Implement Intune Device Management

I need Microsoft Intune set up from the ground up so every Windows PC and iOS/Android handset in our organisation is enrolled, visible, and fully manageable. My main focus is device management, and success for me means that everyday tasks—pushing software, fixing issues remotely, and enforcing configuration or compliance rules—can all be handled inside the Intune (Endpoint Manager) console without manual workarounds.

Current state: devices are Azure AD-joined but otherwise unmanaged. Licences are already in place. What I lack is a clean Intune tenant configuration, tested enrolment workflows for the two device families, and well-structured policies that keep them secure and up to date.

Please deliver:

• Tenant configuration: security baselines, enrolment restrictions, role-based access
• Enrolment profiles and step-by-step documentation for Windows Autopilot and Apple/Android Company Portal flows
• Policies: configuration, compliance, and update rings that match our password, encryption and patching standards
• App deployment: at least two line-of-business apps and the Microsoft 365 suite pushed silently with version control
• Remote help set-up and a quick guide so our help-desk can use it on day one
• A final run-through with me to prove a test device from each platform receives the right apps, settings and can be supported remotely

You may use PowerShell, Graph API, or the Intune admin centre—whatever streamlines the build. The key is a maintainable, documented environment that I can extend later (possibly to macOS) without rebuilding everything.