Microsoft-365

In Microsoft Defender for Endpoint (MDE), tags can be attached to a device for reporting, filtering, and as a dynamic attribute for membership of a device group.  Device groups (previously machine groups), are used to assign devices different rules and adminis...

To provision Windows 10 PCs using Autopilot and Intune, they must first be registered as Windows Autopilot devices in the Device Directory Service, which is really the cloud Autopilot service.  When a device is registered to the Autopilot service, its hardware...

Application Guard first appeared in Windows 10 1709 ("Fall Creators Update") to isolate Edge browser activity within a Hyper V container.  Microsoft now extends that same idea to Word, Excel, and PowerPoint in Office 365 ProPlus Microsoft 365 Apps for Enterpri...

Since October 2019, Microsoft has enabled Security Defaults by default in new Microsoft 365 tenants.  Security Defaults are a group of best-practice security settings, and one of note is the disablement of all legacy authentication, which itself has been off i...

As you move from on-premises or third-party infrastructure to Microsoft 365 and Azure AD, you will want to keep those BitLocker recovery keys safe.  You can store those keys either in on-premises Active Directory or in the cloud with Azure AD. The behavior of...

Microsoft Cloud App Security (MCAS), Redmond's cloud app security broker (CASB) offering, is a powerful tool for investigating and pro-actively controlling your SaaS estate.  It includes tools such as reverse proxying to control sessions and sits inside the Mi...

This blog is the last in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management - Part 2: Access Reviews - Part 3: Privileged Identity Management (PIM) (this post) PIM is an Azure AD P2 feature that enables just...

This blog is the second in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management - Part 2: Access Reviews (this post) - Part 3: Privileged Identity Management (PIM) Historically, the apps, groups, and rights a...

This blog is the first in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management (this post) - Part 2: Access reviews - Part 3: Privileged Identity Management (PIM) Azure AD entitlement management is a bit of an...