PS >~

Sastu Insights

Principal Consultant and Cloud Architect focused on Azure, Microsoft 365, and Endpoint Security. I specialize in Intune, Microsoft Defender for Endpoint, Endpoint Privilege Management, Entra ID, and Microsoft 365 in general. I have been with perinova IT-Management GmbH for over 15 years.


On this blog I share practical insights from the field - mostly implementation guides and lessons learned from real deployments. Expect deep dives on Intune policies, device control, and Windows security hardening.

Sascha Stumpler
14 min Intune PS >~/licensing/remediation/win32-app The Poor Man's Remediation 9 min Intune · Part 3 of 3 PS >~/psappdeploytoolkit/win32-app/drive-mapping Packaging a Drive and Printer Mapping Script 11 min Intune · Part 2 of 3 PS >~/powershell/scheduled-task/drive-mapping Running a Scheduled Task 11 min Intune · Part 1 of 3 PS >~/windows/powershell/drive-mapping Using Active Directory Information on Cloud-Only Devices 8 min Entra ID PS >~/entitlement-management/microsoft-graph/powershell Microsoft Removes memberOf 7 min Intune PS >~/entra-id/remediation/win32-app Auto-Accepting the "Continue to sign in" SSO Prompt 23 min Intune PS >~/apple/enrollment/powershell Automatically Migrate Apple Enrollment Profiles 10 min Intune PS >~/apple/ios/enrollment Migrating from Apple Enrollment Profiles 1 min Intune PS >~/pwa/group-policy/windows Resetting Forced Edge PWAs: Quick Guide 15 min Azure PS >~/app-registration/certificate-authentication/tpm Non-Exportable Certificate Authentication 8 min Intune PS >~/microsoft-graph/managed-identity/windows-autopatch Sync User Ring Members' Devices to a Device Group 6 min Intune PS >~/github/github-actions/automation Automated Intune Backups to GitHub 8 min Intune PS >~/endpoint-security/microsoft-defender/macos Controlling USB Access on macOS Devices 12 min Intune PS >~/device-control/endpoint-security/microsoft-defender Controlling USB Access on Windows Devices 5 min Hyper-V PS >~/powershell HyperV.VMFactory: VM Environments 5 min Intune PS >~/remediation/powershell/secure-boot Triggering the Secure Boot Certificate Update 4 min Hyper-V PS >~/autopilot/powershell Creating Hyper-V VMs for Autopilot Testing 5 min Intune PS >~/win32-app/powershell Trigger User-Friendly Device Reboots on Demand 2 min Intune PS >~/windows-11/application Sherlock Intune 1 min Intune PS >~/windows-11 Get the Application User Model ID (AUMID) 2 min Intune PS >~/remediation/application Create a custom LAPS user 1 min Group Policy PS >~/group-policy Hardening of BeyondTrust EPM 1 min Group Policy PS >~/gpo/windows/windows-hello Something went wrong 5 min Group Policy PS >~/gpo/security/windows-10 Group Policy Security Baselines 3 min SCCM PS >~/configuration-item/configuration-manager/current-branch Create LAPS managed user 1 min SCCM PS >~/configmgr/configuration-manager/task-sequence Task sequences are not showing up