~50
Developer Linux workstations enrolled in Intune
← Back to Case Studies
SACEM
Bringing Developer Linux Workstations into Microsoft Intune
About the client
SACEM is the French civil society responsible for collecting and distributing royalties for music authors, composers, and publishers. It manages rights for nearly 200,000 members across an IT environment that combines Windows machines with Linux workstations dedicated to its development teams.
The business challenge
SACEM managed around fifty Linux workstations used by its developers outside of the Intune console, with local administrator rights granted to users. Within an otherwise well-structured infrastructure, these workstations were an unsecured link weakening the overall compliance posture. The challenge was to bring these workstations into the existing Intune console without blocking developers' legitimate workflows, while compensating for Intune's native limitations on Linux through a scripting-based approach.
Our solution
The approach centered on five areas: skills transfer, coaching internal teams to build their own scripts for additional configurations; Intune prerequisites, analyzing the environment, configuring the console, and fully documenting the conditions required before enrollment; Bash scripts, developing scripts pushed from Intune to automatically install application packages on each workstation; PKI and certificates, deploying public key infrastructure for automatic access to VPN, network, printers, and secure environments; and privilege elevation, scoping the approach for developer workstations that require a higher level of access.
Implementation
The PKI infrastructure put in place lets every enrolled workstation automatically retrieve the certificates it needs for access, without relying on manual configuration or extended administrator rights.
Measurable results
The fifty Linux workstations are now visible and managed in Microsoft Intune, on the same console as the rest of the fleet. Internal teams now have the scripts and knowledge they need to evolve the solution independently.