What are these admin tools and why do I need them?

These are specialized PowerShell scripts and applications designed to automate and simplify IT management tasks. They help IT administrators save time on repetitive tasks, reduce manual errors, generate detailed reports, and manage infrastructure at scale. The projects extend native capabilities and make complex operations more accessible.

Where can I find licensing and deployment details?

Each project publishes its own license, hosting model, requirements, and deployment guidance. Follow the project link to review the current documentation and terms before using it in your environment.

Do I need programming knowledge to use these tools?

While basic PowerShell knowledge is helpful, most tools are designed to be user-friendly and come with detailed documentation and step-by-step instructions. Many tools feature graphical user interfaces (GUI) that make them accessible even if you're not comfortable with command-line interfaces. Each tool's GitHub repository includes comprehensive guides to help you get started.

Which tool should I start with?

Choose based on your most pressing management challenge. For device management, start with the Assignment Checker. For macOS environments, IntuneBrew or IntuneMacAdmins are ideal. For identity documentation, try Entra Documentation or Intune Documentation. For automation, explore Agents For Admins or KQL Search. If you need device lifecycle management, the Device Offboarding Manager is essential.

How often are these tools updated?

All tools marked as "Actively Maintained" receive regular updates to support new features, security improvements, and bug fixes. Updates are released as needed, typically when significant platform changes occur or when community members report issues or request features. You can track updates by watching the GitHub repositories.

Can I use these tools in my enterprise environment?

Absolutely. These tools are designed for enterprise use and are already deployed in organizations of all sizes, from small businesses to large enterprises. They follow Microsoft security best practices, support certificate-based authentication, and can be integrated with Azure Automation for scheduled execution. Always test in a non-production environment first and review your organization's security policies.

Blog

Esther Barthel joins ugurlabs as CPO for OpenAdminOS

Esther Barthel

CPO, OpenAdminOS · October 22, 2026

On Tuesday Oktay left you with a small cliffhanger about “another familiar face from the community.” Well… hi, that’s me. :)

As of today I’m joining ugurlabs as Chief Product Officer for OpenAdminOS. Same deal as Oktay: one product, full focus.

Where this started for me

I’ve always worked with two hats on. As an End User Computing Solutions Architect, I’ve designed workspaces from Citrix farms to Azure Virtual Desktop, Windows 365 and Intune. As a DevOps Engineer, I’ve spent just as much time on what happens after the design is signed off: the day-to-day admin processes that keep those workspaces secure, healthy and cost-efficient. That combination taught me that the architecture is only as good as the way it’s operated.

If a task came back every week, I wanted to automate it. Image management was the first big one. More recently it was cost reporting on Windows 365 Cloud PC license usage, and an agent hosted in Azure AI Foundry, built on Jannik Reinhard’s IntuneAgent framework, that evaluates Intune policies against the CIS Windows 11 Benchmark through Microsoft Graph. That turned a manual, spreadsheet-heavy compliance review into something you can run on demand.

Those workflows saved a lot of time, but even the agent came with the same price tag. They depended on solid knowledge of scripting, version control and workflow orchestration. That toolset feels natural to developers. For Ops engineers it means learning a set of skills that aren’t part of their daily operations. Too often the automation ended up living with the one person who wrote it.

Ugur and me

Ugur and I have crossed paths at many community events, and those meetings always turned into long conversations. The subject was how to support admins in their daily work: building better tools, and also finding where AI, agents and agentic flows actually help with troubleshooting, health checks, insights and configuration optimization.

Every one of those conversations gave me something new to take home: how to build agents, skills and context for my IT Ops use cases. Now I get to stop taking notes and start building with him. And with Oktay as CTO, I couldn’t ask for a better team to do it with.

Why now?

I’ve watched IT Ops teams slip back into reactive mode. Support tickets are increasing and getting more complex. Meanwhile the business is already empowered by AI, which has multiplied its output and raised the bar for IT. Infrastructure has to be secure by design, vulnerabilities have to be patched in record time, and users expect zero-day support for the latest technology.

IT is still mostly human-powered, with little room left to make the shift to proactive work. That shift has to happen quickly, safely and without much effort. Classic process automation promised exactly that, and for most Ops teams it hasn’t delivered.

Why OpenAdminOS?

Plug-and-play, then make it yours

You can start with the pre-built agents from the registry on day one. When you’re ready to go further, the Build your own Agent feature takes it from there. You describe the outcome you want in plain language, and OpenAdminOS drafts the agent, validates it against Microsoft Graph and tests it before you save. No scripting or hand-written manifests required. That is exactly the gap I kept running into. Building your own agent squad is easy to start, and honestly a lot of fun.

Guardrails that build trust and process

Oktay already walked you through the trust model: no change happens without human approval. For me the value goes beyond safety. Every approval is a checkpoint, so engineers build trust in what the agent team adds, and the team gradually adopts a more process-driven way of working.

It brings the fun back

I love the team visualization. It gives you real insight into what your agents are doing. It also brings back some much-needed fun in our jobs, and that matters more than we usually admit.

What I’ll actually be doing

To me, CPO means using my experience in designing workspaces and automating IT workflows, and shaping a new, AI-empowered way of working in IT. A diverse team will always mean people with different backgrounds and viewpoints. Now we can extend that team with task-driven specialist agents.

My focus is product development, user feedback and feature requests. Above all, I want to be challenged by YOU, the community, to deliver the built-in agents and agentic flow templates that match your use cases.

Challenge me

Tell me the admin task you dread every week, and I’ll do my best to turn it into an agent.

Download OpenAdminOS and run it against a test tenant. Then send me the use case it doesn’t cover yet: the health check you still do by hand, or the report you build from three exports and a spreadsheet. Find me on LinkedIn and challenge me. Shaping OpenAdminOS around your needs is the job I enthusiastically said yes to.