With our expert knowledge always up to date

2Pint Software: An overview of features, modules, and use cases

2Pint Software is a software manufacturer founded in 2014 and based in Hovås, Sweden. It started with Microsoft's peer-to-peer technology, BranchCache, which the founders wanted to further develop and make practical for real-world use.

Cyberattacks on Endpoints: The most important do’s and don’ts in an emergency

Compared to centrally managed servers, endpoints present companies with unique challenges. This is primarily due to their number, their distribution, their technical diversity, and the direct involvement of users.

Human Factor in Cybersecurity: Risks and Protective Measures

Employees are among the preferred targets for cybercriminals. They have daily access to corporate data, applications, and internal systems. Attackers therefore frequently attempt to exploit human weaknesses rather than directly overcoming technical security mechanisms.

Patch My PC Plus vs. Premium: Comparing Features and Differences

Zero Trust with Microsoft 365 and Intune: Model and Implementation

Zero Trust is a security strategy where trust is not assumed based solely on a known user, device, or network location, but rather every access request is consistently verified.

Patch My PC announces new features at the Workplace Ninja Summit

Patch My PC provided a Workplace Ninja Summit 2026 held from September 14th to 17th in Baden, Switzerland, to offer a glimpse into the future direction of their product development.

Client Management Explained: How Companies Benefit from Efficient Device Management

The importance of client management lies in its ability to help companies maintain control of their devices, increase IT infrastructure efficiency, and minimize security risks.

Why bare-metal deployment still makes sense in 2026

Bare-metal deployment refers to the complete reinstallation of an operating system on empty, wiped, or newly prepared hardware. The device typically boots via PXE, USB, or another boot medium. Windows is then reinstalled, partitioned, equipped with drivers, and prepared according to defined standards.

Migrating from Matrix42 Empirum to Microsoft Intune: What you should keep in mind

Migrating software packages from Matrix42 Empirum to Intune is often one of the most time-consuming parts of the project. ‍Empirum packages cannot simply be exported and then imported into Intune unchanged.

How Claude Mythos is changing patch management and software packaging

AI will lead to more software vulnerabilities being discovered than ever before. The race against time to close them will be one of our greatest challenges.

Intune vs SCCM: Microsoft's endpoint management solutions in comparison

With Intune and SCCM/MECM, Microsoft offers two solutions that are at the heart of endpoint management in many companies — with different approaches, strengths and areas of application.

Intune App Inventory: Better identification and management of applications in Microsoft Intune

With Intune App Inventory, Microsoft is significantly expanding app discovery in Intune. The feature provides greater transparency regarding installed applications. while simultaneously raising new questions.

Our study "State of Endpoint Management in DACH 2025/26" now available

With the study "State of Endpoint Management in DACH 2025/26", we aimed to create a comprehensive picture of the endpoint reality in the German-speaking region for the first time. Previously, we felt there was a lack of a comparable German-language study specifically addressing this topic.

Win32 vs. Line-of-Business App in Intune: What's the Difference?

Anyone deploying applications with Intune faces a choice between Line-of-Business (LOB) and Win32 apps. This decision impacts not only the technical implementation, but also the maintainability, flexibility, and stability of the deployment.

NIS-2 security measures and vulnerability management: The BSI requires these measures

In its #NIS2know series, the BSI highlights security measures relating to IT systems and focuses in particular on vulnerability management.

Secure-Boot Certificate Expiry in June 2026: Risks and Need for Action

In June 2026, many of the currently used Secure Boot certificates reach their expiration date and this can quickly become a problem for companies.

On-premises vs. cloud — which IT strategy is right for your company?

A hybrid cloud strategy combines on-premises and cloud resources in such a way that workloads run where it makes the most sense functionally, technically, and organizationally. In practice, this often means that sensitive or heavily regulated systems remain on-premises, while scalable services, modern collaboration, or new applications are operated in the cloud.

NIS2 compliance through client hardening: requirements, implementation, evidence

The regulatory basis for NIS2 implementation consists of several documents that are not easy to understand at first glance. They range from the EU directive to the binding EU implementing regulation to the German implementation law.

When is Patch Management NIS2 compliant?

NIS2 requires companies to install security patches within a reasonable period of time — and verifiably. This means that it is no longer enough to install patches at some point. They must be prioritized, tested, documented and rolled out in a traceable manner.

Is SCCM dead for good? Annual Release Cadence for SCCM

The data that has now been communicated shows that SCCM will be supported until at least March 2029. But since there is no talk of so-called “deprecation” yet, we strongly assume that SCCM will continue to be supported for years to come.

Microsoft Announces Intune Suite Integration for Microsoft 365 E3 & E5

By integrating central Intune Suite functions into Microsoft 365 E3 and E5, Microsoft is not only simplifying the technical implementation of modern endpoint strategies — there is also new potential from a licensing perspective.

