About

Who I am

I'm Roger—an endpoint and identity engineer, and the person behind this digital hub. Day to day I work in Microsoft Intune and Entra: Autopilot, Win32 apps, compliance, and the Graph/PowerShell automation that keeps a fleet honest. Adjacent platforms are part of the same job: Jamf on macOS, FleetDM on Linux, and mobile BYOD (iOS User Enrollment and Android Work Profile with app protection). I also care a lot about least privilege on the desktop—policy-based elevation instead of standing local admin (CyberArk EPM).

I write user-facing enrollment and privacy docs as often as I write remediations. This site is my home base for work-related links, lab ISOs, and a few personal corners like photos, games, and printers.

What I focus on

• Windows MEM — Autopilot, Company Portal, Win32 / detection-and-remediation, update rings, BitLocker and Secure Boot hygiene.
• BYOD / MAM — personal iPhone and Android enrollment with a hard split between personal data and the work container.
• Privilege — observe elevation, then enforce; first-match policy order (block → allow → elevate).
• Automation — PowerShell, Python, Microsoft Graph; reports and bulk device lifecycle without clicking every blade.
• Homelab — this hub, the wiki, media, Retrom, and a couple of FDM printers. I test Autopilot and imaging ideas here before they matter elsewhere.

What this site is

Roger's Digital Hub is a lightweight, fast place to find things I use often: quick links to Copilot, r/Intune, Intune and Entra what's-new pages, and a curated set of OS ISOs (Windows, Ubuntu, and others) for lab and installs. Photos, YouTube subscriptions, printers, and Triagio live here too.

I keep it simple on purpose—no bloat, no tracking—so it loads quickly and stays useful from any device.

Thanks

Shout-out to Alex for the support and encouragement. And thanks to you for stopping by—hope you find something useful here.