business

Verdict

Submitted 5/6/2026, 7:30:17 AM · Completed 5/7/2026, 2:50:15 AM

8.2
go
The idea

Am I bad at my job, does my job suck, or is Intune & AVD just fucking horrible?

Pain point
Microsoft Intune lacks centralized logging and visibility for troubleshooting script deployments across diverse client environments
Who has this problem
Sysadmin working with Microsoft Intune and AVD
Contradiction (TRIZ)
wants centralized logging for troubleshooting but cannot deploy logging infrastructure due to client restrictions
Ideal final result
A centralized logging system that works across all client environments with no need for client-side modifications
Suggested solution
Implement a third-party logging solution like Splunk or Datadog that can collect logs from Intune deployments without requiring client-side changes, allowing for centralized monitoring and troubleshooting
Show original source text →
Bit of a rant. Moved to a new job, been in the support>jack of all trades>sysadmin game for 10 years. Old job had so many "nice to haves" with third party softwares that dealt with Printing, App deployment/Packaging, end-user workspace, etc. They were all included in our "standard platform" and any client would have them/use them making us able to generate a nice, stable, easy to work with platform for any engineer. Simple stuff like pushing printers had a couple third party solutions where we'd make sure drivers were uploaded/tested, and it'd deploy fine to end users. Deploying new servers/AVDs were done through a standardized run through another thirdparty software and would come out fine on the other end, or have clear enough notes to where I'd be able to troubleshoot efficiently, then test efficiently by just kicking off another run. New apps, same deal, package with psadt/intunewin with helperscript, push through a thirdparty software and deployed straight to server/endpoint with clear logging / auditing. FWIW, I left old job due to company decisions such as stripping me of my colleagues, and switching up all my clients. Technically, great place to be, had it's own issues, but any frustration was with the people, not the tech. New job is "Modern Workplace Engineer" at a CSP, and we do everything via "The official Microsoft -standard solution". No third party tools for anything , and it sucks . In the past two months, for many different types of clients, I've done shit like; Drivers through Win32 packages, while printers objects are through remediation scripts, or platform scripts that make scheduled tasks that run during logon. Neither provide centralized logging, barely ever run correctly, cause UAC prompts due to bad running order, etc. Dealing with the recent Adobe CVE & updating packages through Winget, Win32, MSI, all sorts of weird combinations depending on customer environment. None with proper auditing/logging, total set&forget&pray it runs as you hope. Getting FSLogix to work on (newly bulk enrolled) AVD's by using a platform script to deploy SAS key for systemwide access, firing under each user account using a scheduled task (as client's environment doesn't support seem to work with Entra Kerberos or AD DS and not enough hours have been sold to troubleshoot). Making and deploying remediation scripts for Windows Update because Windows Update Rings are deploying properly, but clients are just not triggering their updates automatically. Client devices showing >200 days since last attempt, with all relevant services running, even though they check in daily. Pushing BIOS passwords through Win32 apps & helperscripts, of course with no access to a physical test device, where the logging is only able to be placed locally on the device because client won't allow me to place logging in a storage account/table, etc. Meaning I can't troubleshoot anything remotely and constantly have to bug users for let me check their logging, only for it to fire just fine when tested on my end. Clients coming to new job's platform, and losing they previous development speed via third party stuff or even sccm / mecm, then getting frustrated when we're not able to move as fast on Intune. None of it ever works properly/reliably/fast. The culture here, and in a lot of other places from what I'm gathering, seems to be just applying random scripts they've found on Github etc. through Intune, or deploying non-standard solutions such as the systemwide SAS key -thing described above. None of it ever works reliably and leaves tons of edge cases due to interactions on customer environments and/or Intune's quirks which they only discover when they sprint headfirst into them. People here seem "fine" with this, as it's "The Microsoft way". I'm fine with scripts/scripting to get regkeys set or do whatever on end user devices, but fuck me, Intune just does not give you the visibility you need to troubleshoot anything remotely. My personal main thing; there's no "big red button" to test something. I've seen scripts run perfectly fine with Administrator / PSExec, but still fail when deployed through Intune, ofcourse after waiting 5+ hours for anything to show up in the portal. Syncing on an Intune device seems more like a suggestion to pull stuff, rather than actually forcing it to have a look. I'm constantly at the mercy of Azure to wait for stuff, and it's completely killing my motivation to work. Any change/Incident I see in the queue just annoys me because I can see so many little speedbumps I have zero impact on. Does this job suck, do I suck, does MS suck, or does anyone actually have advice for plugging the visibility / actionability -gap MS leaves us with?
TRIZ inventive level: 3/5· Principles: parameter changes, mechanical interaction
Synthesis verdict
**GO**. The idea of developing a solution to address Intune's visibility and reliability gaps has a strong potential for success. The market demand is high, with a large number of enterprise IT admins struggling with the limitations of Microsoft's native tooling. The pain points identified are valid and common, and a focused solution could be feasibly developed by a small team within a realistic timeframe. While there are risks associated with regulatory and platform dependencies, the potential for a dominant, Microsoft-native solution that fills the gap between Intune's promise and reality is significant. The monetization potential is also high, with a clear path to premium pricing and high margins.