Pentest: Identify security gaps — and deal with them correctly

For a pentest to be fully effective, it must be carefully planned and followed up. In practice, however, there are typical mistakes that significantly reduce the success of a test.

intuneWinAppUtil: Generate .intunewin to package Win32 apps for Microsoft Intune

Originally developed to close gaps in app deployment via Intune, IntuneWinAppUtil offers a way to provide even complex legacy apps or company-specific applications — regardless of whether they are installed via a classic installer or via a script.

SOFTTAILOR becomes Baramundi Competence Center Partner — Future-proof endpoint management from Germany

Initiated by the end-of-life of Ivanti DSM, we began the search for a suitable alternative. After all, DSM was highly appreciated for a long time, especially for its stability, speed, on-premise architecture, granular adjustment options and its German origin.

Co-management: Combining Intune and MECM efficiently

For companies that have been using SCCM so far and want to introduce Microsoft Intune, co-management promises to be an exciting path. It allows you to combine traditional and cloud-based management methods.

Device management with Intune company portal — The app for secure access to corporate resources

The company portal is essential for companies because it standardizes device management without sacrificing ease of use. Employees can independently install apps, view compliance notices and retrieve device information, while IT always keeps track of device inventory and security status.

Patch My Mac — Automated patch management for macOS with Patch My PC

What was complex and cumbersome for a long time in hybrid Mac/Windows environments and required multiple tools is now finally easy: Patch My PC brings automated macOS patch management directly to Microsoft Intune — and thus puts an end to isolated solutions and manual workarounds.

Reduce IT costs with Microsoft Intune

A major advantage is the deep integration with Microsoft 365 and Entra ID (formerly Azure Active Directory). This connection allows companies to reuse existing identities, group policies and security mechanisms and to utilize the functions and benefits of the Microsoft platform.

Microsoft 365 E5 Security Add-on: Advanced security without license clutter

With the Microsoft 365 E5 Security Add-on, Microsoft offers a cost-effective way to significantly expand your own protection — without having to invest in full E5 licenses right away.

Cloud-native endpoint management: Basics, challenges, and solutions with Microsoft Intune

The Switch to Cloud-Native Endpoint Management offers the opportunity to clean up the tool landscape — many functions that used to require separate solutions are already covered by the modern features of Microsoft 365

Understanding Entra ID device join types: Domain Joined, Hybrid Joined, Entra Joined, and Entra Registered

Each of these options has its own advantages and disadvantages, which vary significantly in management, security, and user experience.

Microsoft Intune Admin Center Explained: Features, Benefits, and Best Practices

The Microsoft Intune Admin Center is more than just a management portal — it is the central control element for modern endpoint management. With its clear structure, deep integration with Microsoft 365 and diverse functions, it enables IT departments to manage devices and applications securely, efficiently and scalably.

Security Operations Center (SOC): Key to cyber resilience and effective threat defense

A Security Operations Center (SOC) acts as a bulwark of modern security strategies: It identifies threats early on and minimizes potential damage through targeted responses.

What is Microsoft Entra Private Access? Features, benefits & setup

Traditional VPNs are slow, difficult to manage, and pose a security risk. They provide blanket access to the corporate network, which allows attackers to move laterally as soon as they have gained access via VPN.

Windows LAPS with Microsoft Intune: Securely and automatically manage local administrator passwords

With the development of Windows LAPS and native support in Microsoft Intune, the playing field is changing — and opening the door for modern, scalable protection of local admin rights.

Global Secure Access: The modern alternative to VPNs

Global Secure Access (GSA) is a modern security solution that gives companies secure, identity-based access to internal and external resources. Instead of relying on traditional VPNs or network-centric security models, GSA uses a zero-trust architecture to ensure that only authorized users and devices can access corporate data.

Windows 365 Link in focus: A secure path to the cloud

Windows 365 Link is Microsoft's first purpose-built cloud PC device based on the Windows 365 platform. It is a sleek, compact hardware solution that enables businesses to seamlessly and securely access their cloud PCs

Windows 11 upgrade: Everything important for companies for a successful rollout

A key reason for the upgrade is the upcoming end-of-life (EOL) of Windows 10. Microsoft wants to discontinue support for Windows 10 on October 14, 2025. From this point on, there will be no more security updates, bug fixes, or technical support.

Microsoft Connected Cache: The solution for efficient caching in companies

The core of MCC is that frequently used content is cached locally on the network. Instead of repeatedly downloading updates or applications from the cloud, they are delivered directly from the cache.

On-premises explained: advantages, disadvantages and alternatives

With cloud solutions, the availability often depends on the respective provider, which makes companies somewhat dependent. In contrast, with proper maintenance, on-premises offers a stable and independent IT infrastructure.

Endpoint security: How companies effectively protect their devices from cyber attacks

Endpoint security goes far beyond protecting traditional malware detection and includes a variety of preventive and reactive measures.

Microsoft Intune and macOS: Security, Compliance, and Automation on Apple Devices

Managing macOS devices in Microsoft-dominated companies has been a challenge for a long time. Apple and Microsoft have historically been in competition with each other, which meant that support for Macs was limited in many Microsoft enterprise solutions.

