Ending VPN Split-Tunnel Break Fixes With Auto-Profile Repair
A proactive remediation pipeline detects VPN split-tunnel route drift and rebuilds profiles automatically before users ever log a ticket.

root / ops-playbook / automation
We don't write traditional "break/fix" guides. Every playbook takes an everyday, high-volume IT problem and solves it using modern innovation—Automation, AI, Zero-Trust, Self-Service, or Proactive Remediation.
Operational domains
Each domain groups automation patterns, deployment controls and escalation logic around a recognisable service-desk workload.
Shell, zsh, launchd, APIs and remediation workflows that remove repetitive macOS support work.
Open domainEnterprise macOS operations covering Apple Business Manager, device management, security, application lifecycle and automation.
Open domainCopilot integration, automated ticket triage, and AI-driven remediation that turns Level 1 into a self-healing system.
Open domainDistributed Edge Platforms, Global State Desynchronisation, Edge Budget Overruns
Open domainAutomated enrolment, declarative management, MDM profiles, inventory and fleet health for managed Macs.
Open domainAutopilot, ABM, PowerAutomate, Zapier, and webhooks that remove the engineer from repetitive provisioning loops.
Open domainTeams Rooms, Zoom Rooms, Universal Print, and Cloud PC playbooks for the frictionless digital workspace.
Open domainPackaging, deployment, updates, patch compliance and removal workflows for enterprise Mac applications.
Open domainServer-Side WebAssembly, Kernel-Level Telemetry, Sidecarless Service Meshes
Open domainVector Database Failures, GPU Cluster Orchestration, LLM Data Pipeline Stalls
Open domainFileVault, platform SSO, endpoint controls, compliance evidence and recovery-safe macOS security operations.
Open domainFix issues before users notice them. Endpoint Analytics, telemetry, and performance baselines that eliminate reactive tickets.
Open domainFIDO2, Windows Hello, biometrics, and self-service authentication — eliminate the password reset ticket permanently.
Open domainPractical automation and proactive remediation for this operational domain.
Open domainCross-Provider Networking, Split-Brain Cloud Failovers, Multi-Region Transit Loops
Open domainProgrammatic Cloud Blueprints, Type-Safe Infrastructure Testing, State File Race Conditions
Open domainPlaybook archive
A proactive remediation pipeline detects VPN split-tunnel route drift and rebuilds profiles automatically before users ever log a ticket.


Stop silent Time Machine failures on managed Macs with a Jamf Pro and Intune remediation pipeline that detects, fixes, and escalates automatically.


Expired client certificates silently break VPN and Wi-Fi auth fleet-wide; this pipeline auto-renews and alerts before expiry causes an outage.


KFM redirection silently fails from GPO conflicts and auth races; here is the registry-driven detection and remediation script that fixes it unattended.


A corrupted WMI repository silently blocks Software Center and Intune app installs until this proactive remediation script rebuilds it automatically.


Stop manual login-item approvals for Chrome, Zoom and Slack updaters by pre-authorising Background Task Management via MDM and Jamf smart groups.


Stale cached credentials on mobile devices and mapped drives cause repeat AD lockouts; automated triage and self-service unlock cut ticket volume.


Stop FileVault lockout tickets by automating recovery key rotation and Jamf Pro escrow with a launchd-scheduled zsh watcher and API workflow.


Stop recurring Teams Room camera and mic dropout tickets by pairing scheduled PnP device resets with Pro Management portal health alerts.


Stop print spooler tickets before they're logged by deploying a self-healing PowerShell agent that detects, fixes, and only escalates genuine hardware.


Replace manual MFA lockout calls with a Temporary Access Pass automation flow that verifies risk and HR status before self-resolving tickets.


Stop stale-installer support tickets by automating macOS third-party app packaging and patch compliance with AutoPkg, JamfUploader and Jamf Pro.

Every playbook identifies permissions, test scope, verification evidence and rollback controls.
Detection and remediation logic targets work that should not require another manual ticket.
Human support is reserved for failures automation cannot safely resolve, with diagnostic context attached.