LabMan Session Info Updated! Click Here to View Sessions
Join us on Thursday, May 21st for lunch and an afternoon of presentations! After our last session of the day around 6pm, dinner will be provided. Enjoy great food and catch up with friends!
Registration & Lunch
12:15p - 1:30p
Afternoon Sessions
1:30p - 3:15p
Sponsor Expo
3:15p - 3:45p
Afternoon Sessions
3:45p - 6:00p
Dinner
6:00p - 7:30p
On Friday, May 22nd we will host morning sessions. After our last session of the day around 12pm, lunch will be served before we wrap up with more prize giveaways including a special drawing just for presenters.
Breakfast
7:45a - 9:00a
Sponsor Expo
8:00a - 1:30p
Morning Sessions
8:30a - 11:00a
Afternoon Sessions
11:30a - 1:30p
Lunch & Prize Drawing
1:30p - 2:45p
Join us on Thursday, May 21st for lunch and an afternoon of presentations! After our last session of the day around 6pm, dinner will be provided. Enjoy great food and catch up with friends!
Registration & Lunch
12:15p - 1:30p
Afternoon Sessions
1:30p - 3:15p
Sponsor Expo
3:15p - 3:45p
Afternoon Sessions
3:45p - 6:00p
Dinner
6:00p - 7:30p
On Friday, May 22nd we will host morning sessions. After our last session of the day around 12pm, lunch will be served before we wrap up with more prize giveaways including a special drawing just for presenters.
Breakfast
7:45a - 9:00a
Sponsor Expo
8:00a - 1:30p
Morning Sessions
8:30a - 11:00a
Afternoon Sessions
11:30a - 1:30p
Lunch & Prize Drawing
1:30p - 2:45p
Below you'll find new session information for presentations. Session details are subject to change as is our schedule.
Before you can start utilizing all the features that Intune has to offer, you've got to figure out how to actually enroll your devices in the platform. Get an overview and some demos of the various options, including ConfigMgr Comanagement and OSDCloud.
A hands-on look at how Snipe IT is being used in several environments at NC State University.
Snipe IT has quickly become one of the most popular inventory management platforms for IT teams. This talk will cover the basics of Snipe IT, as well as look into how Snipe IT is currently being leveraged by the College of Sciences at NC State University to manage assets.
Apple unveiled MacBook Neo — an all-new laptop that delivers the Mac experience at a breakthrough price, starting at $499 for education institutions. Join Apple representatives to learn about the technical details of MacBook Neo and the best practices for deploying and managing Apple endpoints at scale.
There will be Q&A with Apple's Richmond-based account team. - All-new design. Durable unibody aluminum build in four stunning colors — silver, blush, citrus, and indigo - Portable & durable design. 2.7 pounds and 0.5 inches thin — built for learning on the go with Magic Keyboard and large Multi-Touch trackpad - Powered by A18 Pro chip with 6-core CPU and 5-core GPU for 50% faster everyday tasks - Up to 16 hours of battery life - AI, ML & Apple Intelligence. 16-core Neural Engine delivers 3x faster on-device AI workloads. Tools for writing, translation, transcription, and more are built-in - 13-inch Liquid Retina display. Comfortable, vibrant viewing optimized for classroom lighting conditions - Connectivity options include two USB-C ports, and a dedicated headphone jack - macOS Tahoe offers built-in privacy, security, and antivirus protection for peace of mind - Works seamlessly with Platform Single Sign-on and Authenticated Guest Mode -
Another One. Another ONE. ANOTHER ONE. This talk is a high-level review of how to "remix" (read: migrate) a combination of hundreds of local and domain group polices as individual configuration items for Windows client endpoints.
A quick review of how LGPO and Active Directory policies (including ADMX templates) will be provided as a foundation to set the storyline for migration individual configuration items to Intune in the form of Intune Settings Catalogs and custom settings. A review of which options to use depending on the use-case will be covered with examples demonstrated.
At this talk you will learn: - How to deploy ScreenConnect and why it's easy - How to use ScreenConnect's features to make life as easy as possible
Learn about our experience with ScreenConnect, to include... Deployment: Server-side installer generation Unique per-unit install hashes PSADT and scripted setup/organization Intune and scoped installation Usage: Groups Chat Toolbox Backstage Command relay Software management Other administrative tasks
Following on from the hugely successful first version of the LabMan presentation, Project Management in a Galaxy Far, Far Away, this goes further into the universe of project management practices and terms to get to the real heart of the Force on making sure projects deliver benefits to customers.
