With our expert knowledge always up to date

Client Management Explained: How Companies Benefit from Efficient Device Management

The importance of client management lies in its ability to help companies maintain control of their devices, increase IT infrastructure efficiency, and minimize security risks.

31.8.2026

Why bare-metal deployment still makes sense in 2026

Bare-metal deployment refers to the complete reinstallation of an operating system on empty, wiped, or newly prepared hardware. The device typically boots via PXE, USB, or another boot medium. Windows is then reinstalled, partitioned, equipped with drivers, and prepared according to defined standards.

27.8.2026

Migrating from Matrix42 Empirum to Microsoft Intune: What you should keep in mind

Migrating software packages from Matrix42 Empirum to Intune is often one of the most time-consuming parts of the project. ‍Empirum packages cannot simply be exported and then imported into Intune unchanged.

31.7.2026

How Claude Mythos is changing patch management and software packaging

AI will lead to more software vulnerabilities being discovered than ever before. The race against time to close them will be one of our greatest challenges.

28.7.2026

Intune vs SCCM: Microsoft's endpoint management solutions in comparison

With Intune and SCCM/MECM, Microsoft offers two solutions that are at the heart of endpoint management in many companies — with different approaches, strengths and areas of application.

14.7.2026

Intune App Inventory: Better identification and management of applications in Microsoft Intune

With Intune App Inventory, Microsoft is significantly expanding app discovery in Intune. The feature provides greater transparency regarding installed applications. while simultaneously raising new questions.

17.6.2026

Our study "State of Endpoint Management in DACH 2025/26" now available

With the study "State of Endpoint Management in DACH 2025/26", we aimed to create a comprehensive picture of the endpoint reality in the German-speaking region for the first time. Previously, we felt there was a lack of a comparable German-language study specifically addressing this topic.

15.6.2026

Win32 vs. Line-of-Business App in Intune: What's the Difference?

Anyone deploying applications with Intune faces a choice between Line-of-Business (LOB) and Win32 apps. This decision impacts not only the technical implementation, but also the maintainability, flexibility, and stability of the deployment.

6.5.2026

NIS-2 security measures and vulnerability management: The BSI requires these measures

In its #NIS2know series, the BSI highlights security measures relating to IT systems and focuses in particular on vulnerability management.

13.4.2026

Secure-Boot Certificate Expiry in June 2026: Risks and Need for Action

In June 2026, many of the currently used Secure Boot certificates reach their expiration date and this can quickly become a problem for companies.

4.3.2026

On-premises vs. cloud — which IT strategy is right for your company?

A hybrid cloud strategy combines on-premises and cloud resources in such a way that workloads run where it makes the most sense functionally, technically, and organizationally. In practice, this often means that sensitive or heavily regulated systems remain on-premises, while scalable services, modern collaboration, or new applications are operated in the cloud.

14.2.2026

System hardening

NIS2 compliance through client hardening: requirements, implementation, evidence

The regulatory basis for NIS2 implementation consists of several documents that are not easy to understand at first glance. They range from the EU directive to the binding EU implementing regulation to the German implementation law.

12.2.2026

When is Patch Management NIS2 compliant?

NIS2 requires companies to install security patches within a reasonable period of time — and verifiably. This means that it is no longer enough to install patches at some point. They must be prioritized, tested, documented and rolled out in a traceable manner.

3.2.2026

Is SCCM dead for good? Annual Release Cadence for SCCM

The data that has now been communicated shows that SCCM will be supported until at least March 2029. But since there is no talk of so-called “deprecation” yet, we strongly assume that SCCM will continue to be supported for years to come.

2.2.2026

Microsoft Announces Intune Suite Integration for Microsoft 365 E3 & E5

By integrating central Intune Suite functions into Microsoft 365 E3 and E5, Microsoft is not only simplifying the technical implementation of modern endpoint strategies — there is also new potential from a licensing perspective.

17.11.2025

Pentest: Identify security gaps — and deal with them correctly

For a pentest to be fully effective, it must be carefully planned and followed up. In practice, however, there are typical mistakes that significantly reduce the success of a test.

30.9.2025

intuneWinAppUtil: Generate .intunewin to package Win32 apps for Microsoft Intune

Originally developed to close gaps in app deployment via Intune, IntuneWinAppUtil offers a way to provide even complex legacy apps or company-specific applications — regardless of whether they are installed via a classic installer or via a script.

29.9.2025

Company

SOFTTAILOR becomes Baramundi Competence Center Partner — Future-proof endpoint management from Germany

Initiated by the end-of-life of Ivanti DSM, we began the search for a suitable alternative. After all, DSM was highly appreciated for a long time, especially for its stability, speed, on-premise architecture, granular adjustment options and its German origin.

26.8.2025

Co-management: Combining Intune and MECM efficiently

For companies that have been using SCCM so far and want to introduce Microsoft Intune, co-management promises to be an exciting path. It allows you to combine traditional and cloud-based management methods.

