iiinova — where your digital self keeps evolving

Lukas Beran @lukasberan.com · 16/03/2026

𝐇𝐨𝐰 𝐭𝐨 𝐜𝐫𝐞𝐚𝐭𝐞 𝐚 𝐖𝐏𝐀3 𝐖𝐢-𝐅𝐢 𝐩𝐫𝐨𝐟𝐢𝐥𝐞 𝐟𝐨𝐫 𝐖𝐢𝐧𝐝𝐨𝐰𝐬 𝐢𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐈𝐧𝐭𝐮𝐧𝐞 Microsoft Intune still cannot natively create a Wi-Fi profile with WPA3-Personal security at this time. Within the configuration templates, there is only Wi-Fi with WPA/WPA2 security, but WPA3 is missing.

111

Lukas Beran @lukasberan.com · 18/02/2026

𝐇𝐨𝐰 𝐂𝐨𝐧𝐝𝐢𝐭𝐢𝐨𝐧𝐚𝐥 𝐀𝐜𝐜𝐞𝐬𝐬 𝐏𝐨𝐥𝐢𝐜𝐢𝐞𝐬 𝐀𝐫𝐞 𝐄𝐯𝐚𝐥𝐮𝐚𝐭𝐞𝐝 𝐢𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐄𝐧𝐭𝐫𝐚 𝐈𝐃 Understanding how Conditional Access policies are evaluated in Microsoft Entra ID is absolutely essential if you are involved in their creation or management.

110

Lukas Beran @lukasberan.com · 08/02/2026

𝐇𝐨𝐰 𝐭𝐨 𝐮𝐬𝐞 𝐚𝐜𝐜𝐞𝐬𝐬 𝐩𝐚𝐜𝐤𝐚𝐠𝐞𝐬 𝐭𝐨 𝐦𝐚𝐧𝐚𝐠𝐞 𝐠𝐫𝐨𝐮𝐩 𝐦𝐞𝐦𝐛𝐞𝐫𝐬𝐡𝐢𝐩𝐬 Access packages allow you to dynamically manage group, Teams, application, and SharePoint site membership based on user requests.

120

Lukas Beran @lukasberan.com · 05/01/2026

𝐇𝐨𝐰 𝐭𝐨 𝐠𝐞𝐭 𝐮𝐧𝐥𝐢𝐦𝐢𝐭𝐞𝐝 𝐦𝐚𝐢𝐥𝐛𝐨𝐱 𝐬𝐢𝐳𝐞 𝐢𝐧 𝐄𝐱𝐜𝐡𝐚𝐧𝐠𝐞 𝐎𝐧𝐥𝐢𝐧𝐞 Exchange Online Plan 1 licenses generally have a primary mailbox capacity of 50 GB. Exchange Online Plan 2 licenses have a capacity of 100 GB.

110

Lukas Beran @lukasberan.com · 18/11/2025

@cloudflare.social is so broken now that even their status page is broken 🧐 #cloudflaredown

031

Lukas Beran @lukasberan.com · 20/09/2025

Seriously, Apple? That plastic-like white back on your silver flagship iPhone looks awful. This might be the ugliest iPhone ever, and I’m seriously thinking about returning it purely because of the design.

000

Lukas Beran @lukasberan.com · 29/08/2025

𝗛𝗼𝘄 𝘁𝗼 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗰𝗮𝗹𝗹𝘆 𝘂𝗽𝗱𝗮𝘁𝗲 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 𝗼𝗻 𝗰𝗼𝗺𝗽𝘂𝘁𝗲𝗿𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗜𝗻𝘁𝘂𝗻𝗲 Microsoft Intune does not have any built-in options for updating installed applications on Windows computers.

How to update applications using Patch My PC

110

Lukas Beran @lukasberan.com · 06/07/2025

🚨 Security Alert: Synology Active Backup for Microsoft 365 Vulnerability 🚨 Modzero discovered a critical vulnerability in Synology’s "Active Backup for Microsoft 365" (ABM) that exposed sensitive cloud data.

