Fleet-wide Intune rollout

The challenge

The challenge

Manual device setup at this scale was unsustainable. The IT team in Riyadh was the only group that could configure machines, meaning staff in Jeddah and Dammam had to wait for devices to be shipped back and forth — or for a technician to fly in. There was no central view of which devices were compliant, encrypted, or even connected to corporate systems.

• 2–3 day device setup time per new hire
• No central inventory or compliance view
• IT team bottleneck across three cities
• Inconsistent software and security policies

What we built

What we built

Logistructure designed and deployed a Microsoft Autopilot zero-touch enrollment pipeline. New devices now ship directly from the supplier to the employee's desk. On first power-on, Autopilot identifies the device, enrolls it in Intune, pushes the correct apps and policies, and registers it as compliant — all without the IT team touching the machine.

1. 1

   Tenant preparation & Intune configuration

   Hardened the Microsoft 365 tenant, configured Intune policies, and defined compliance baselines aligned with the group's security requirements.

2. 2

   Supplier integration with Autopilot

   Coordinated directly with the hardware supplier to pre-register device hardware IDs into Windows Autopilot before shipment.

3. 3

   App deployment & policy push

   Configured automatic deployment of Microsoft 365, the corporate VPN, and internal tools — all arriving silently on first login.

4. 4

   Pilot, then full rollout

   Ran a 50-device pilot across all three offices to validate the flow before rolling out to the full 600-device fleet.