Ems

Signals from across Microsoft's services and ecosystems inform Entra ID Protection to detect risk. The risk detections can alert administrators or, better still, combine with other Entra and Defender XDR capabilities to perform remediation and prevention. The...

In my last blog, I wrote about three considerations for your Azure Information Protection deployments and commented on often overlooked potential downsides, or at least areas with which to be cautious. In hindsight, it all feels a bit negative.  I am, for the...

A common Conditional Access policy is to add trusted locations as an exception to multi-factor authorisation requirements.  The logic goes, if you accessing resources such as Office 365 from a location such as the corporate office, that's an element of verific...

With Microsoft Information Protection, you can apply sensitivity labels to files, emails, and containers such as SharePoint Libraries.  These labels apply protection which, in the context of files and emails, really means encryption using AES-128 or 256 (key s...

To provision Windows 10 PCs using Autopilot and Intune, they must first be registered as Windows Autopilot devices in the Device Directory Service, which is really the cloud Autopilot service.  When a device is registered to the Autopilot service, its hardware...

As you move from on-premises or third-party infrastructure to Microsoft 365 and Azure AD, you will want to keep those BitLocker recovery keys safe.  You can store those keys either in on-premises Active Directory or in the cloud with Azure AD. The behavior of...

This blog is the last in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management - Part 2: Access Reviews - Part 3: Privileged Identity Management (PIM) (this post) PIM is an Azure AD P2 feature that enables just...

This blog is the second in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management - Part 2: Access Reviews (this post) - Part 3: Privileged Identity Management (PIM) Historically, the apps, groups, and rights a...

This blog is the first in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management (this post) - Part 2: Access reviews - Part 3: Privileged Identity Management (PIM) Azure AD entitlement management is a bit of an...