Success Story
Central Device Management. Without an M365 Admin. Without External Consultants.
Industry:
Packaging
Blueprints:
Intune Device Enrollment & Intune Autopilot
Result:
Central Device Management
We managed IT on the side. Setting up and maintaining each device individually was not sustainable long-term. The fact that Intune was already included in our license made getting started easy."
Felix Tryzna
Managing Director, Ulrich Tryzna Verpackungen GmbH
Starting Point
IT at Tryzna Verpackung was managed pragmatically: PCs set up locally, updates done manually, no central device management. There was no M365 admin. Microsoft 365 Business Premium was in use, but the included Intune license remained unused. It provided the foundation for central management at no additional cost.
Challenge
No unified patch management, no overview of device health, no enforceable security policies for the cloud. New devices were set up manually, time-consuming and undocumented. Expertise in Intune or Autopilot was missing from the team. A traditional consulting project was out of the question in terms of both time and budget.
The Path
The AI agents guided Felix Tryzna step by step through both blueprints:
Device enrollment with compliance policies and Conditional Access
Autopilot with Hybrid Join and automatic app deployment
Security policies for patches, encryption, and firewall
End-to-end testing with pilot devices
Project documentation and operations handouts
Felix Tryzna made the decisions. The AI agents provided context-specific recommendations and documented every step. Based on the experience from 450+ Microsoft projects.
Results
Central management: All endpoints integrated into Intune and centrally controllable.
Security enforced: Patch level, encryption, and firewall automatically verified. Access only from managed devices.
Rollout automated: New devices provisioned via Autopilot. No manual setup.
Implemented without an M365 admin: Production-ready configuration in just a few weeks.
Audit-ready documentation: Every decision captured. Runbooks for independent operations.
Outlook
The foundation for centrally managed IT is in place. Future devices run as zero-touch provisioning. Next step: Microsoft Defender for Business for endpoint protection and automated threat detection.
"Tryzna Verpackung shows what we built DAMALO for. Empowering mid-market companies to implement Microsoft projects independently. Affordable, fast, and with real competence building in-house."
David Malovecky
Founder, DAMALO
About Ulrich Tryzna Verpackungen GmbH
Packaging solutions from Hannoversch Münden. Over 40 employees, in-house development department, certified according to ISO 9001 and ISO 14001.