110

Lukas Beran @lukasberan.com · 30/06/2025

𝗛𝗼𝘄 𝘁𝗼 𝗰𝗼𝗹𝗹𝗲𝗰𝘁 𝗰𝘂𝘀𝘁𝗼𝗺 𝗲𝘃𝗲𝗻𝘁 𝗜𝗗𝘀 𝘁𝗼 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗦𝗲𝗻𝘁𝗶𝗻𝗲𝗹 Microsoft Sentinel is Microsoft's SIEM/SOAR. It is used to collect and evaluate logs.

How to collect custom Event IDs in Microsoft Sentinel

100

Lukas Beran @lukasberan.com · 25/06/2025

𝗛𝗼𝘄 𝘁𝗼 𝗱𝗶𝘀𝗮𝗯𝗹𝗲 𝗦𝗲𝗹𝗳-𝗦𝗲𝗿𝘃𝗶𝗰𝗲 𝗣𝗮𝘀𝘀𝘄𝗼𝗿𝗱 𝗥𝗲𝘀𝗲𝘁 𝗳𝗼𝗿 𝗮𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗼𝗿𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗 Self-service password reset can be a useful feature that allows users to access their account in case they forget their password.

How to disable self-service password reset for administrators

100

Lukas Beran @lukasberan.com · 19/06/2025

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗰 𝗲𝗺𝗮𝗶𝗹 𝗳𝗼𝗿𝘄𝗮𝗿𝗱𝗶𝗻𝗴 𝗶𝗻 𝗢𝗳𝗳𝗶𝗰𝗲 𝟯𝟲𝟱 Automatic email forwarding is very risky. First, it can lead to exfiltration of sensitive internal information outside the corporate environment.

How to block automatic email forwarding in Office 365

100

Lukas Beran @lukasberan.com · 16/06/2025

𝗨𝗻𝗱𝗲𝗿𝘀𝘁𝗮𝗻𝗱𝗶𝗻𝗴 𝘁𝗵𝗲 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 𝗧𝗶𝗲𝗿 𝗠𝗼𝗱𝗲𝗹 In this video, I walk through the fundamentals of the Active Directory Tier Model — what it is, why it matters, and how it helps protect privileged accounts and critical assets in your Windows environment.

150

Lukas Beran @lukasberan.com · 12/06/2025

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗮𝗰𝗸𝘂𝗽 𝗢𝗳𝗳𝗶𝗰𝗲 𝟯𝟲𝟱 𝗱𝗮𝘁𝗮 Right off the bat, you might be wondering why I should back up data from Office 365 when it's a cloud service. Microsoft assures you of high data availability, but the service itself has no built-in backup mechanisms. And that's something to keep in mind.

100

Lukas Beran @lukasberan.com · 09/06/2025

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝘀𝗽𝗲𝗰𝗶𝗳𝗶𝗰 𝗳𝗶𝗹𝗲 𝘁𝘆𝗽𝗲𝘀 𝗶𝗻 𝗲𝗺𝗮𝗶𝗹 𝗮𝘁𝘁𝗮𝗰𝗵𝗺𝗲𝗻𝘁𝘀 A very common source of infection is email. Everyone uses email and threat actors take advantage of it. Either in the form of phishing or in the form of malicious attachments.

How to block specific file types in email attachments

110

Lukas Beran @lukasberan.com · 29/05/2025

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝘂𝗻𝗸𝗻𝗼𝘄𝗻 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗 In conditional access policies, it is possible to block device platforms. It is a good idea to eliminate all ways that a potential threat actor could use to compromise the environment. In other words, block everything that is not needed.

How to block device platforms in Microsoft Entra ID

110

Lukas Beran @lukasberan.com · 22/05/2025

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝗻𝗲𝘄𝗹𝘆 𝗿𝗲𝗴𝗶𝘀𝘁𝗲𝗿𝗲𝗱 𝗱𝗼𝗺𝗮𝗶𝗻𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗳𝗼𝗿 𝗘𝗻𝗱𝗽𝗼𝗶𝗻𝘁 Newly registered domains can be legitimate. Every domain is new at some point. But usually there isn’t any content on new domains right away – the content is usually being developed for some time.

