Entra-Id-Premium-(Aad-Premium)

Signals from across Microsoft's services and ecosystems inform Entra ID Protection to detect risk. The risk detections can alert administrators or, better still, combine with other Entra and Defender XDR capabilities to perform remediation and prevention. The...

Entra ID's P2 license (previously Azure AD Premium P2) unlocks the Privileged Identity Management (PIM). PIM is part of broader identity governance features, and is most known for enabling just-in-time admin rights. For example, you are eligible to become an a...

As I have blogged about alot, there are a bunch of hoops to be jumped through and prerequisites to be met for a successful hybrid Azure AD join and automatic, GPO-invoked Intune enrollment. But sometimes, you have to go back to the basics when you're banging y...

A common Conditional Access policy is to add trusted locations as an exception to multi-factor authorisation requirements.  The logic goes, if you accessing resources such as Office 365 from a location such as the corporate office, that's an element of verific...

To provision Windows 10 PCs using Autopilot and Intune, they must first be registered as Windows Autopilot devices in the Device Directory Service, which is really the cloud Autopilot service.  When a device is registered to the Autopilot service, its hardware...

Since October 2019, Microsoft has enabled Security Defaults by default in new Microsoft 365 tenants.  Security Defaults are a group of best-practice security settings, and one of note is the disablement of all legacy authentication, which itself has been off i...

Microsoft Cloud App Security (MCAS), Redmond's cloud app security broker (CASB) offering, is a powerful tool for investigating and pro-actively controlling your SaaS estate.  It includes tools such as reverse proxying to control sessions and sits inside the Mi...

This blog is the last in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management - Part 2: Access Reviews - Part 3: Privileged Identity Management (PIM) (this post) PIM is an Azure AD P2 feature that enables just...

This blog is the second in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management - Part 2: Access Reviews (this post) - Part 3: Privileged Identity Management (PIM) Historically, the apps, groups, and rights a...

This blog is the first in a small series on Azure AD Premium P2's Identity Governance toolkit. - Part 1: Entitlement Management (this post) - Part 2: Access reviews - Part 3: Privileged Identity Management (PIM) Azure AD entitlement management is a bit of an...