Discuss a system problem

MDM CONSULTING / MAC & WINDOWS

Managed devices. Ready for the way you work.

I build, automate and improve mobile device management (MDM) for Mac and Windows. Jamf, Iru (formerly Kandji) and Microsoft Intune, connected to the people, applications and policies behind your workplace.

Discuss your device environment

UK-based. Working with UK and US businesses, and internationally.

BUSINESS NEED / ENGINEERING SCOPE

Make a new device a dependable start.

Setup varies from one laptop to the next. Apps arrive late, policies overlap and inventory does not show who owns a device. I design the management environment around the whole lifecycle, from enrolment and daily changes to recovery and retirement.

01

Build Mac management

Design and implement Jamf Pro or Iru, formerly Kandji, around your fleet. Connect Apple Business Manager and Automated Device Enrolment to configuration, application delivery, update policies and a clear setup experience.

02

Build Windows management

Configure Microsoft Intune and Windows Autopilot around deployment, applications and device ownership. Define configuration profiles, compliance policies, update rings and pilot groups, with tested support and recovery routes.

03

Automate the device lifecycle

Use management rules, scripts and supported APIs to assign applications, reconcile inventory and handle approved device tasks. Connect HR and identity events where useful, with checks, logging and an owner for failed actions.

04

Rebuild or migrate the fleet

Review existing policies, app packages and enrolment paths before changing platforms. Plan staged migration, test protection and Okta access dependencies, then hand over configuration standards and operating instructions.

ILLUSTRATIVE PROCESS

From an assigned laptop to a working first day.

In this illustrative build, a device is assigned to its owner before enrolment. Management applies the agreed configuration, apps and protection. Checks confirm readiness, while failed setup or missing inventory reaches the person responsible for resolving it.

  1. Device and owner agreed

  2. Enrol and configure

  3. Deliver apps and protection

  4. Check readiness and hand over

DESIGN / BUILD / HANDOVER

A system you can understand and run.

Commission a design, a defined implementation or both. We agree the scope and acceptance criteria before delivery.

How design and delivery work
  • MDM architecture and enrolment design
  • Configuration, application and update standards
  • Device automation with tested exception paths
  • Pilot results and migration or recovery plan
  • Inventory ownership and operator runbooks

EXPERIENCE BEHIND THE WORK

Relevant work you can inspect.

My prior contract delivery includes designing and deploying Jamf Pro and Intune environments for three client organisations with more than 100 endpoints each.

From my prior in-house and contract delivery. These figures are not presented as Halation client totals.

Read the MDM delivery record

SCOPING THE ENGAGEMENT

Start with the right questions.

Working with UK and US teams

I work remotely with teams in the United Kingdom, United States and internationally. We agree time-zone overlap, workshops, access arrangements and change windows before work starts. You work directly with the architect building your system.

Do you work with Jamf, Kandji and Intune?

Yes. Mac management can be scoped around Jamf or Iru, formerly Kandji, and Windows management around Microsoft Intune. We assess the fleet, subscriptions, existing configuration and support needs before choosing the build or migration approach.

Can device management work with Okta device assurance?

Yes. We can scope management alongside Okta Verify, FastPass and device assurance. Enrolment, available posture signals and app sign-in policies need to work together. We test permitted and denied access, user remediation and exceptions before a wider rollout.

Can you automate an existing MDM rather than replace it?

Yes. A defined engagement can improve application delivery, update handling, inventory reconciliation or repeated device tasks in your current platform. We use native management features where they fit, adding scripts or API integrations for the agreed gaps.

CONNECTED SERVICES

Endpoint security & device assuranceOkta consulting & implementationIT environment builds & migrations

CONNECT THE BUSINESS TO THE BUILD

What needs to work differently?

Tell me about your current systems, the outcome you need and the constraints. A short outline is enough to start.

Discuss your device environmentExplore enterprise IT solutions