110

Lukas Beran @lukasberan.com · 19/05/2025

𝗛𝗼𝘄 𝘁𝗼 𝗿𝗲𝗾𝘂𝗶𝗿𝗲 𝗰𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝘁 𝗱𝗲𝘃𝗶𝗰𝗲 𝗳𝗼𝗿 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗮𝗰𝗰𝗲𝘀𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗 Requiring a managed device to access Microsoft 365 services (or generally any apps/services integrated with Microsoft Entra ID) is a very effective method of phishing protection.

121

Lukas Beran @lukasberan.com · 12/05/2025

𝐒𝐡𝐨𝐮𝐥𝐝 𝐈 𝐭𝐫𝐮𝐬𝐭 𝐞𝐱𝐭𝐞𝐫𝐧𝐚𝐥 𝐌𝐅𝐀 𝐨𝐫 𝐧𝐨𝐭 𝐈𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐄𝐧𝐭𝐫𝐚 𝐈𝐃? Trust or do not trust external MFA in Microsoft Entra ID? There are different opinions, and I will talk about the pros and cons in this video.

110

Lukas Beran @lukasberan.com · 07/05/2025

𝐇𝐨𝐰 𝐭𝐨 𝐭𝐮𝐫𝐧 𝐨𝐧 𝐢𝐧𝐛𝐨𝐮𝐧𝐝 𝐒𝐌𝐓𝐏 𝐃𝐀𝐍𝐄 𝐢𝐧 𝐎𝐟𝐟𝐢𝐜𝐞 365 Inbound SMTP DANE is a security protocol designed to secure email communication by ensuring the authenticity of the receiving mail server's encryption certificates when emails are delivered via the Simple Mail Transfer Protocol (SMTP).

How to turn on inbound SMTP DANE in Office 365

121

Lukas Beran @lukasberan.com · 05/05/2025

𝐇𝐨𝐰 𝐭𝐨 𝐦𝐚𝐩 𝐒𝐡𝐚𝐫𝐞𝐏𝐨𝐢𝐧𝐭 𝐬𝐢𝐭𝐞𝐬 𝐯𝐢𝐚 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐈𝐧𝐭𝐮𝐧𝐞 SharePoint sites are used to share data within an organization. Typically, this data is shared within teams or projects.

120

Lukas Beran @lukasberan.com · 01/05/2025

𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐟𝐨𝐫 𝐄𝐧𝐝𝐩𝐨𝐢𝐧𝐭 𝐓𝐚𝐦𝐩𝐞𝐫 𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐞𝐱𝐩𝐥𝐚𝐢𝐧𝐞𝐝 Tamper Protection in MDE is protection that protects selected settings, such as virus and malware protection. With tamper protection, you cannot disable selected components of Microsoft Defender for Endpoint or change their settings.

Microsoft Defender for Endpoint Tamper protection

100

Lukas Beran @lukasberan.com · 28/04/2025

There’s been a lot of buzz on social media lately about an infographic shared by the Conti ransomware group, the gang behind the ransomware of the same name. What really caught people’s attention was that Microsoft Defender for Endpoint ended up in the “LOL” category as the weakest protection.

210

Lukas Beran @lukasberan.com · 23/04/2025

𝐁𝐥𝐨𝐜𝐤𝐢𝐧𝐠 𝐮𝐬𝐞𝐫 𝐜𝐨𝐧𝐬𝐞𝐧𝐭 𝐭𝐨 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐄𝐧𝐭𝐫𝐚 𝐈𝐃 𝐞𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 𝐚𝐩𝐩𝐬 Microsoft Entra ID is primarily an identity system for Microsoft applications and services. However, you can also integrate other applications and services with Microsoft Entra ID.

Blocking user consent to enterprise apps in Microsoft Entra ID

200

Lukas Beran @lukasberan.com · 16/04/2025

𝐓𝐀𝐌𝐏𝐄𝐑 𝐏𝐑𝐎𝐓𝐄𝐂𝐓𝐈𝐎𝐍 𝐅𝐎𝐑 𝐄𝐗𝐂𝐋𝐔𝐒𝐈𝐎𝐍𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓 Antivirus exclusions can do a lot of damage because what is in the exclusions is not monitored and possibly blocked. Exclusions should only be put in with great circumspection and there should be as few exclusions as possible.

