Example · IT Help Desk

Someone will design the password resets out of your week, and that person should be you.

25 of your 40 hours still need you

  • 14 stay yours
  • 11 faster with AI
  • 15 tools could take

A typical week at the middle pace. Your plan uses your own tasks.

Make my plan

Is help desk a dying job?

By our task-by-task count, 25 of a typical 40-hour week as an IT help desk specialist still need a person. Tools could already take about 15 hours. The government's own forecast for your job turned negative this cycle. BLS (the Bureau of Labor Statistics) projects computer user support specialists down 3% from 2025 to 2035 (BLS Occupational Outlook Handbook, August 2026), and its explanation names "automated tools, such as chatbots" taking routine troubleshooting.

Read more

Many support teams have already shrunk by not backfilling, with the gap going to an outside firm rather than a bot. Vendors now sell IT leaders tools for the routine half of your week, including resets, how-to questions, triage and ticket notes. ServiceNow paid $2.85 billion for Moveworks in 2025 to sell exactly that (Salesforce Ben, March 2025).

The other half is more solid than most roles we have scored. About 34% of your week needs a person in the building, at the site, or holding the laptop. No model images a branch, replaces a dock, or finds a rogue DHCP server, a device handing out network addresses, behind a vendor kiosk. That protection is real, and it is also the part of the job that doesn't get you hired at the next company. The plan moves you from the desk where resets arrive to the desk where resets get designed away, because whoever builds the self-service that shrinks the first-line ticket queue is the person the company keeps.

The hard truth

Network support pays more than the help desk.

BLS expects user support jobs to shrink over the next decade, and median pay sits near $62,000. Network support specialists earn about $14,000 more.

What you can doPick one lane and build proof in it. This plan picks endpoint and identity administration, with MD-102 as the one certification, and asks for Intune work with your name on it.
Sources (2)

What stays yours

Deployment day: a table of laptops, a site cut over by four o'clock

This takes presence. Autopilot removes the imaging, but it does not remove the person who unboxes, hands over, and stays for the first hour of "where did my icons go." The refresh cycle sets how many of these days there are.

The weird one: a rogue DHCP server behind a vendor kiosk

This takes context and presence. Nothing in a ticket said "kiosk." You knew the site, walked the closet, and remembered the vendor install. A model with the logs would have told you to reboot the scanners.

Saying who gets local admin, and who doesn't

The accountability is borrowed from the IT manager's policy and the cyber-insurance questionnaire. The answer is written down, but someone still has to hold the line in front of an executive, which is why a person is in the loop at all.

Verifying it is really the employee before you reset the password

The accountability is borrowed from the security function. CISA and the FBI's Scattered Spider advisory documents attackers convincing help-desk staff to reset passwords and MFA (multi-factor sign-in); MGM Resorts' 2023 breach cost it about $100 million by its own SEC filing. The reset itself is one click, and the verification is what protects the company.

Joiner-mover-leaver: the right access on day one, none on day last

This takes careful checking and accountability. Someone's name is on the ticket that removed a terminated employee's access, and someone's name is on the audit finding when it wasn't done.

What can a help desk tech move into?

Plan A is your best move inside the work you do now. Most sessions in the 13-week plan build toward it.

  1. A

    Endpoint and identity administration (Intune, Entra, Autopilot)

    Ready in 6 to 9 months at 3 to 4 hours a week

    Why it fits

    Why you. If Autopilot or Intune, Microsoft's tools for setting up and managing laptops, is already in your hands for part of the fleet, and setting up and removing access for joiners, movers and leavers is a regular part of your week, you already do the front half of an endpoint administrator's job with entry-level tools. The person who extends Autopilot to every site and turns the joiner-mover-leaver ticket into a script is the person the company keeps when first-line support thins.

    The gap. You need Intune beyond enrollment (compliance and configuration policies, app deployment, Autopilot profiles), Entra, Microsoft's identity service, at admin level (conditional access, self-service password reset, group-based licensing) and enough PowerShell to script a leaver. MD-102, Microsoft's endpoint administrator exam, is the credential employers recognize, and it renews free each year.

    The trade-off. Far fewer seats, roughly one endpoint administrator per few hundred devices, and at a small company that seat may already be the sysadmin's. The plan assumes you may apply externally. You would also be building the thing that makes your current job smaller.

Other moves that fit

These are also good bets in this field. Read them if Plan A doesn't suit you.

  1. Multi-site IT generalist / site IT lead

    Ready in a few days for a junior role, and about 6 months for site lead

    Why it fits

    Why you. You handle deployment days and the odd physical problems. Presence is this role's strongest score, and some employers' whole IT problem is physical: manufacturers, school districts, hospital systems, distributors with yards, MSPs with field contracts.

    The gap. You need Network+ level vocabulary, a good driving record and comfort being the only IT person in a building.

