Not every improvement is a new tool. Much of my work at RCBC has been rebuilding the systems I inherited so they are simpler to run, easier to keep current, and safer by default. These three projects share that goal.
I architected the college's first greenfield Microsoft Intune environment and set it up alongside the existing MECM (SCCM) infrastructure in hybrid co-management, bringing cloud-based management to the college's endpoints alongside the on-premises tooling.
On top of that foundation I implemented Windows Autopilot provisioning workflows, modernizing how new devices are enrolled and set up.
I also led the organization-wide implementation of BeyondTrust Privilege Management, enforcing least privilege and Zero-Trust standards across staff systems. The same platform is part of the security model for the Esports Lab.
Every lab or computer use had its own "fat" image. Each one had to be built in VMware, fully configured, generalized, and exported to a .wim file. Keeping images current meant repeating that entire process for every single variation.
I replaced them with one clean, up-to-date Windows image used for every lab, instructor, and staff system, and moved the per-system differences into MECM operating system deployment (OSD) task sequences:
The Active Directory environment I inherited was messy: its OU structure and security groups needed a full rework, and it carried 97 legacy Group Policy Objects.
I restructured the OU hierarchy and security groups, then worked through the GPOs: cleaning up what was obsolete, modernizing what was still needed, and consolidating related settings into fewer, standardized policies. The result is about 30 GPOs, a 70% reduction, which is far easier to understand, troubleshoot, and keep secure.