Tamper protection for exclusions in Microsoft Defender for Endpoint

110

Lukas Beran @lukasberan.com · 14/04/2025

𝐇𝐎𝐖 𝐓𝐎 𝐓𝐔𝐑𝐍 𝐎𝐍 𝐑𝐄𝐏𝐎𝐑𝐓 𝐌𝐎𝐃𝐄 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓 𝐖𝐄𝐁 𝐂𝐎𝐍𝐓𝐄𝐍𝐓 𝐅𝐈𝐋𝐓𝐄𝐑𝐈𝐍𝐆 Web Content Filtering in Microsoft Defender for Endpoint allows you to filter content based on categories. There are several predefined categories to choose from. But first, you need to turn on report mode.

100

Lukas Beran @lukasberan.com · 27/03/2025

𝐇𝐎𝐖 𝐓𝐎 𝐀𝐋𝐋𝐎𝐖 𝐏𝐈𝐍 𝐑𝐄𝐒𝐄𝐓 𝐅𝐎𝐑 𝐖𝐈𝐍𝐃𝐎𝐖𝐒 𝐇𝐄𝐋𝐋𝐎 𝐅𝐎𝐑 𝐁𝐔𝐒𝐈𝐍𝐄𝐒𝐒 PIN is one of the login options in Windows Hello for Business. If a user forgets their PIN, they can reset it. Windows Hello for Business allows two types of PIN reset:

How to allow PIN reset for Windows Hello for Business

141

Lukas Beran @lukasberan.com · 20/03/2025

𝐇𝐎𝐖 𝐂𝐎𝐍𝐅𝐈𝐆𝐔𝐑𝐄 𝐆𝐑𝐀𝐃𝐔𝐀𝐋 𝐑𝐎𝐋𝐋𝐎𝐔𝐓 𝐏𝐑𝐎𝐂𝐄𝐒𝐒 𝐅𝐎𝐑 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓 Microsoft Defender for Endpoint supports gradual rollout of all update types – Security Intelligence Updates, Engine Updates, and also Platform Updates.

Defender for Endpoint graduall rollout process

110

Lukas Beran @lukasberan.com · 19/03/2025

𝐀𝐂𝐂𝐎𝐔𝐍𝐓 𝐃𝐑𝐈𝐕𝐄𝐍 𝐔𝐒𝐄𝐑 𝐄𝐍𝐑𝐎𝐋𝐋𝐌𝐄𝐍𝐓 𝐅𝐎𝐑 𝐈𝐎𝐒/𝐈𝐏𝐀𝐃𝐎𝐒 Microsoft announced via the Message Center message ID MC810406 that support is ending for User Enrollment with Company Portal for iOS devices in September 2024.

Account driven user enrollment for ios/ipados in Microsoft Intune

100

Lukas Beran @lukasberan.com · 17/03/2025

𝐒𝐌𝐀𝐑𝐓 𝐋𝐎𝐂𝐊𝐎𝐔𝐓𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃 Smart Lockouts in Microsoft Entra ID help protect Microsoft Entra ID accounts from password attacks. And smart lockouts are also called smart lockouts because they are smart in the meaning of that they should not negatively impact regular users.

110

Lukas Beran @lukasberan.com · 14/03/2025

It was an honor to speak at the Digital Crimes Consortium 2025 in Athens! My session, "Differences Between Threat Actors and What They Have in Common", explored the diverse landscape of cyber threats and highlighted both unique and shared characteristics among various threat actor groups.

110

Lukas Beran @lukasberan.com · 12/03/2025

𝐃𝐈𝐅𝐅𝐄𝐑𝐄𝐍𝐂𝐄 𝐁𝐄𝐓𝐖𝐄𝐄𝐍 𝐄𝐍𝐓𝐄𝐑𝐏𝐑𝐈𝐒𝐄 𝐀𝐏𝐏𝐒 𝐀𝐍𝐃 𝐀𝐏𝐏 𝐑𝐄𝐆𝐈𝐒𝐓𝐑𝐀𝐓𝐈𝐎𝐍𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃 In Microsoft Entra ID, there are Enterprise Apps and App Registrations. Many administrators don’t know the difference between the two and confuse the two important concepts. But there is a major difference between them.

