MDEValidator: Validate Your Microsoft Defender for Endpoint Configuration
Validate your Microsoft Defender for Endpoint configuration with MDEValidator, a free PowerShell module for local checks, reports and automation.
Technical writing
Microsoft cloud security, notes from the field.
Practical Microsoft cloud security across identity, endpoint, security operations, compliance, modern workplace, and secure AI adoption.
Filter articles
Topics
Popular tags
Showing all 37 articles.
Latest articles, newest first
Documenting Microsoft Purview with GitHub Copilot Skills: 4 Export Workflows for VS Code
Four GitHub Copilot skills that turn read-only PowerShell exports of Microsoft Purview DLP, Insider Risk, Retention and custom SIT configuration into client-ready Excel workbooks - plus how to install and run them in VS Code.
Phishing-Resistant MFA: Planning Your Passkey Rollout in Microsoft 365
Microsoft is making passkeys the default authentication method in Entra ID, so now is the time to start planning your move to phishing-resistant MFA. This guide covers device-bound vs synced passkeys, Passkey Profiles, Authentication Strengths, Conditional Access, rollout strategy, legacy app considerations and the practical steps to get your Microsoft 365 environment ready.
Your Users Are Authenticating With What? Hunting Down the Outlook Companion App
The Microsoft Outlook Companion app quietly registers itself as an MFA method — and most admins don't realise until it's already causing inconsistent auth flows across their user base. In this post, I walk through why I recommend disabling it, why you can't just flip the switch without breaking things, and how to use KQL to identify exactly who's using it before you do
Streamlining Employee Onboarding with Entitlement Management (Part 2)
In Part 2, we simulate HR-driven user provisioning with PowerShell, trigger onboarding workflows, and walk through the end-user experience of requesting and receiving access via Entitlement Management. See how approvals, automation, and Access Packages remove the manual workload from IT.
Streamlining Employee Onboarding with Entitlement Management (Part 1)
Learn how Access Packages in Microsoft Entra ID can streamline employee onboarding. This post covers why Access Packages matter, how to structure dynamic groups, and how to build a fully governed Access Package using catalogs, approvals, and lifecycle settings.
Monitoring Azure Access Elevation in Entra ID
Learn how to detect when a Global Admin silently elevates their access across all Azure subscriptions using Entra ID, Log Analytics, Azure Monitor, and Defender for Cloud Apps. This guide breaks down why elevation is risky, how the toggle works, and the exact steps to build alerts that keep your Azure environment secure.
Conditional Access Gone Too Far: Navigating Zero Trust Edge Cases
When Conditional Access meets Zero Trust, even the best intentions can backfire. In this post, we explore a real-world edge case where strict policy design blocked users from registering MFA—and how a layered policy workaround restored functionality without compromising security.
Seamlessly Migrating from Symantec Endpoint Protection to Microsoft Defender for Business
Discover how to migrate from Symantec Endpoint Protection to Microsoft Defender for Business seamlessly with tips and tools!
The curious case of the missing Enterprise App
Troubleshooting a missing enterprise app issue in Entra ID during a zero-trust Conditional Access policy rollout with workaround solutions.
Mastering the MFA Mandate: Considerations and Recommendations for a Smooth Transition
Prepare for Microsoft’s mandatory MFA with practical tips on securing accounts, migrating services, and optimizing Conditional Access.
LAPS Unleashed: Navigating the Future of Windows Admin Security
Dive into LAPS for Windows: a game-changer in admin account security. Discovery of the new CSP settings and configurations.
Logging Into the Future: Smart Strategies for Storing Microsoft Entra Logs in Azure
Explore storing Microsoft Entra logs via Azure Monitor, Storage Accounts, and Event Hubs, each offering unique benefits for IT security.