Windows Autopilot V1 vs. V2: What can Autopilot Device Preparation do?

Windows Autopilot V2 (Autopilot Device Preparation) offers a modernized architecture without hardware hashes, optimized OOBE, real-time monitoring, and advanced app delivery options, but still without hybrid support or pre-provisioning.

Cloud Management Gateway for SCCM: Overview, Functionality, Benefits

Managing remote devices with SCCM doesn't necessarily require the introduction of Microsoft Intune. With the SCCM Cloud Management Gateway (CMG), you can securely expand your on-premise IT infrastructure into the cloud.

CIS Benchmarks vs. Microsoft Security Baselines: Comparing Security Standards for System Hardening

The CIS Benchmarks and the Microsoft Security Baselines take different approaches to system hardening, with the CIS Benchmarks standing for in-depth security and flexibility and the baselines offering a quick solution for Microsoft environments.

Conditional Access in Microsoft Entra ID and Microsoft Intune

As IT infrastructures increasingly move to the cloud, managing access to business-critical data and documents is becoming more and more demanding. Companies must provide employees with flexible and location-independent access without jeopardizing the security of their data.

Ivanti DSM alternatives: Future-proof solutions for modern endpoint management in 2025

The upcoming end-of-life of Ivanti DSM is forcing many companies into action, but also offers opportunities for a more modern solution. The alternatives presented — Microsoft Intune, MECM/SCCM and Ivanti Neurons — offer different approaches to meet the needs of modern IT landscapes.

PSADT v4: An overview of all new features and improvements

Version 4 of the PowerShell App Deploy Toolkit brings numerous improvements that significantly simplify and optimize use in IT environments.

Windows Server 2025: Highlights, Requirements & Licensing

With the release of Windows Server 2025, Microsoft is launching the latest version of its proven server OS.

Take out cyber insurance: Why endpoint management is crucial

Cyber insurance offers protection against the financial consequences of cyber attacks, but expects preventive measures such as patch management, system hardening and endpoint protection.

Patch Management Software and Package Libraries: The Ultimate Overview 2025

Patch management software refers to tools that help IT departments centrally manage security updates and bug fixes (patches). They analyse existing systems for missing updates, make them available automatically and monitor the installation status.

Understanding and Using BYOD: Strategies for IT Security and Productivity

The introduction of BYOD offers numerous benefits for companies and employees. When implemented correctly, the concept can increase the efficiency and satisfaction of the workforce while saving costs.

Windows 10 end of support: Everything you need to know now

Software has a life cycle — this also applies to Windows 10. The end of support is an ordinary process that aims to replace older technologies with modern solutions.

Windows 11 Hotpatch: Good bye restart

Hotpatch allows companies to keep their operating systems up to date without rebooting.

Pre and post-install actions now available in Intune Enterprise App Management

The new features in Intune Enterprise App Management offer IT administrators the ability to define pre-install and post-install actions. These actions extend the classic installation and uninstall commands and provide even more precise control over application deployment.

New: App Discovery in Microsoft Entra Private Access

Microsoft has taken a significant step in network security with the introduction of App Discovery in Microsoft Entra Private Access. This new feature, which was presented at the Ignite conference, supports the Zero Trust Network Access (ZTNA) approach and is intended to replace traditional VPN solutions.

Intune Enhanced Hardware Inventory: Features & Setup

Microsoft Intune Hardware Inventory provides IT departments with a centralized solution to collect and efficiently manage detailed hardware data, such as network adapters, disk status, and processor information.

Device-as-a-Service under the microscope: Flexible, smart, efficient

Device as a Service (DaaS) enables companies to make their IT infrastructure flexible and future-oriented in order to keep pace with technological developments.

Mobile device management: Everything companies need to know in 2025

With a comprehensive MDM strategy, companies can ensure that all mobile devices comply with internal policies and restrict access to corporate data to trusted, secured devices.

WSUS discontinuation - What alternatives do companies have?

For years, WSUS has served as a key technology for managing and deploying Windows updates on corporate networks, particularly on Windows servers.

Software distribution for companies: methods, tools and success factors

Without structured software distribution, there is not only a risk of security gaps, but also significant additional costs due to manual installations and inconsistent versions.

Everything you need to know about Unified Endpoint Management

In an increasingly digital working world, endpoint management is essential for companies to ensure the security and efficiency of their IT infrastructure. Since devices form the interface between end users and corporate resources, they represent potential entry points for cyber attacks and data leaks.

What is Software Packaging?

This blog post highlights the development of Software Packaging, explains its main advantages and challenges, and gives an outlook on future trends such as automation, cloud solutions and new packaging standards.

Introduction to Microsoft Intune Suite

Overview, features, and benefits of the Microsoft Intune Suite.

The difference between client, device, and endpoint management

What is the difference between endpoint management, client management, device management and mobile device management?

Business succession at SOFTTAILOR

Hans Birnstiel hands over the baton to Dorian Garbe and Thore Lenz.