Difference between enterprise apps and app registrations in Microsoft Entra ID

110

Lukas Beran @lukasberan.com · 05/03/2025

𝐏𝐚𝐬𝐬𝐤𝐞𝐲𝐬 𝐢𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐀𝐮𝐭𝐡𝐞𝐧𝐭𝐢𝐜𝐚𝐭𝐨𝐫 𝐚𝐫𝐞 𝐧𝐨𝐰 𝐠𝐞𝐧𝐞𝐫𝐚𝐥𝐥𝐲 𝐚𝐯𝐚𝐢𝐥𝐚𝐛𝐥𝐞! What does it mean? Users can now enroll passkeys in Microsoft Authenticator for their Microsoft Entra ID accounts in the default authentication methods setting. No need for key restrictions anymore! #cswrld #entraid #passkey

2113

Lukas Beran @lukasberan.com · 03/03/2025

𝐃𝐈𝐅𝐅𝐄𝐑𝐄𝐍𝐂𝐄 𝐁𝐄𝐓𝐖𝐄𝐄𝐍 𝐌𝐅𝐀 𝐀𝐍𝐃 𝐏𝐇𝐈𝐒𝐇𝐈𝐍𝐆-𝐑𝐄𝐒𝐈𝐒𝐓𝐀𝐍𝐓 𝐌𝐅𝐀 Phishing is popular technique of attackers. They trick users into entering their credentials on some fraudulent site pretending to be a corporate login page. The user enters their login credentials there and sends them to the attacker.

Difference between MFA and phishing-resistant MFA

110

Lukas Beran @lukasberan.com · 27/02/2025

𝐇𝐎𝐖 𝐓𝐎 𝐃𝐄𝐏𝐋𝐎𝐘 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓 𝐎𝐍 𝐈𝐎𝐒 𝐕𝐈𝐀 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐈𝐍𝐓𝐔𝐍𝐄 Microsoft Defender for Endpoint can be installed and configured on iOS in a zero-touch mode for the end user via Intune. The end user does not need to confirm any settings, permissions or anything on their device afterwards.

How to deploy Microsoft Defender for Endpoint on iOS via Microsoft Intune

110

Lukas Beran @lukasberan.com · 26/02/2025

Exciting news! In just two weeks, I'll be speaking at Digital Crimes Consortium 2025 in Athens, Greece. If you're attending, don’t miss my session on the key differences between nation-state threat actors and financially motivated threat actors. Looking forward to great discussions—see you there!

000

Lukas Beran @lukasberan.com · 25/02/2025

𝐇𝐎𝐖 𝐓𝐎 𝐔𝐒𝐄 𝐓𝐄𝐌𝐏𝐎𝐑𝐀𝐑𝐘 𝐀𝐂𝐂𝐄𝐒𝐒 𝐏𝐀𝐒𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃 When an organization uses passwordless authentication, they need to figure out how to onboard users. If a user has not registered any passwordless authentication method, how can they authenticate to register a passwordless authentication method

How to use temporary access pass in Microsoft Entra ID

140

Lukas Beran @lukasberan.com · 19/02/2025

𝐇𝐎𝐖 𝐓𝐎 𝐌𝐀𝐍𝐀𝐆𝐄 𝐁𝐑𝐄𝐀𝐊-𝐆𝐋𝐀𝐒𝐒 𝐀𝐂𝐂𝐎𝐔𝐍𝐓𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃 When you start tightening the requirements for access to your corporate cloud, it can be easy to accidentally lock yourself out and cut yourself off from access to the admin interface.

