Endpoint privilege management
AdminExplorer: standard users, approved elevation and an audit trail, delivered through Intune.
Thomas Marcussen founded Logic Unknown ApS to turn experience from managed Windows estates into software that partners can sell and customers can trust. His career has centred on Windows deployment and client management, from SMS and Configuration Manager to Microsoft Intune, Windows Autopilot, Microsoft 365 and Windows 365. He has been a Microsoft MVP for six years, recognised in two award categories, Windows and Devices and Security, for his work with Windows 365 and Microsoft Intune. He is also a Microsoft Certified Trainer and holds earlier Microsoft certifications including MCP, MCSE, MCTS and MCITP.
At Logic Unknown he is the technology architect behind the product line. AdminExplorer, the company's endpoint privilege management product, targets a familiar problem in Intune-managed organisations: removing local admin rights without stopping people from working. With AdminExplorer, users stay standard users, approved programs are elevated and every elevation leaves an audit trail, and the product is deployed and configured through Intune.
Logic Unknown's products are built and shipped with security in mind. Binaries and installers are signed with an EV code-signing certificate whose private key lives on a hardware token, and kernel drivers are signed by Microsoft through the Hardware Dev Center attestation process, so they load on standard Windows 11 with Secure Boot on. Security reports are welcome through the published security.txt.
Logic Unknown is built to be sold through partners and sells through resellers, distributors and managed service providers. Partners get product briefings and an escalation path to the engineers who build the product, which keeps the technical knowledge close to the channel. Outside the company, Thomas writes about Configuration Manager, Windows 365 and MSIX on his blog.
AdminExplorer: standard users, approved elevation and an audit trail, delivered through Intune.
EV code signing, Microsoft-attested kernel drivers and responsible disclosure.
Technical backing for resellers, MSPs and distributors who sell Logic Unknown products.