Project management terms and practices are explored, looking for the fundamental aid their provide in helping projects deliver real benefits. Terms include but are not limited to: project charters, RACI charts, risk registers, value driven delivery.
In this follow-up presentation to Apple's introduction of the new MacBook Neo, an overview of the decision-making process behind why VCU opted to go all-in on the MacBook Neo as the student loaner laptop of choice.
From March 4th through the end of May, we will explore the process of evaluating the MacBook Neo and share insights into the why and ultimately the how of purchasing, implementation, and delivery of a laptop cart of 45 of these laptops was enabled within 90 days from start to finish. Hands-on hardware will be provided for demonstration purposes so audience members can see first-hand how laptops will function in the hands of students and IT technicians who manage and check them out.
What does it look like to manage 1,000 devices inside a 30,000‑device university environment, all without global admin rights? This session explores the lived reality of being a distributed IT administrator during the migration from Active Directory and MCM to Entra ID and Intune. We will examine how distributed teams can build trust and credibility with central IT by creating tools and workflows that benefit the entire institution, even when they do not control dynamic groups, conditional access, or tenant‑wide policy. Using real examples, we will walk through common points of friction such as Zscaler deployment scope, temporary admin elevation without EPM, Microsoft 365 licensing edge cases, and BYOD remote access, presented honestly from both the global administrator and distributed IT perspectives. Finally, we will challenge familiar habits that slow migrations down. These include recreating GPOs instead of rethinking policy from first principles, the ADMX import trap that can orphan settings across a tenant, and the assumption that users cannot adapt to change. Whether you are a departmental admin seeking more autonomy or a central IT leader trying to empower distributed teams safely, you will leave with practical workflows, scripts, and a framework for productive collaboration during the Intune transition.
Navigating the Entra ID and Intune Migration Higher education IT is in the middle of a generational shift. The move from Active Directory and MCM to Entra ID and Intune changes more than tooling. It reshapes governance, trust, and the working relationship between central and distributed IT teams. This session is presented from the distributed side. It comes from an IT administrator in the College of Engineering at a large public university who manages roughly 1,000 endpoints within a 30,000‑device centralized tenant.
Part 1: Earning Trust Without Global Admin The first section focuses on earning trust in an environment where authority is limited. We will explore how distributed teams can build credibility by: Volunteering to test new Intune policies Building scripts that benefit the entire institution, including: OEM license activation BIOS password auditing BitLocker key escrow Drive mapping at scale Respecting Global Administrator constraints, even if you disagree with them A featured case study walks through a Google Sheets to Microsoft Graph API pipeline built specifically because dynamic group creation was unavailable. It demonstrates how to solve real problems within real limitations rather than waiting for ideal permissions. ```text Constraints are not blockers. They are design inputs. ```
Part 2: Productive Disagreements Between Teams The second section covers the productive disagreements that routinely emerge between central and distributed IT, including: Zscaler deployment scope and licensing gaps Using MakeMeAdmin with guardrails when Endpoint Privilege Management is not accessible Microsoft 365 activation models for edge cases such as visiting students Remote access decisions, including RDP over Zscaler on personal devices versus deploying a Remote Desktop Gateway These examples are presented honestly from both perspectives.
Part 3: Challenging Migration Mindsets The final section challenges assumptions that slow Intune migrations down: Why 1:1 GPO migration is usually the wrong goal How importing ADMX templates into Intune creates tenant‑wide risk Why shielding users from features like Windows Hello for Business often does more harm than good We also highlight practical wins, including testing OpenIntuneBaseline policies, using OSDCloud with Autopilot registration, and sharing work publicly through GitHub.
Who should attend: Distributed IT administrators will leave with actionable patterns for operating within constraints. Central IT leaders will gain a clearer picture of what effective distributed teams look like and how to support them. Many scripts and tools referenced are available in a public GitHub repository.
The computer lab is not dead. It needs a new operating model. One that is flexible enough for students to access the software they need when they need it, and for IT to manage in an ever-changing environment. Because the current model can no longer cope with the pressure, IT teams are facing to reduce waste, manage rising software and hardware costs, support BYOD, right-size VDI, improve security, and prove the value of every decision. This presentation explores how this new operating model can be built around flexible software delivery, real usage data, and continuous improvement. We’ll look at why traditional approaches such as thick images, static labs, over-provisioned licenses, and VDI-first delivery are becoming harder to sustain, and how institutions can move toward evidence-led management instead. Using real higher education examples, the session will show how usage analytics can inform license renewals, hardware refresh cycles, lab space planning, remote access, and student experience. Attendees will leave with a practical framework for measuring demand, delivering access more flexibly, optimizing resources, and proving impact to stakeholders.
