About Roy Klooster
I'm Roy Klooster, Technical Product Manager for Workplace & Compliance at Inforcer, based in the Amsterdam area of the Netherlands. I've spent 8+ years designing modern workplace solutions with Microsoft 365, building security and compliance baselines, and creating automation tooling for both enterprise IT teams and managed service providers. The thread through all of it is the same: take the parts of Microsoft 365 that are genuinely powerful but fiddly to operate at scale, and make them dependable, documented, and repeatable.
In 2026 I was awarded Microsoft MVP in the Microsoft Graph category - recognition from Microsoft for the community work around Graph, PowerShell automation, and multi-tenant M365 management that a lot of this blog and my open-source modules feed into. It's an award I'm genuinely proud of.
My day-to-day work spans the full M365 stack: Intune endpoint management across Windows, macOS, iOS, and Android, Entra ID identity governance, Conditional Access policy design, Microsoft Defender for Endpoint, and PowerShell automation with the Microsoft Graph API. I focus on making security and compliance practical - turning complex configurations into repeatable, auditable baselines that scale across multiple tenants without drifting out of policy or quietly breaking the next time something changes upstream.
Before my current focus on compliance and automation, I spent years as a modern workplace consultant and solution architect - work that has taken me through very different environments: public sector, healthcare, education, insurance, and global enterprise. I've delivered Microsoft 365 architecture, Exchange Online migrations, zero-trust rollouts, and baseline programs for organizations ranging from Dutch municipalities and a national sports-facilities operator to healthcare and dental groups, an insurer, a higher-education institution, and an 8,000+ employee global fashion retailer. The constant across all of them is scale and repeatability: configurations that have to survive an audit and behave the same way across many tenants and thousands of endpoints.
The way I work is baseline-first and automation-driven. Instead of clicking through portals one tenant at a time, I codify the desired state - Conditional Access, compliance, Intune configuration, identity governance - into reusable baselines, then use PowerShell and the Microsoft Graph API to deploy, report on, and verify it everywhere. That approach is what most of this blog documents: not just what a feature does, but how to roll it out consistently and prove it's actually enforced - because in a multi-tenant world, an unverified control is, for all practical purposes, the same as no control at all.
Microsoft MVP Recognition
Roy Klooster is a Microsoft Most Valuable Professional (MVP) in the Microsoft Graph category. The MVP award recognizes independent community leaders who share their technical expertise and real-world knowledge of Microsoft products with others.
Microsoft is a registered trademark of Microsoft Corporation in the United States and/or other countries. Roy Klooster is an independent community contributor and is not an employee of Microsoft.
Certifications
Alongside the hands-on work, I hold several Microsoft certifications - up to expert level - spanning Microsoft 365 administration and architecture, identity and access management, messaging, and security operations - formal, verifiable backing for the day-to-day.
What I Write About
This blog is where I write up the tools, techniques, and overlooked features I run into across production M365 environments - usually the things that aren't obvious from the documentation alone, and that only really show themselves once you're operating at scale. The content falls into a few categories:
- Forgotten Features - A series spotlighting underused capabilities in Entra ID, Intune, and Conditional Access that solve real problems when configured correctly.
- The MSP License Ladder - A series for managed service providers on when and why to upgrade Microsoft license tiers, with working scripts to justify each step.
- PowerShell Tools - Open-source modules and scripts for M365 reporting, compliance auditing, and multi-tenant management.
Open Source
I build and maintain a set of free community tools - PowerShell modules for Microsoft Graph reporting and multi-tenant management, plus browser-based apps that generate and deploy Intune configuration without any hand-editing:
- InforcerCommunity (PS Module) - Turn Inforcer into an automation layer you can query, report on and compare across every managed tenant. One module handles tenant inventory, compliance assessments, ready-made reports, documentation and Intune configuration drift - built for MSPs that need repeatable answers across many customers.
- InforcerCommunity MCP (MCP Server) - Connect a locally installed AI assistant to the Inforcer REST API and ask about your tenants in plain language. Which tenants are furthest from their baseline, which policy controls a setting, who was given Global Administrator last month. Runs on your own machine and is read-only unless you turn writes on yourself.
- RKSolutions (PS Module) - Replace a folder of one-off reporting scripts with one consistent Microsoft Graph toolkit. Sign in once and create browser-friendly reports for Intune enrollment, configuration anomalies, Entra admin roles, M365 licensing and Custom Security Attributes - then export or email the results.
- MacPPPC (Web App) - Stop hand-building PPPC XML whenever a Mac app needs Screen Recording, Full Disk Access or another protected service. Choose an app, set its permissions, inspect the exact payload and deploy it directly to Intune - all from your browser.
- LanguagePack Deployer (Web App) - Turn a multilingual rollout into a three-step Intune deployment instead of hand-editing PowerShell. Choose Windows or macOS, select the languages, keyboard, region and timezone, then publish assigned policies or download ready-to-run deployment bundles - entirely from your browser.
Install commands, feature lists, and download links for all of them live on the community tools page.