchange Server Auth Loops
Stop Outlook password loops on Exchange Server with 8 verified fixes in under 10 minutes. Covers credential clearing, profile repair, and server config for Outlook 2016-2024.

Send from Alias in Microsoft 365: Step-by-Step for Admins
Enable Send from Alias in Microsoft 365 via one PowerShell cmdlet, verify it with Get-OrganizationConfig, and show users how to pick any alias in Outlook, OWA, or mobile.

Remove Exchange Hybrid Configuration: Step-by-Step Guide
Follow these 7 steps to safely remove Exchange Hybrid Configuration after migration: clear connectors, disable OAuth, and update DNS in under 30 minutes.

MBR Repair on Windows 10 and 11: Fix Boot Errors Fast
Fix 'BOOTMGR is missing' or 'Operating System not found' by repairing the Master Boot Record with bootrec.exe — four commands that resolve most MBR errors in under 10 minutes, no reinstall needed.

Renew Exchange Self-Signed Certificate: Step-by-Step
Renew a Microsoft Exchange self-signed certificate on Exchange 2016/2019 in under 20 minutes using EMS, MMC, and IIS Manager - restoring a 5-year cert with zero service disruption.

CyberChef Tutorial: Decode, Encrypt & Analyze Data
CyberChef offers 483 built-in operations, all client-side. Learn to self-host it with Docker in one command, build multi-step recipes, and decode, encrypt, or extract data in minutes.

Wazuh XDR Docker Lab: Deploy and Enroll Agents
Deploy Wazuh 4.x XDR in under 20 min using Docker Compose, then enroll Windows and Linux agents on ports 1514/1515 for real-time SIEM monitoring.

Install SCCM Console on Windows 10: 3 Methods
Install the SCCM console on Windows 10 three ways: wizard, ConsoleSetup folder, and /q silent install. Includes exact log paths for CB 1902+ and verification steps.