The problem every IT manager in this room already knows Students in universities around the world push the desktop monitor aside, plug in their laptop, and work around the system IT built for them. For no other reason other than their preference for their own device. Meanwhile, that system keeps costing the same, whether students use it or not: licenses renewing automatically, hardware refreshing on schedule, VDI infrastructure growing more expensive every year.
This session starts with the practical, daily reality of managing a lab estate that was designed for a world that no longer exists. What we will cover Why the old model is no longer fit for purpose: We will walk through the specific pressure points IT managers are dealing with right now: VDI costs that have become unpredictable following major vendor restructuring, thick images that take days to deploy and fall out of date mid-semester, software licenses sized on guesswork rather than usage evidence, and hardware refreshed on a fixed calendar regardless of whether the machines are actually being used.
We will also cover the security exposure that legacy infrastructure creates: large attack surfaces, slow patching cycles, and recovery timelines that no academic calendar can absorb. What the modern lab actually needs: We will introduce a practical model for modern lab management, built around three shifts: from location-based to identity-based software access; from calendar-driven to evidence-based hardware and license decisions; and from reactive IT management to a continuous improvement cycle grounded in usage data.
This is a framework based on what institutions that have already made this transition are actually doing. The delivery stack, explained practically: We will break down the modern software delivery stack in plain terms: application virtualization for high-performance software, cloud delivery for broad access, and right-sized VDI for the applications that genuinely need it. Critically, we will show how smart delivery policies allow the platform to automatically choose the right method for each application and each device, based on whether the institution's priority is cost, performance, or both, without requiring IT to make that call manually every time.
Real numbers from real institutions: We will share specific outcomes from institutions that have modernized their lab environments: a university that extended device lifespan from three to five years by deploying leaner images; a college that absorbed a 35% hardware cost increase within its existing budget by matching device specifications to actual workload data; an institute that achieved 60% cost savings by replacing a full VDI deployment with a smarter hybrid model; and a team of five IT staff managing an estate of over 140,000 devices through platform-enabled remote management. What you will leave with A clear picture of where to start.
A practical framework - Measure, Optimize, Assure - for building a data-informed management practice. And the language to take the business case back to your institution and make it land.
This talk will cover the concept of containerization, how it can be applied to your work environment, and will take a look through several examples of containers being used in higher education environments.
Mention "containers" at a tech event and a line will immediately be drawn: those who support containerization and those who avoid it. This talk is aimed at the latter group, especially those who have little to no knowledge of containerization or the underlying concepts. Join us for a basic look at containers, how they function, and how you can immediately start using them to optimize your work. time permitting, we'll take a look at containers currently deployed in production and the value they bring to their environments.
Below you'll find new session information for presentations. Session details are subject to change as is our schedule.
Before you can start utilizing all the features that Intune has to offer, you've got to figure out how to actually enroll your devices in the platform. Get an overview and some demos of the various options, including ConfigMgr Comanagement and OSDCloud.
A hands-on look at how Snipe IT is being used in several environments at NC State University.
Snipe IT has quickly become one of the most popular inventory management platforms for IT teams. This talk will cover the basics of Snipe IT, as well as look into how Snipe IT is currently being leveraged by the College of Sciences at NC State University to manage assets.
Apple unveiled MacBook Neo — an all-new laptop that delivers the Mac experience at a breakthrough price, starting at $499 for education institutions. Join Apple representatives to learn about the technical details of MacBook Neo and the best practices for deploying and managing Apple endpoints at scale.
There will be Q&A with Apple's Richmond-based account team. - All-new design. Durable unibody aluminum build in four stunning colors — silver, blush, citrus, and indigo - Portable & durable design. 2.7 pounds and 0.5 inches thin — built for learning on the go with Magic Keyboard and large Multi-Touch trackpad - Powered by A18 Pro chip with 6-core CPU and 5-core GPU for 50% faster everyday tasks - Up to 16 hours of battery life - AI, ML & Apple Intelligence. 16-core Neural Engine delivers 3x faster on-device AI workloads. Tools for writing, translation, transcription, and more are built-in - 13-inch Liquid Retina display. Comfortable, vibrant viewing optimized for classroom lighting conditions - Connectivity options include two USB-C ports, and a dedicated headphone jack - macOS Tahoe offers built-in privacy, security, and antivirus protection for peace of mind - Works seamlessly with Platform Single Sign-on and Authenticated Guest Mode -
Another One. Another ONE. ANOTHER ONE. This talk is a high-level review of how to "remix" (read: migrate) a combination of hundreds of local and domain group polices as individual configuration items for Windows client endpoints.
