AI Accelerators
Working Builds, Not Concepts
These are tools, scripts and pipelines I have built and run from start to finish against real Microsoft 365 tenants and Azure subscriptions. None of them is a slide or a roadmap. Each one exists because a piece of delivery work kept getting done by hand, and a build that runs is the quickest way to stop doing it by hand.
What Counts as Built & Shipped
A build only goes on this page if it clears all three tests. If it hasn't run yet, it isn't listed.
It Has Run End to End
It has run against a live tenant or subscription and produced its real output, whether that's a report, a migrated solution or a deployed endpoint. A dry run doesn't count.
It Is Honest About Limits
Each build says what it does not do. Connections that have to be signed into again, data that a solution import won't carry, steps that still need a person. Every one of these is written down, not left out.
Someone Else Can Run It
Each build ships with a README, setup steps and a dry-run or plan-only mode, so the next engineer can run it without me in the room.
Tenant-to-Tenant Migration
Mergers, divestitures and tenant consolidation all need the same slow work: moving apps, flows and devices from one tenant to another without losing anything along the way. These builds automate the parts that can be automated, and they list what's left for a person to do.
Power Apps Migrator
A command-line tool with builds for macOS and Windows. It moves Power Apps between two Microsoft 365 tenants.
- Interactive Global Admin sign-in that works with MFA and Conditional Access
- Full inventory of apps, connectors and connections, then solution export and import
- Wraps standalone canvas apps into a solution so they can move too
- Checks the destination against the source for completeness, and produces a checklist of connections to re-map
Every step that changes something can be run with --dry-run to preview it first.
Power Platform Cross-Tenant Pipeline
An Azure DevOps pipeline that moves a Power Platform solution from the source tenant to the destination every sprint, using Power Platform Build Tools.
- Export and import stages, each with its own service principal per tenant
- Environment variables and connection references re-mapped through deployment settings
- An optional PnP stage that recreates the SharePoint lists a solution doesn't carry
Follows Microsoft's ALM guidance: the unit that moves is a solution, not a whole tenant.
Intune Device Migration Package
Packages the community IntuneMigration v9 tool (by Steve Capacity) as an Intune Win32 app. It builds the package, configures it and handles detection, so devices move to the new tenant without anyone having to touch them.
- Unjoins the device from Entra ID and rejoins it to the destination with a provisioning package
- Transfers ownership of the user's profile
- Re-registers the device with Autopilot and migrates its BitLocker key
Build, configure, detection and uninstall scripts are all included.
Tenant Visibility & Licence Cost
A readiness plan, a Copilot business case or a true-up conversation all start from the same question: what is actually in the tenant, and what is it costing? These builds answer that without anyone having to run them.
M365 Health Check → Power BI & Email
Automated health-check reporting from Microsoft Graph. It runs on a schedule under an app-only identity and delivers a styled HTML report, CSV data files, a SharePoint page and a Power BI dataset and report.
- Licence use, subscription and renewal risk, and assignments broken down by user
- Licences you can reclaim from disabled, inactive, never-signed-in and guest accounts
- Directory sync staleness, SharePoint storage and live service-health incidents
- Secrets kept in the macOS Keychain, and no third-party packages
Licence Cost Optimisation Dashboard
Takes AdminDroid's open-source Microsoft 365 License Cost Optimization tool, makes it run unattended on macOS, and publishes the results to a four-page Power BI dashboard that is generated automatically.
- Adds app-only Graph authentication with a client secret, and file paths that work on any platform
- Runs only the eight read-only reports. The script's management actions are never called
- An editable price table turns licence counts into a monthly cost in dollars
Azure Infrastructure as Code
Terraform, Bicep and Azure DevOps pipelines for the network and platform work that has to happen before AI workloads can safely go live. Every change can be repeated, reviewed and rolled back.
Public → Private Endpoint Migration Kit
Moves Azure PaaS resources off public endpoints with no downtime. It adds the private path, proves it works from inside the VNet, and only then turns public access off, as a separate step that someone has to approve.
- Covers Storage, SQL, Key Vault, Cosmos DB, ACR, App Service and Functions, Service Bus, Event Hubs and Redis
- Terraform with private DNS zones and VNet links, plus Bicep and PowerShell alternatives
- A gated Azure DevOps pipeline: discovery, plan, apply, validation, then lockdown
- A rollback runbook, and a teardown that leaves nothing billing afterwards
Tested end to end in a sandbox subscription and then fully torn down.
Azure Virtual Desktop Landing Zone
Terraform modules and an Azure DevOps pipeline that build an Azure Virtual Desktop host pool with its session hosts.
- VNet, subnet and NSG networking
- Pooled host pool, desktop application group and workspace
- Windows 11 session hosts, with a Log Analytics workspace for monitoring
- A script that bootstraps the service principal for the DevOps service connection
AI Automation, Live on This Site
You don't have to take these two on trust, because you can use them right now.
Copilot Readiness Assessment
A scoring engine that runs in the browser. It covers forty capabilities across eight weighted pillars and returns a tier, the gate blocking the next tier, and a ninety-day plan that starts from the pillar holding you back. Nothing is sent to a server.
Weekly AI News Pipeline
A scheduled agent researches the week's AI developments, writes the brief using only cited primary sources, and archives the previous issue. It then checks the page and publishes it. If any check fails, it restores the last good version automatically.
See One Run Live
Any build on this page can be demonstrated live against a lab tenant, then adapted to your estate as part of an engagement.