A lab-validated approach for deploying PowerPoint templates via Intune, from SharePoint setup and certificate-based Graph API authentication to Proactive Remediations, self-healing and the security tradeoffs worth knowing about.

Builds the naming engine: a SharePoint list as the work queue, an Entra app registration with certificate authentication, and a scheduled PowerShell script that reads pending devices and assigns sequential names via Graph API.

Builds a custom Windows 11 ISO with embedded WinPE scripts that capture the hardware hash, detect the device type and department, upload the device to Autopilot via Graph API and automatically queue it for naming in SharePoint.