A quick review of how LGPO and Active Directory policies (including ADMX templates) will be provided as a foundation to set the storyline for migration individual configuration items to Intune in the form of Intune Settings Catalogs and custom settings. A review of which options to use depending on the use-case will be covered with examples demonstrated.
At this talk you will learn: - How to deploy ScreenConnect and why it's easy - How to use ScreenConnect's features to make life as easy as possible
Learn about our experience with ScreenConnect, to include... Deployment: Server-side installer generation Unique per-unit install hashes PSADT and scripted setup/organization Intune and scoped installation Usage: Groups Chat Toolbox Backstage Command relay Software management Other administrative tasks
Following on from the hugely successful first version of the LabMan presentation, Project Management in a Galaxy Far, Far Away, this goes further into the universe of project management practices and terms to get to the real heart of the Force on making sure projects deliver benefits to customers.
Project management terms and practices are explored, looking for the fundamental aid their provide in helping projects deliver real benefits. Terms include but are not limited to: project charters, RACI charts, risk registers, value driven delivery.
In this follow-up presentation to Apple's introduction of the new MacBook Neo, an overview of the decision-making process behind why VCU opted to go all-in on the MacBook Neo as the student loaner laptop of choice.
From March 4th through the end of May, we will explore the process of evaluating the MacBook Neo and share insights into the why and ultimately the how of purchasing, implementation, and delivery of a laptop cart of 45 of these laptops was enabled within 90 days from start to finish. Hands-on hardware will be provided for demonstration purposes so audience members can see first-hand how laptops will function in the hands of students and IT technicians who manage and check them out.
What does it look like to manage 1,000 devices inside a 30,000‑device university environment, all without global admin rights? This session explores the lived reality of being a distributed IT administrator during the migration from Active Directory and MCM to Entra ID and Intune. We will examine how distributed teams can build trust and credibility with central IT by creating tools and workflows that benefit the entire institution, even when they do not control dynamic groups, conditional access, or tenant‑wide policy. Using real examples, we will walk through common points of friction such as Zscaler deployment scope, temporary admin elevation without EPM, Microsoft 365 licensing edge cases, and BYOD remote access, presented honestly from both the global administrator and distributed IT perspectives. Finally, we will challenge familiar habits that slow migrations down. These include recreating GPOs instead of rethinking policy from first principles, the ADMX import trap that can orphan settings across a tenant, and the assumption that users cannot adapt to change. Whether you are a departmental admin seeking more autonomy or a central IT leader trying to empower distributed teams safely, you will leave with practical workflows, scripts, and a framework for productive collaboration during the Intune transition.
Navigating the Entra ID and Intune Migration Higher education IT is in the middle of a generational shift. The move from Active Directory and MCM to Entra ID and Intune changes more than tooling. It reshapes governance, trust, and the working relationship between central and distributed IT teams. This session is presented from the distributed side. It comes from an IT administrator in the College of Engineering at a large public university who manages roughly 1,000 endpoints within a 30,000‑device centralized tenant.
Part 1: Earning Trust Without Global Admin The first section focuses on earning trust in an environment where authority is limited. We will explore how distributed teams can build credibility by: Volunteering to test new Intune policies Building scripts that benefit the entire institution, including: OEM license activation BIOS password auditing BitLocker key escrow Drive mapping at scale Respecting Global Administrator constraints, even if you disagree with them A featured case study walks through a Google Sheets to Microsoft Graph API pipeline built specifically because dynamic group creation was unavailable. It demonstrates how to solve real problems within real limitations rather than waiting for ideal permissions. ```text Constraints are not blockers. They are design inputs. ```
Part 2: Productive Disagreements Between Teams The second section covers the productive disagreements that routinely emerge between central and distributed IT, including: Zscaler deployment scope and licensing gaps Using MakeMeAdmin with guardrails when Endpoint Privilege Management is not accessible Microsoft 365 activation models for edge cases such as visiting students Remote access decisions, including RDP over Zscaler on personal devices versus deploying a Remote Desktop Gateway These examples are presented honestly from both perspectives.