Strengths

  • - High market demand for a solution to address Intune's visibility and reliability gaps
  • - Valid and common pain points identified
  • - Feasible development by a small team within a realistic timeframe
  • - High monetization potential with premium pricing and high margins

Weaknesses

  • - Regulatory risks associated with Microsoft's strict partner policies
  • - Platform risk due to dependence on Microsoft's ecosystem updates
  • - Potential for high churn rates among clients deeply invested in 'The Microsoft way'

Best angle

Develop a SaaS layer that sits atop Intune, injecting observability, testing, and automation without replacing it, to address the most acute visibility gap in the Microsoft Modern Workplace stack.

Panel verdicts

Risk

nvidia/llama-3.3-nemotron-super-49b-v1

2.0

“Lack of a clearly defined venture idea amidst the frustration hampers a detailed risk analysis, but assumed ventures face significant regulatory and platform risks.”

The frustration stems from a shift to Microsoft's standardized tools lacking third-party efficiency, causing visibility and reliability issues. However, the core idea for a business venture isn't clearly defined within the rant, making it challenging to assess. Assuming the implied venture is to offer enhanced, third-party tool-integrated services for Microsoft ecosystem management, the killers would be: **1. Regulation** - Microsoft's strict partner policies might restrict third-party tool integration, especially if they compete with Microsoft's offerings. **2. Platform Risk** - Dependence on Microsoft's ecosystem updates could render third-party solutions obsolete or incompatible overnight. **3. Churn** - Clients deeply invested in 'The Microsoft way' might resist additional costs for third-party solutions, leading to high churn rates. No-budget customers aren't a primary concern here as the target seems to be enterprises or large CSP clients.

Market

qwen/qwen3-next-80b-a3b-instruct

9.0

“Enterprise IT admins don't hate Microsoft - they hate being forced to manage complex environments with tools designed for simplicity, not scale, and they're desperate for visibility, not more scripts.”

There is a massive, unmet demand among enterprise IT professionals managing modern workplaces via Microsoft Intune without third-party tooling. This audience - roughly 2-3 million global IT admins and engineers at CSPs, enterprises, and MSPs - are forced into a brittle, opaque, and reactive workflow due to Microsoft's 'official' but underpowered tooling. They're drowning in Win32 packages, remediation scripts, scheduled tasks, and zero visibility into deployment outcomes. The pain is acute: no centralized logging, no reliable testing mechanisms, no rollback safety, and no way to troubleshoot without physical or user-assisted access. This isn't just frustration - it's productivity hemorrhage. Companies are losing hours per week per engineer to manual triage, user calls, and failed deployments. The market is already paying for bandaids: tools like ManageEngine, Ivanti, and even custom PowerShell wrappers are gaining traction. But there's no dominant, Microsoft-native solution that fills the gap between Intune's promise and reality. The audience is willing to pay for a 'big red button' that forces sync, provides real-time logs, validates script execution, and offers audit trails - all within the Intune ecosystem. This isn't a niche complaint; it's systemic. The fact that even seasoned engineers are resorting to SAS keys and GitHub scripts proves the ecosystem is broken. The opportunity is a SaaS layer that sits atop Intune, injecting observability, testing, and automation without replacing it - a 'Intune Observability Platform' for enterprise IT. The budget exists: enterprises spend billions on endpoint management. They're just not getting value from Microsoft's native stack.