A winget match made in heaven
Learn how to package and auto-update apps in Intune using community-driven tools, WinTuner and Winget-AutoUpdate-Intune, for an efficient, l
Getting started with Microsoft Entra Private Access
Discover Microsoft Entra Private Access: advanced, secure remote access for corporate resources, surpassing traditional VPN limitations.
Microsoft Global Secure Access: Empowering Secure and Seamless Connectivity
Boost security, speed, and access with Microsoft's Entra Internet for M365. A game-changer!
Easily import, export and document Intune configurations!
Need to bulk import, export or document your Intune configurations, this guide has you covered.
Sending email with Azure Automation and Managed Identity
Using Azure Automation Accounts to send scheduled emails, ditch those scheduled tasks and insecure scripts!
Deploy Microsoft Teams on Azure Virtual Desktop using Intune
Deploy Microsoft Teams to Azure Virtual Desktop using Intune.
Getting started with Azure AD cross-tenant synchronisation
Cross tenant sync is a feature I've been waiting to see for a while and with the announcement of cross tenant access settings, I knew it...
How to manage your Microsoft Edge Enterprise Cloud Site List like a boss 😎
In this article I describe how to enable IE mode on your Intune enabled devices and how you can easily manage a corporate site list!
Setting up Azure MFA for VPN and Remote Desktop Gateway
This article will go into detail on how to configure Azure MFA for access to on-premises VPN and RD Gateway.
Deploying winget apps with Microsoft Endpoint Manager and auto-update!
A brief overview on how you can deploy applications using winget in Microsoft Intune and even keep them updated!
Blocking web push notifications with Endpoint Manager and why you should!
Admit it, we've all fallen foul of that annoying (and scary for some) popup that seems to rear it's ugly head after you've spent the last...
How to make a Team or Microsoft 365 group calendar accessible in Outlook
Recently I found myself in a scenario where I needed to quickly and easily access a calendar from a Microsoft Teams group, I didn't think...
Setting up Azure AD Connect Cloud Sync and does it run on Server 2012?
Microsoft as of August 31 2022 will retire all 1.x versions of Azure AD Connect because they include SQL Server 2012 components. If you...
Getting started with Defender for Office 365: Part 3
In my previous Defender for Office 365 posts I walked through the setup and configuration of threat policies covering each policy type...
Use SharePoint to store document templates and branding for use in Office apps.
One of the most requested tasks from clients is the ability to distribute document templates for end users to make use of. There are many...
Configuring MDFC and Microsoft Sentinel to use the same Log Analytics Workspace and why you should!
So this week I've had the pleasure of setting up Microsoft Defender for Cloud (MDFC) for a client with a view to onboarded all Azure...
Getting started with Defender for Office 365: Part 2
In part 1 of our Defender for Office 365 series we talked about licensing, quarantine policies, anti-phishing, anti-spam and anti-malware...
Getting started with Defender for Office 365: Part 1
Microsoft Defender for Office 365 (MDO) is one of the modules included within Microsoft's Extended Detection and Response platform (XDR)...
Setting up Shared Channels in Microsoft Teams
Collaboration with external partners is becoming more and more the norm, COVID pushed most organisations into the cloud and even helped...
Is there still a place for the current Microsoft 365 E3 license?
With the addition of Defender for Business into the Microsoft 365 Business Premium license the gap between it, and Microsoft 365 E3 just...
Defender for Business now available!
It's here, the moment we've all been waiting for, Defender for Business is live in tenants using the Microsoft Business Premium license...
Should you still disable legacy sign-in, even if using Conditional Access?
It's no secret that Conditional Access is the pillar of any good security plan and one of the best features available as part of the...
How to deploy wallpaper and lockscreen image to Windows Pro edition using Microsoft Endpoint Manager
As most of you may already know the built in configuration settings for deploying a wallpaper and lockscreen image within Microsoft...
Deploying Datto RMM as Win32 app using Microsoft Endpoint Manager
As most of you reading this article will know there are many different ways to deploy apps using Microsoft Endpoint Manager (MEM), this...