20.8.2025

Device management with Intune company portal — The app for secure access to corporate resources

The company portal is essential for companies because it standardizes device management without sacrificing ease of use. Employees can independently install apps, view compliance notices and retrieve device information, while IT always keeps track of device inventory and security status.

20.8.2025

Patch My Mac — Automated patch management for macOS with Patch My PC

What was complex and cumbersome for a long time in hybrid Mac/Windows environments and required multiple tools is now finally easy: Patch My PC brings automated macOS patch management directly to Microsoft Intune — and thus puts an end to isolated solutions and manual workarounds.

7.7.2025

Reduce IT costs with Microsoft Intune

A major advantage is the deep integration with Microsoft 365 and Entra ID (formerly Azure Active Directory). This connection allows companies to reuse existing identities, group policies and security mechanisms and to utilize the functions and benefits of the Microsoft platform.

23.5.2025

Microsoft 365 consulting

Microsoft 365 E5 Security Add-on: Advanced security without license clutter

With the Microsoft 365 E5 Security Add-on, Microsoft offers a cost-effective way to significantly expand your own protection — without having to invest in full E5 licenses right away.

15.5.2025

Cloud-native endpoint management: Basics, challenges, and solutions with Microsoft Intune

The Switch to Cloud-Native Endpoint Management offers the opportunity to clean up the tool landscape — many functions that used to require separate solutions are already covered by the modern features of Microsoft 365

8.5.2025

Understanding Entra ID device join types: Domain Joined, Hybrid Joined, Entra Joined, and Entra Registered

Each of these options has its own advantages and disadvantages, which vary significantly in management, security, and user experience.

28.4.2025

Microsoft Intune Admin Center Explained: Features, Benefits, and Best Practices

The Microsoft Intune Admin Center is more than just a management portal — it is the central control element for modern endpoint management. With its clear structure, deep integration with Microsoft 365 and diverse functions, it enables IT departments to manage devices and applications securely, efficiently and scalably.

25.4.2025

Zero Trust

How does Zero Trust work with Microsoft 365 and Intune?

In contrast to traditional approaches, where internal network structures are considered trustworthy, Zero Trust views every interaction as a potential risk.

23.4.2025

Security Operations Center (SOC): Key to cyber resilience and effective threat defense

A Security Operations Center (SOC) acts as a bulwark of modern security strategies: It identifies threats early on and minimizes potential damage through targeted responses.

17.4.2025

What is Microsoft Entra Private Access? Features, benefits & setup

Traditional VPNs are slow, difficult to manage, and pose a security risk. They provide blanket access to the corporate network, which allows attackers to move laterally as soon as they have gained access via VPN.

15.4.2025

Windows LAPS with Microsoft Intune: Securely and automatically manage local administrator passwords

With the development of Windows LAPS and native support in Microsoft Intune, the playing field is changing — and opening the door for modern, scalable protection of local admin rights.

11.4.2025

Global Secure Access: The modern alternative to VPNs

Global Secure Access (GSA) is a modern security solution that gives companies secure, identity-based access to internal and external resources. Instead of relying on traditional VPNs or network-centric security models, GSA uses a zero-trust architecture to ensure that only authorized users and devices can access corporate data.

10.4.2025

End users: The biggest cyber risk and how companies can protect themselves

90% of all successful ransomware attacks are due to poorly or unmanaged devices (so-called endpoints). Studies have shown that the risk of cyber attacks is 11 times higher when more than 20% of endpoints are not properly managed.

10.4.2025

Hardware

Windows 365 Link in focus: A secure path to the cloud

Windows 365 Link is Microsoft's first purpose-built cloud PC device based on the Windows 365 platform. It is a sleek, compact hardware solution that enables businesses to seamlessly and securely access their cloud PCs

31.3.2025

Windows 11 upgrade: Everything important for companies for a successful rollout

A key reason for the upgrade is the upcoming end-of-life (EOL) of Windows 10. Microsoft wants to discontinue support for Windows 10 on October 14, 2025. From this point on, there will be no more security updates, bug fixes, or technical support.

26.3.2025

Microsoft Connected Cache: The solution for efficient caching in companies

The core of MCC is that frequently used content is cached locally on the network. Instead of repeatedly downloading updates or applications from the cloud, they are delivered directly from the cache.

24.3.2025

On-premises explained: advantages, disadvantages and alternatives

With cloud solutions, the availability often depends on the respective provider, which makes companies somewhat dependent. In contrast, with proper maintenance, on-premises offers a stable and independent IT infrastructure.

17.3.2025

Endpoint security: How companies effectively protect their devices from cyber attacks

Endpoint security goes far beyond protecting traditional malware detection and includes a variety of preventive and reactive measures.

5.3.2025

Microsoft Intune and macOS: Security, Compliance, and Automation on Apple Devices

Managing macOS devices in Microsoft-dominated companies has been a challenge for a long time. Apple and Microsoft have historically been in competition with each other, which meant that support for Macs was limited in many Microsoft enterprise solutions.

4.3.2025

Windows Autopilot V1 vs. V2: What can Autopilot Device Preparation do?

