Gurpreet Singh

Microsoft Intune:

• Deployed and managed Windows AutoPilot for seamless device provisioning.
• Created and enforced compliance policies, configuration profiles, and conditional access rules.
• Managed hybrid co-management with MECM, ensuring smooth workload transitions and policy alignment.
• Migrated devices from traditional GPO-based management to cloud-based Intune policies for streamlined control.
• Configured Windows Update for Business via Intune to automate patching and reduce manual overhead.
• Implemented Endpoint Security policies for antivirus, firewall, and disk encryption using Intune.
• Integrated Intune with Azure AD dynamic groups for automated targeting policies and apps.
• Deployed Win32 apps with custom detection logic and dependency handling for reliable installations.
• Used Intune reporting and analytics to monitor device health, compliance status, and deployment success.

Microsoft Defender for Endpoint:

• Integrated Defender for Endpoint with Intune to enforce real-time threat protection and compliance policies.
• Configured Endpoint Security profiles in Intune to manage antivirus, firewall, and attack surface reduction settings.
• Deployed Defender onboarding scripts and policies through Intune for seamless agent installation and activation.

SCCM / MECM:

• Designed and maintained OS deployment task sequences for upgrades, driver injection, PXE boot setups, and post-deployment configuration
• Automated patching and software updates using ADRs and maintenance windows.
• Managed distribution points, boundaries, and content replication for optimal performance.
• Integrated MECM with Intune for co-management and workload shifting.
• Scheduled and monitored software update deployments with detailed compliance reporting.
• Performed client health checks, remediation scripting, and infrastructure optimization.

Group Policy Objects (GPOs):

• Developed and maintained GPOs for security hardening, user restrictions, and desktop experience.
• Migrated legacy GPOs to modern Intune equivalents where applicable.
• Conducted audits to eliminate redundant or conflicting policies.

Patching Process:

• Led monthly patch cycles using MECM and Intune, ensuring compliance and minimal disruption.
• Coordinated pilot testing, rollback strategies, and reporting dashboards for patch success rates.
• Supported third-party patching for non-Microsoft applications.

Application Packaging:

• Created and tested application packages using MSI, App-V, and PowerShell for deployment via MECM and Intune.
• Defined detection rules, return codes, and dependencies to ensure reliable installations.
• Maintained centralized app catalog and version control for enterprise software.

Azure Virtual Desktop (AVD):

• Provisioned and managed AVD host pools, session hosts, and FSLogix profile containers.
• Integrated AVD with Intune and Defender for Endpoint to enforce security and compliance.
• Tuned performance through scaling plans, image optimization, and monitoring tools.