Competition

nvidia/nemotron-3-nano-omni-30b-a3b-reasoning

6.0

“A unified, real - time Intune testing and logging layer would address the most acute visibility gap in the Microsoft Modern Workplace stack.”

The core pain point - lack of visibility and reliable testing for Intune deployments - is genuine and shared by many enterprise admins. Existing alternatives such as ManageEngine Desktop Central, Ivanti Endpoint Manager, and PDQ Deploy already provide centralized logging, testing, and orchestration for traditional SCCM or on - prem environments, but they either do not integrate natively with Intune or require complex workarounds. A dedicated Intune - focused observability platform that offers a 'big red button' test, real - time logs, and automated remediation would fill a clear gap. However, the market is still small, Microsoft's roadmap is evolving, and larger vendors could quickly add similar capabilities, threatening durability. Moreover, the user's reliance on third - party scripts suggests low switching costs for customers, meaning any new entrant must continuously innovate to stay relevant. Consequently, the differentiation is plausible but not strongly defensible over the long term.

Monetization

mistralai/mistral-medium-3.5-128b

9.0

“The market desperately needs a visibility and control layer to turn Intune from a black box into a reliable, auditable platform.”

Your pain points highlight a massive, underserved market: enterprise IT teams struggling with Microsoft Intune's lack of visibility, reliability, and testing capabilities. The gap between 'the Microsoft way' (script-heavy, opaque, slow) and third-party tools (standardized, auditable, fast) is a goldmine. A SaaS product that layers on top of Intune to provide (1) centralized logging/auditing, (2) a 'big red button' for instant testing/retries, (3) pre-built, validated deployment templates for common tasks (printers, BIOS, updates, FSLogix), and (4) environment-aware troubleshooting (e.g., 'why this script failed on *this* device') would command premium pricing. Pricing: $10 - $20/user/month (or % of Intune spend) with a free tier for small teams. Channels: Direct sales to MSPs/CSPs (your current employer is a prime customer), Microsoft AppSource, and GitHub/Reddit communities where admins vent. Margins: 80%+ (cloud-native, low COGS). Unit economics: High LTV (sticky, mission-critical) and low CAC (viral word-of-mouth from frustrated admins).

Viability

nvidia/llama-3.3-nemotron-super-49b-v1(fallback #1)

8.0

“A focused solution addressing Intune's visibility and reliability gaps could be feasibly developed by a small team within a realistic timeframe.”

The idea stems from a deep understanding of the technical frustrations in managing enterprise infrastructure, particularly with Microsoft's Intune. The pain points identified - lack of centralized logging, unreliable deployment, insufficient troubleshooting visibility, and dependency on Azure's unpredictable sync times - are valid and common in the field. The challenge lies in developing a solution that integrates seamlessly with existing Microsoft ecosystems without violating their terms, a significant technical hurdle. A viable product would need to offer transparent logging, a 'big red button' for immediate testing, and enhanced sync control. Given the specificity of the problem and the potential for a targeted solution, a solo or 2-person team could feasibly develop a v1 within 4-12 weeks, focusing on a narrow, high-impact feature set. Technical complexity is moderate to high due to Microsoft integration requirements, but the development path is clearer than more broadly scoped projects.

Synthesized by meta/llama-3.3-70b-instruct · 28.5s