AU+NZ endpoint and identity operations automated
- Client
- Penguin Random House
- Industry
- Publishing and distribution
- Platform
- SCCM, Intune and Jamf
Key results
- Windows, macOS, warehouse devices and servers under one approach
- KRBTGT password rotation automated across Australian and New Zealand domains
- Monthly automated testing of Domain Admin group controls
Services used
The challenge
Penguin Random House Australia and New Zealand needed to keep a mixed endpoint and server estate secure, supportable and ready for change. The environment spans Windows, macOS, warehouse devices, SCCM, Intune and Jamf, and regular patching, application packaging and privileged-access work created both effort and control risk.
Automation
- Endpoint operations: application packaging and patching, Windows 11 engineering, SCCM/MCM migration, and Intune and Jamf administration.
- Repeatable workflows: scheduled scripts replace manual admin routines, keep execution logs and notify the right support teams.
- Controlled rollout: pilot-first deployment and documented handover reduce disruption when onboarding devices or standardising configuration.
Security by design
- Identity protection: automated KRBTGT password rotation across the Australian and New Zealand domains, with replication checks before it runs.
- Privileged-access assurance: monthly Domain Admin group testing adds and removes a test account, records membership and alerts the infrastructure and security teams.
- Endpoint compliance: Jamf and Intune apply policy-driven configuration, certificates, Wi-Fi and VPN settings, with visibility and control across managed devices.
The result
Recurring infrastructure work is now consistent, monitored and auditable. Penguin Random House has a stronger control environment, faster routine changes, more consistent endpoints and a practical path for managing future platform and organisational change securely.