Part 3: Challenging Migration Mindsets The final section challenges assumptions that slow Intune migrations down: Why 1:1 GPO migration is usually the wrong goal How importing ADMX templates into Intune creates tenant‑wide risk Why shielding users from features like Windows Hello for Business often does more harm than good We also highlight practical wins, including testing OpenIntuneBaseline policies, using OSDCloud with Autopilot registration, and sharing work publicly through GitHub.
Who should attend: Distributed IT administrators will leave with actionable patterns for operating within constraints. Central IT leaders will gain a clearer picture of what effective distributed teams look like and how to support them. Many scripts and tools referenced are available in a public GitHub repository.
The computer lab is not dead. It needs a new operating model. One that is flexible enough for students to access the software they need when they need it, and for IT to manage in an ever-changing environment. Because the current model can no longer cope with the pressure, IT teams are facing to reduce waste, manage rising software and hardware costs, support BYOD, right-size VDI, improve security, and prove the value of every decision. This presentation explores how this new operating model can be built around flexible software delivery, real usage data, and continuous improvement. We’ll look at why traditional approaches such as thick images, static labs, over-provisioned licenses, and VDI-first delivery are becoming harder to sustain, and how institutions can move toward evidence-led management instead. Using real higher education examples, the session will show how usage analytics can inform license renewals, hardware refresh cycles, lab space planning, remote access, and student experience. Attendees will leave with a practical framework for measuring demand, delivering access more flexibly, optimizing resources, and proving impact to stakeholders.
The problem every IT manager in this room already knows Students in universities around the world push the desktop monitor aside, plug in their laptop, and work around the system IT built for them. For no other reason other than their preference for their own device. Meanwhile, that system keeps costing the same, whether students use it or not: licenses renewing automatically, hardware refreshing on schedule, VDI infrastructure growing more expensive every year.
This session starts with the practical, daily reality of managing a lab estate that was designed for a world that no longer exists. What we will cover Why the old model is no longer fit for purpose: We will walk through the specific pressure points IT managers are dealing with right now: VDI costs that have become unpredictable following major vendor restructuring, thick images that take days to deploy and fall out of date mid-semester, software licenses sized on guesswork rather than usage evidence, and hardware refreshed on a fixed calendar regardless of whether the machines are actually being used.
We will also cover the security exposure that legacy infrastructure creates: large attack surfaces, slow patching cycles, and recovery timelines that no academic calendar can absorb. What the modern lab actually needs: We will introduce a practical model for modern lab management, built around three shifts: from location-based to identity-based software access; from calendar-driven to evidence-based hardware and license decisions; and from reactive IT management to a continuous improvement cycle grounded in usage data.
This is a framework based on what institutions that have already made this transition are actually doing. The delivery stack, explained practically: We will break down the modern software delivery stack in plain terms: application virtualization for high-performance software, cloud delivery for broad access, and right-sized VDI for the applications that genuinely need it. Critically, we will show how smart delivery policies allow the platform to automatically choose the right method for each application and each device, based on whether the institution's priority is cost, performance, or both, without requiring IT to make that call manually every time.
Real numbers from real institutions: We will share specific outcomes from institutions that have modernized their lab environments: a university that extended device lifespan from three to five years by deploying leaner images; a college that absorbed a 35% hardware cost increase within its existing budget by matching device specifications to actual workload data; an institute that achieved 60% cost savings by replacing a full VDI deployment with a smarter hybrid model; and a team of five IT staff managing an estate of over 140,000 devices through platform-enabled remote management. What you will leave with A clear picture of where to start.
A practical framework - Measure, Optimize, Assure - for building a data-informed management practice. And the language to take the business case back to your institution and make it land.
This talk will cover the concept of containerization, how it can be applied to your work environment, and will take a look through several examples of containers being used in higher education environments.
Mention "containers" at a tech event and a line will immediately be drawn: those who support containerization and those who avoid it. This talk is aimed at the latter group, especially those who have little to no knowledge of containerization or the underlying concepts. Join us for a basic look at containers, how they function, and how you can immediately start using them to optimize your work. time permitting, we'll take a look at containers currently deployed in production and the value they bring to their environments.
© 2019 LabMan.io. All rights reserved.
© 2019 LabMan.io. All rights reserved.