Overview
This document explains Devicie's automation tool, designed to streamline Intune environment management while ensuring security and stability. Below is a quick overview of its functionalities.
Automated Deployment and Customization
Devicie creates an optimized environment that meets corporate standards while integrating key customization elements:
-
Branding elements: Custom color themes, backgrounds, and lock screens.
-
Corporate assets: Office templates, fonts, and personalized welcome messages.
-
Browser configurations: Extensions for Chrome, Edge, and other supported browsers; home screens and policy customizations.
-
File management: OneDrive folder redirects for seamless storage integration.
-
Start menu and taskbar layouts: Custom shortcuts for desktop apps and web links.
-
Networking setups: Wi-Fi profiles and printer configurations.
-
Security and access: Certificate installations to ensure secure device connections.
-
Microsoft Office personalization: Organization-wide templates and macro security configurations.
Local Test Environment for Deployment Validation
Before full-scale implementation, a local test environment allows for controlled deployments, ensuring alignment with organizational needs:
-
Role-based access management: Define and assign attributes to role groups.
-
Pilot testing and deployments: Structured trials with organizational role groups.
-
Application inventory: License rationalization and continuous assessment.
-
Office Personalization and Macro Security: Distribution of templates via SharePoint, enabling automatic mapping of template libraries for Microsoft Word and PowerPoint.
Zero-Touch Device Deployment with Intune Autopilot
Leverage Intune Autopilot for automated provisioning and configuration:
-
Devices can be prepared by either the manufacturer or the organization.
-
Upon first use, the corporate login appears, followed by automated installation of files, applications, and secure access to company resources.
Role-Based Management and Enhanced User Experience
-
Aid in automated end-user onboarding with defined role-based access.
-
Ensure a systematically repeatable deployment process for consistency across all devices.
-
Provide a ticketing system for ongoing updates to the SOE, including:
-
Branding and aesthetic changes.
-
Configuration updates.
-
New deployment features.
-
Technology advancements.
-
Software updates.
-
Security Compliance and Corporate Template Distribution
-
Office Personalization and Macro Security adhere to established macro security protocols, including the Essential 8.
-
Facilitate corporate-wide distribution of templates for standardized document creation across all employees.
Verifying Automations Executed by Devicie
To confirm whether an automation was processed by Devicie, follow these steps:
-
Check device logs – Review system event logs to identify execution timestamps and relevant automation processes.
-
Monitor deployment dashboard – Use the organization's deployment interface to track configuration changes and software installations managed by Devicie.
-
Validate policy settings – Inspect policy configurations (e.g., browser settings, certificate installations, group assignments) that align with automated provisioning workflows.
-
Verify template deployment – Ensure Microsoft Office templates and SharePoint mapping have been distributed correctly under automation policies.
-
Confirm Autopilot enrollment – Check if devices were enrolled in Intune Autopilot, reflecting Devicie’s deployment framework.
Application Management
Back Catalog Applications
Uploads and assignments handled by Devicie automation.
-
Check the Notes section in the application properties. If it contains a GUID, it is part of the back catalog and managed.
Bespoke Applications
Custom-built applications designed for specific needs.
-
These are not managed automatically, so updates and assignments will not be reversed.
Intune and Winget Applications
Managed by Devicie automation.
Configuration Profiles
Config type | Managed by Devicie Automation |
Settings Catalog | Yes |
Custom | Yes |
Delivery Optimization | Yes |
Device restrictions | Yes |
Kiosk | Yes |
Update rings | Yes (excluding Pause/Resume) quality updates |
Wi-Fi | Yes (WPA-PSK only) |
Certificates | No |
Compliance policies | No |
VPN | No |
Endpoint Security
Type | Managed by Devicie Automation |
Antivirus | Yes |
Disk encryption | Yes |
Firewall | Yes |
Endpoint Privilege Management (EPM) | No |
App Control for Business | No |
Attack surface reduction (ASR) | Yes |
Account protection | Yes |
Device compliance | No |
Conditional Access | No |
Other Settings
Type | Managed by Devicie Automation |
Autopilot profiles | Yes |
Enrolment status page (ESP) | Yes |
Platform scripts | Yes |
Remediation scripts | No |