Kapil Panwar

• Managed device security and vulnerabilities using Intune, KACE, and Tenable.io, ensuring devices stayed compliant.
  Handled patching and application updates through Intune, KACE, and Patch My PC, keeping devices secure with minimal disruption.
  Built PowerShell and Graph API scripts to check compliance, detect inactive devices, and simplify patching, reducing manual effort.
  Created reports and dashboards in SQL, Power BI, and Excel to track patch status, device health, and SLA performance.
  Responded to zero-day threats, coordinating with app and infrastructure teams to deploy fixes quickly.
  Improved user compliance by sending automated reminders (via Forms and ServiceNow) for timely updates and reboots.
  Retired inactive or non-compliant devices to help reduce security risks.

• Enrolled devices and managed user profiles using Microsoft Intune and Windows Autopilot, applying compliance policies and deploying LOB & Win32 applications.
  Managed SCCM infrastructure, including site roles, boundaries, certificates, and site hierarchy migration to ensure secure and smooth operations.
  Handled patching for 700,000+ devices by creating monthly Software Update Groups and monitoring deployments for timely updates.
  Managed Operating System Deployment (OSD) with task sequences, boot media, image updates, and driver packages to support field IT teams.
  Built custom SQL reports and automated daily email alerts for SCCM service account expiry, improving monitoring and avoiding service disruptions.
  Automated device compliance and health checks using PowerShell and Intune Graph API, reducing manual work and improving accuracy.
  Created and maintained SOPs for SCCM and Intune, standardizing processes and simplifying troubleshooting.
  Performed SCCM troubleshooting, including client remediation, log analysis, application deployment issues, and performance optimization.
  Prepared compliance and audit reports to give management visibility into patching, security, and device health.
  Managed VMware infrastructure (vSphere, vCenter, ESXi), including clusters, networking, performance tuning, and upgrades to maintain stability.

• Managed device enrollment and deployment profiles using Microsoft Intune and Windows Autopilot for smooth onboarding.
  Deployed LOB & Win32 applications in Intune, using the Intune App Conversion Utility for seamless integration.
  Generated and imported device hashes to simplify Autopilot setup and provisioning.
  Performed SCCM administration, including server installation, configuration, and VMware Hypervisor management.
  Handled patch management and software updates for Windows servers and client devices, ensuring compliance.
  Deployed applications and packages using SCCM and PowerShell scripting to reduce manual effort.
  Managed package distribution and reporting using query-based analysis for better monitoring.
  Troubleshot SCCM client, WMI, and application deployment issues using log analysis.
  Diagnosed and resolved task sequence failures in SCCM to maintain smooth OS deployments.
  Managed Azure AD and Microsoft 365 groups, including static and dynamic configurations.

Maintained SCCM servers, resolving package, distribution, and site issues to ensure smooth operations.
Ensured SCCM client health for optimal performance and compliance across devices.
Managed monthly patch deployments and software updates with minimal disruption to users.
Deployed applications and upgrades while handling troubleshooting for smooth user experience.
Created custom SCCM reports and resolved reporting inconsistencies.
Managed software distribution and patch management in SCCM 2007 and 2012 R2.
Handled update replication, security patch deployment, and vulnerability remediation.
Resolved antivirus issues and ensured secure system operations.
Performed server checks, log analysis, and maintained client-server communications.
Built device collections, managed client installations, and executed advertisements.
Supported end-users by resolving incidents and application lifecycle issues.
Repaired WMI, reinstalled SCCM clients, and managed systems remotely via SCCM Client Center.
Diagnosed and fixed OSD task sequence failures, managed content, and maintained distribution points.

• Managed software distribution, patch management, and application lifecycle across servers and user devices.
  Performed SCCM administration, including package creation, device collections, client health checks, inventory management, and automation using PowerShell.
  Provided remote end-user support via RDP and remote tools, resolving incidents and minimizing downtime.
  Monitored server health, performed log analysis, WMI repair, and client reinstalls to maintain system stability.
  Supported desktop and application environments including MS Office migrations, Citrix, VPN, file/printer services, and Lotus Notes.
  Managed Active Directory, antivirus solutions, printer setups, and enforced security policies.