Case Study 3: Manufacturing Sector

Intune Deployment for a Manufacturing Company

Organization Overview

  • Sector: Manufacturing
  • Location: Mumbai
  • Employees: 300 Users
  • IT Team: 5 members

Business Challenges

  • Device Fragmentation – Employees used a mix of Android, iOS, and Windows devices.
  • Security Risks – Lack of centralized control over mobile and Windows devices.
  • Manual Provisioning – IT staff manually configured new Windows devices, causing delays.

Outcomes & Benefits

  • Reduced time and manpower to provision new tickets.
  • Reduction of IT Support tickets for end users. Improved Security: Centralized control and policy enforcement.
  • Operational Efficiency: Reduced provisioning time and IT workload.
  • Scalability: Easily onboard new devices and users.
  • User Experience: Seamless setup and access to corporate resources.

Lessons Learned

  • Early stakeholder engagement ensured smoother adoption.
  • Pilot testing helped refine policies before full rollout.
  • Training sessions for IT and end-users were critical for success.

Project Goals

  • Implement Intune MDM for mobile devices.
  • Deploy Windows Autopilot for zero-touch provisioning.
  • Enforce security and compliance policies across all endpoints.
  • Enable remote management and self-service capabilities.

Solution Architecture

Microsoft Intune Deployment
  • Platform Integration: Connected Intune with Azure AD and Microsoft 365.
  • Device Enrolment:
    • Android: Used Android Enterprise with work profiles.
    • iOS: Enrolled via Apple Business Manager (ABM).
    • Windows: Enrolled via Autopilot and manual enrolment for legacy devices.
Mobile Device Management Policies
  • Compliance Policies:
    • Require PIN/password.
    • Block jailbroken/rooted devices.
    • Enforce encryption.
  • App Protection Policies:
    • Conditional access for Outlook, Teams, and SharePoint.
    • Prevent data sharing between personal and corporate apps.
  • Device Configuration:
    • Email and OneDrive profiles pushed automatically.
    • Remote wipe and lock capabilities enabled.
  • Windows Management
    • Configuration Profiles:
      • BitLocker encryption enforced.
      • Windows Defender Antivirus and Firewall policies.
      • Windows Update rings for phased updates.
    • Software Deployment:
      • Line-of-business apps deployed via Intune.
      • Microsoft Store apps managed centrally.
  • Windows Autopilot Implementation
    • Device Registration:
      • Devices registered via OEM partners and manually for existing inventory.
    • Deployment Profiles:
      • Created profiles for factory floor, office staff, and remote workers.
    • User-Driven Deployment:
      • Employees received devices pre-configured with company settings.
      • Seamless sign-in with Azure AD credentials.
    • Post-Deployment Configuration:
      • Apps and policies applied automatically.
      • Devices joined to Azure AD and enrolled in Intune.