Endpoint Deployment for 700+ Users
The problem
A large hardware refresh cannot be done one laptop at a time without long downtime and inconsistent setups. The goal was a standardized, secure setup for every user, with access working on day one.
What I did
Deployed standardized Windows 11 images with Windows Autopilot and Intune during an enterprise hardware refresh for 700+ users, applying consistent endpoint security baselines. Coordinated laptop refreshes and enrolled devices through PowerShell assisted workflows, Intune, and Entra ID, reducing manual setup and user downtime. Managed Okta, Intune, and Entra ID access workflows for 700+ users, including SSO assignments and MFA enrollment, and partnered with security and service desk teams to enforce endpoint policies and resolve ServiceNow incidents.
What I learned
Scale is mostly about staging and consistency: the same image, the same baseline, the same enrollment steps, and a clear way to handle exceptions. Access work matters as much as imaging work. If SSO and MFA are not ready, a perfectly imaged laptop still blocks the user.
What I would change next
Keep the same staging discipline, and document the rollout as a reusable runbook: image, baseline, enrollment, access checks, and handoff. That is the part peers and hiring managers can reuse, without any client specific detail.
Questions? Reach me at contact@shawndrafts.com or on LinkedIn.