    The trade-off. The pay ceiling is lower and the ladder is short. Sites close for reasons unrelated to you, and the MSP version is a van, a route and a ticket quota. Take it if you would rather be at the site than in the tenant.

  2. Security, by way of identity

    Ready in a year or more

    Why it fits

    Why you. You already handle verification, MFA and access, and identity is the part of security that hires from IT operations rather than from a security operations center (SOC).

    The gap. You need everything in the endpoint and identity move first, then conditional access and privileged-access design. SC-900, Microsoft's entry-level security exam, is a cheap way to check your vocabulary.

    The trade-off. This is the endpoint and identity move with a different title at the far end, so it can't skip that step. A help-desk resume sent cold to "security analyst" postings lands in the entry-level security pile for alert review, which is the most exposed work. Aim at "identity and access management analyst," after your endpoint and identity evidence exists.

What's a plan B for IT support?

Plan B is a job AI is creating that these skills already fit. One session a week in the plan trains you for it, so it is ready if your job shrinks or you want a change.

BPlan B, picked for this role

AI agent ops specialist

Every ticket you close teaches you where users get stuck, which is exactly what tuning an AI support agent and its handoffs requires.

Other options

  • Context engineer and knowledge curator

    Writing the knowledge base articles people actually use is the starting point for curating what an IT agent knows and answers.

  • AI workflow builder

    Automating password resets and onboarding requests in your own queue makes a portfolio of working automations that opens this door.

In your own plan you can switch to any of the 47 roles.

The first two weeks

The first 2 of 13 weeks. Each week has two 60-minute sessions and one 90-minute session, such as two weeknights and a weekend morning, plus one 40-minute Plan B session. Nothing here needs your manager's permission except two small asks, and no is a fine answer. By week 13 you'll have a practice Microsoft 365 tenant with Autopilot and Intune set up, a portfolio of runbooks and a caller-verification standard, and three applications sent with that portfolio attached.

  1. Week 1: Measure your queue
    What you do
    • AExport the last 30 days of tickets. Tag each one with its category, the minutes it took and whether self-service could have handled it.
    • ATrack your time for one week against the task list in this report.
    • AWrite one page on what you actually do, including how many password resets you handle each day.
    • BTake the first half of Anthropic's AI Fluency: Framework & Foundations, a free short course, with your ticket queue in mind. List which ticket types to hand to AI and which to keep.
  2. Week 2: Build your practice tenant
    What you do
    • ASet up a trial Microsoft 365 tenant, your own practice copy of a company's Microsoft setup, with Intune, Microsoft's device management tool. The Intune trial is free for 30 days, so expect to rebuild it once.
    • ARead the CISA and FBI advisory on Scattered Spider, a group that tricks help desks. Read it slowly and list every step where a help desk appears.
    • ARead the Autopilot overview on Microsoft Learn to see how Windows laptops can set themselves up. Then build one deployment profile in your tenant.
    • BFinish AI Fluency: Framework & Foundations and pass its final assessment.

Three courses from the plan

Checked 2026-09-22.

  • Microsoft 365 Certified: Endpoint Administrator Associate (exam MD-102)Microsoft · Region-based; US price [live data]

    Yes, months 4–9. It is the credential for Plan A. Skills measured now include Intune agents and Security Copilot.

  • Microsoft Learn: Windows Autopilot, Intune, Entra SSPR, PowerShellMicrosoft · Free

    Yes. It is the curriculum for Weeks 2–8.

  • Microsoft 365 / Intune trial tenantMicrosoft · Free 30-day Intune trial

    Yes, repeatedly. Expect to rebuild.

Risks beyond AI: moderateOutsourcing risk

Help-desk work has been moving to managed service providers and offshore desks for twenty years, and many employers have already handed after-hours tickets to an MSP. If your industry is cyclical, headcount follows it. The October 2025 Windows 10 end-of-support refresh was a one-time bump. The job is staying, but the junior version of it is thinning.

Where this could be wrong
  • Task shares reflect a typical week, which may differ from yours. Your Week 1 sheet replaces them. If resets are a bigger share of your week, more of your work is automatable and the entry-level pressure number rises.
  • We scored presence as protective for deployment. If devices ship from the vendor straight to the sites with a phone-guided first boot, remote setup takes on part of deployment and deployment days fall with it.
  • We treated the MSP as a threat to daytime first-line tickets. Some MSPs are where the endpoint-admin jobs are. If yours is hiring, the endpoint and identity move might run through it.
  • The BLS −3% is national. Employers with many physical sites may hold steadier than software firms, but we did not find a source for that.

This is an example. Your plan uses your own week.

Make my plan

Also matched: help desk technician, it support specialist, service desk analyst. Research checked 2026-09-22. Page updated .