Practical Microsoft cloud security across identity, endpoint, security operations, compliance, modern workplace, and secure AI adoption.
Showing all 35 articles.
Microsoft is making passkeys the default authentication method in Entra ID, so now is the time to start planning your move to phishing-resistant MFA. This guide covers device-bound vs synced passkeys, Passkey Profiles, Authentication Strengths, Conditional Access, rollout strategy, legacy app considerations and the practical steps to get your Microsoft 365 environment ready.
The Microsoft Outlook Companion app quietly registers itself as an MFA method — and most admins don't realise until it's already causing inconsistent auth flows across their user base. In this post, I walk through why I recommend disabling it, why you can't just flip the switch without breaking things, and how to use KQL to identify exactly who's using it before you do
In Part 2, we simulate HR-driven user provisioning with PowerShell, trigger onboarding workflows, and walk through the end-user experience of requesting and receiving access via Entitlement Management. See how approvals, automation, and Access Packages remove the manual workload from IT.
Learn how Access Packages in Microsoft Entra ID can streamline employee onboarding. This post covers why Access Packages matter, how to structure dynamic groups, and how to build a fully governed Access Package using catalogs, approvals, and lifecycle settings.
Learn how to detect when a Global Admin silently elevates their access across all Azure subscriptions using Entra ID, Log Analytics, Azure Monitor, and Defender for Cloud Apps. This guide breaks down why elevation is risky, how the toggle works, and the exact steps to build alerts that keep your Azure environment secure.
When Conditional Access meets Zero Trust, even the best intentions can backfire. In this post, we explore a real-world edge case where strict policy design blocked users from registering MFA—and how a layered policy workaround restored functionality without compromising security.
Discover how to migrate from Symantec Endpoint Protection to Microsoft Defender for Business seamlessly with tips and tools!
Troubleshooting a missing enterprise app issue in Entra ID during a zero-trust Conditional Access policy rollout with workaround solutions.
Prepare for Microsoft’s mandatory MFA with practical tips on securing accounts, migrating services, and optimizing Conditional Access.
Dive into LAPS for Windows: a game-changer in admin account security. Discovery of the new CSP settings and configurations.
Explore storing Microsoft Entra logs via Azure Monitor, Storage Accounts, and Event Hubs, each offering unique benefits for IT security.
Learn how to package and auto-update apps in Intune using community-driven tools, WinTuner and Winget-AutoUpdate-Intune, for an efficient, l
Discover Microsoft Entra Private Access: advanced, secure remote access for corporate resources, surpassing traditional VPN limitations.
Boost security, speed, and access with Microsoft's Entra Internet for M365. A game-changer!
Need to bulk import, export or document your Intune configurations, this guide has you covered.
Using Azure Automation Accounts to send scheduled emails, ditch those scheduled tasks and insecure scripts!
Deploy Microsoft Teams to Azure Virtual Desktop using Intune.
Cross tenant sync is a feature I've been waiting to see for a while and with the announcement of cross tenant access settings, I knew it...
In this article I describe how to enable IE mode on your Intune enabled devices and how you can easily manage a corporate site list!
This article will go into detail on how to configure Azure MFA for access to on-premises VPN and RD Gateway.
A brief overview on how you can deploy applications using winget in Microsoft Intune and even keep them updated!
Admit it, we've all fallen foul of that annoying (and scary for some) popup that seems to rear it's ugly head after you've spent the last...
Recently I found myself in a scenario where I needed to quickly and easily access a calendar from a Microsoft Teams group, I didn't think...
Microsoft as of August 31 2022 will retire all 1.x versions of Azure AD Connect because they include SQL Server 2012 components. If you...
In my previous Defender for Office 365 posts I walked through the setup and configuration of threat policies covering each policy type...
One of the most requested tasks from clients is the ability to distribute document templates for end users to make use of. There are many...
So this week I've had the pleasure of setting up Microsoft Defender for Cloud (MDFC) for a client with a view to onboarded all Azure...
In part 1 of our Defender for Office 365 series we talked about licensing, quarantine policies, anti-phishing, anti-spam and anti-malware...
Microsoft Defender for Office 365 (MDO) is one of the modules included within Microsoft's Extended Detection and Response platform (XDR)...
Collaboration with external partners is becoming more and more the norm, COVID pushed most organisations into the cloud and even helped...
With the addition of Defender for Business into the Microsoft 365 Business Premium license the gap between it, and Microsoft 365 E3 just...
It's here, the moment we've all been waiting for, Defender for Business is live in tenants using the Microsoft Business Premium license...
It's no secret that Conditional Access is the pillar of any good security plan and one of the best features available as part of the...
As most of you may already know the built in configuration settings for deploying a wallpaper and lockscreen image within Microsoft...
As most of you reading this article will know there are many different ways to deploy apps using Microsoft Endpoint Manager (MEM), this...
