PS >~

Sastu Insights

Principal Consultant and Cloud Architect focused on Azure, Microsoft 365, and Endpoint Security. I specialize in Intune, Microsoft Defender for Endpoint, Endpoint Privilege Management, Entra ID, and Microsoft 365 in general. I have been with perinova IT-Management GmbH for over 15 years.


On this blog I share practical insights from the field - mostly implementation guides and lessons learned from real deployments. Expect deep dives on Intune policies, device control, and Windows security hardening.

Sascha Stumpler
24 min Intune · Endpoint Security PS >~/microsoft-defender/powershell/conference Workplace Ninja Summit 2026 #What I took home from Baden 23 min Entra ID · Intune PS >~/business-premium/win32-app/conditional-access Deploying the Global Secure Access Client #with Microsoft 365 Business Premium 14 min Intune PS >~/licensing/remediation/win32-app The Poor Man's Remediation #Win32 apps for tenants without remediation licenses 9 min Intune · Part 3 of 3 PS >~/psappdeploytoolkit/win32-app/drive-mapping Packaging a Drive and Printer Mapping Script #with PSAppDeployToolkit and Deploying It with Intune 11 min Intune · Part 2 of 3 PS >~/powershell/scheduled-task/drive-mapping Running a Scheduled Task #only when Active Directory is actually reachable 11 min Intune · Part 1 of 3 PS >~/windows/powershell/drive-mapping Using Active Directory Information on Cloud-Only Devices #to Map Printers and Shares 8 min Entra ID PS >~/entitlement-management/microsoft-graph/powershell Microsoft Removes memberOf #for Dynamic Groups - Now What? 7 min Intune PS >~/entra-id/remediation/win32-app Auto-Accepting the "Continue to sign in" SSO Prompt #with Intune 23 min Intune PS >~/apple/enrollment/powershell Automatically Migrate Apple Enrollment Profiles #as Enrollment Policy 10 min Intune PS >~/apple/ios/enrollment Migrating from Apple Enrollment Profiles #to the Enrollment Policies 1 min Intune PS >~/pwa/group-policy/windows Resetting Forced Edge PWAs: Quick Guide #for IT Admins 15 min Azure PS >~/app-registration/certificate-authentication/tpm Non-Exportable Certificate Authentication #for Azure App Registrations 8 min Intune PS >~/microsoft-graph/managed-identity/windows-autopatch Sync User Ring Members' Devices to a Device Group #with Azure Automation 6 min Intune PS >~/github/github-actions/automation Automated Intune Backups to GitHub #with IntuneManagement 8 min Intune PS >~/endpoint-security/microsoft-defender/macos Controlling USB Access on macOS Devices #with Microsoft Defender for Endpoint 12 min Intune PS >~/device-control/endpoint-security/microsoft-defender Controlling USB Access on Windows Devices #with Microsoft Intune 5 min Hyper-V PS >~/powershell HyperV.VMFactory: VM Environments #Service Orchestration, and Mermaid Diagrams 5 min Intune PS >~/remediation/powershell/secure-boot Triggering the Secure Boot Certificate Update #with Intune Remediations 4 min Hyper-V · Autopilot PS >~/autopilot/powershell Creating Hyper-V VMs for Autopilot Testing #with HyperV.VMFactory 5 min Intune PS >~/win32-app/powershell Trigger User-Friendly Device Reboots on Demand #with Intune 2 min Intune PS >~/windows-11/application Sherlock Intune #and the case of the not applying filters 1 min Intune PS >~/windows-11 Get the Application User Model ID (AUMID) #using File Explorer in Windows 11 22H2 and later 2 min Intune PS >~/remediation/application Create a custom LAPS user #with an Intune Win32 App 1 min Group Policy · Security · EPM PS >~/group-policy-security-epm Hardening of BeyondTrust EPM #(aka Avecto Defendpoint) Group Policies 1 min Group Policy · Windows · Windows Hello PS >~/group-policy/windows/windows-hello Something went wrong #when enabling Windows 10 facial authentication 5 min Group Policy PS >~/gpo/security/windows-10 Group Policy Security Baselines #and Windows as a Service a Layered Approach 3 min SCCM PS >~/configuration-item/configuration-manager/current-branch Create LAPS managed user #with SCCM Configuration Item 1 min SCCM PS >~/configmgr/configuration-manager/task-sequence Task sequences are not showing up #in SCCM Software Center when multiple users are logged on