What’s the Best Way to Manage Windows Servers and Endpoints?

I manage our infrastructure using Ansible – it's a bit unconventional for Windows, but it works well for us, given our Linux-heavy background. For server setups, we use Terraform for infrastructure and have been slowly migrating away from older .NET solutions running on IIS.

We use a combination of RMM tools and RDP for our tasks. TeamViewer comes in handy for real-time user assistance while Intune and our RMM handle most deployment and management duties. If you're dealing with diverse environments, having a solid RMM setup is key to keep things running smoothly.

Intune is our go-to for managing endpoints—super robust these days! For server management, we mix it up with PowerShell and tools like Windows Admin Center for one-off tasks. With PowerShell, a lot of management can be automated, minimizing the need for graphical interfaces.

It really depends on your setup! Some people swear by using tools recommended by their Cyber Insurance providers, even if they aren't the most convenient. For instance, we were stuck with a three-year contract with a security firm that ended up blocking some of our remote access tools. So, I'd recommend checking what aligns with your workflow and team needs instead.

For most of our tasks, we rely heavily on PowerShell along with Group Policies and configuration through Intune and Azure Arc. It's more efficient, especially for remote management. Help desk tasks are a mix of point-and-click and scripts to simplify the process.