Windows Autopilot V2 (Autopilot Device Preparation) offers a modernized architecture without hardware hashes, optimized OOBE, real-time monitoring, and advanced app delivery options, but still without hybrid support or pre-provisioning.

27.2.2025

Cloud Management Gateway for SCCM: Overview, Functionality, Benefits

Managing remote devices with SCCM doesn't necessarily require the introduction of Microsoft Intune. With the SCCM Cloud Management Gateway (CMG), you can securely expand your on-premise IT infrastructure into the cloud.

20.2.2025

CIS Benchmarks vs. Microsoft Security Baselines: Comparing Security Standards for System Hardening

The CIS Benchmarks and the Microsoft Security Baselines take different approaches to system hardening, with the CIS Benchmarks standing for in-depth security and flexibility and the baselines offering a quick solution for Microsoft environments.

18.2.2025

Conditional Access in Microsoft Entra ID and Microsoft Intune

As IT infrastructures increasingly move to the cloud, managing access to business-critical data and documents is becoming more and more demanding. Companies must provide employees with flexible and location-independent access without jeopardizing the security of their data.

12.2.2025

Ivanti DSM alternatives: Future-proof solutions for modern endpoint management in 2025

The upcoming end-of-life of Ivanti DSM is forcing many companies into action, but also offers opportunities for a more modern solution. The alternatives presented — Microsoft Intune, MECM/SCCM and Ivanti Neurons — offer different approaches to meet the needs of modern IT landscapes.

7.2.2025

Application packaging

PSADT v4: An overview of all new features and improvements

Version 4 of the PowerShell App Deploy Toolkit brings numerous improvements that significantly simplify and optimize use in IT environments.

4.2.2025

Windows Server 2025: Highlights, Requirements & Licensing

With the release of Windows Server 2025, Microsoft is launching the latest version of its proven server OS.

28.1.2025

Take out cyber insurance: Why endpoint management is crucial

Cyber insurance offers protection against the financial consequences of cyber attacks, but expects preventive measures such as patch management, system hardening and endpoint protection.

20.1.2025

Patch Management Software and Package Libraries: The Ultimate Overview 2025

Patch management software refers to tools that help IT departments centrally manage security updates and bug fixes (patches). They analyse existing systems for missing updates, make them available automatically and monitor the installation status.

13.1.2025

Understanding and Using BYOD: Strategies for IT Security and Productivity

The introduction of BYOD offers numerous benefits for companies and employees. When implemented correctly, the concept can increase the efficiency and satisfaction of the workforce while saving costs.

8.1.2025

Windows 10 end of support: Everything you need to know now

Software has a life cycle — this also applies to Windows 10. The end of support is an ordinary process that aims to replace older technologies with modern solutions.

18.12.2024

Windows 11 Hotpatch: Good bye restart

Hotpatch allows companies to keep their operating systems up to date without rebooting.

5.12.2024

Pre and post-install actions now available in Intune Enterprise App Management

The new features in Intune Enterprise App Management offer IT administrators the ability to define pre-install and post-install actions. These actions extend the classic installation and uninstall commands and provide even more precise control over application deployment.

5.12.2024

New: App Discovery in Microsoft Entra Private Access

Microsoft has taken a significant step in network security with the introduction of App Discovery in Microsoft Entra Private Access. This new feature, which was presented at the Ignite conference, supports the Zero Trust Network Access (ZTNA) approach and is intended to replace traditional VPN solutions.

3.12.2024

UEM solution

Intune Enhanced Hardware Inventory: Features & Setup

Microsoft Intune Hardware Inventory provides IT departments with a centralized solution to collect and efficiently manage detailed hardware data, such as network adapters, disk status, and processor information.

25.11.2024

Hardware

Device-as-a-Service under the microscope: Flexible, smart, efficient

Device as a Service (DaaS) enables companies to make their IT infrastructure flexible and future-oriented in order to keep pace with technological developments.

25.11.2024

Mobile device management: Everything companies need to know in 2025

With a comprehensive MDM strategy, companies can ensure that all mobile devices comply with internal policies and restrict access to corporate data to trusted, secured devices.

20.11.2024

WSUS discontinuation - What alternatives do companies have?

For years, WSUS has served as a key technology for managing and deploying Windows updates on corporate networks, particularly on Windows servers.

13.11.2024

Software distribution for companies: methods, tools and success factors

Without structured software distribution, there is not only a risk of security gaps, but also significant additional costs due to manual installations and inconsistent versions.

29.10.2024

Everything you need to know about Unified Endpoint Management

In an increasingly digital working world, endpoint management is essential for companies to ensure the security and efficiency of their IT infrastructure. Since devices form the interface between end users and corporate resources, they represent potential entry points for cyber attacks and data leaks.

23.10.2024

Application packaging

What is Software Packaging?

This blog post highlights the development of Software Packaging, explains its main advantages and challenges, and gives an outlook on future trends such as automation, cloud solutions and new packaging standards.

27.6.2024

UEM solution

Introduction to Microsoft Intune Suite

Overview, features, and benefits of the Microsoft Intune Suite.

18.6.2024