How to manage break-glass accounts in Microsoft Entra ID

130

Lukas Beran @lukasberan.com · 17/02/2025

𝐇𝐎𝐖 𝐓𝐎 𝐃𝐈𝐒𝐀𝐁𝐋𝐄 𝐏𝐑𝐈𝐍𝐓 𝐒𝐏𝐎𝐎𝐋𝐄𝐑 𝐎𝐍 𝐃𝐎𝐌𝐀𝐈𝐍 𝐂𝐎𝐍𝐓𝐑𝐎𝐋𝐋𝐄𝐑𝐒 Print Spooler is a service that takes care of print management. This includes, but is not limited to, managing printer drivers, scheduling print jobs, etc.

How to disable print spooler on domain controllers

120

Lukas Beran @lukasberan.com · 11/02/2025

𝐇𝐨𝐰 𝐭𝐨 𝐬𝐞𝐜𝐮𝐫𝐞 𝐲𝐨𝐮𝐫 𝐞𝐦𝐚𝐢𝐥 𝐰𝐢𝐭𝐡 𝐒𝐏𝐅, 𝐃𝐊𝐈𝐌 𝐚𝐧𝐝 𝐃𝐌𝐀𝐑𝐂 Email is usually a critical part of corporate communication these days. Without a functional email, companies can lose orders and therefore money for example. Therefore, email security should be a very high priority.

How to secure your email with SPF, DKIM and DMARC

130

Lukas Beran @lukasberan.com · 10/02/2025

𝐃𝐈𝐅𝐅𝐄𝐑𝐄𝐍𝐂𝐄 𝐁𝐄𝐓𝐖𝐄𝐄𝐍 𝐃𝐄𝐋𝐄𝐆𝐀𝐓𝐄𝐃 𝐀𝐍𝐃 𝐀𝐏𝐏𝐋𝐈𝐂𝐀𝐓𝐈𝐎𝐍 𝐏𝐄𝐑𝐌𝐈𝐒𝐒𝐈𝐎𝐍𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃 In Microsoft Entra ID, there are two types of permissions that can be assigned to an application: delegated permissions and application permissions.

Difference between delegated and application permissions in Microsoft Entra ID

110

Lukas Beran @lukasberan.com · 05/02/2025

𝐔𝐍𝐃𝐄𝐑𝐒𝐓𝐀𝐍𝐃𝐈𝐍𝐆 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃 𝐉𝐎𝐈𝐍 𝐓𝐘𝐏𝐄𝐒 Microsoft Entra ID serves as a robust identity and access management solution for modern businesses, enabling secure authentication and authorization across various devices and services.

100

Lukas Beran @lukasberan.com · 30/01/2025

𝐇𝐎𝐖 𝐓𝐎 𝐁𝐋𝐎𝐂𝐊 𝐄𝐌𝐀𝐈𝐋𝐒 𝐅𝐑𝐎𝐌 𝐓𝐇𝐄 𝐎𝐍𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓.𝐂𝐎𝐌 𝐃𝐎𝐌𝐀𝐈𝐍 𝐈𝐍 𝐎𝐅𝐅𝐈𝐂𝐄 365 The onmicrosoft.com domain is a tenant address. It is the initial domain with which the tenant was created. This domain is also referred to as the MOERA (Microsoft Online Email Routing Address) domain.

How to block emails from the onmicrosoft.com domain in Office 365

110

Lukas Beran @lukasberan.com · 29/01/2025

📺 𝐈 𝐡𝐚𝐯𝐞 𝐦𝐲 𝐨𝐰𝐧 𝐘𝐨𝐮𝐓𝐮𝐛𝐞 𝐜𝐡𝐚𝐧𝐧𝐞𝐥! 📺 I have started publishing detailed instructional videos primarily (but not exclusively) focused on cybersecurity and the Microsoft cloud. If you don't want to miss out on interesting industry tips and tricks, be sure to subscribe. 👇 👇 www.youtube.com/@cswrldcom

080

Lukas Beran @lukasberan.com · 28/01/2025

HOW TO CREATE A DMARC RECORD FOR THE ONMICROSOFT.COM DOMAIN DMARC record is used to authenticate mail to ensure that the message is not fraudulent.

100

Lukas Beran @lukasberan.com · 24/01/2025

Application updates can be managed through Intune or through external tools. External tools typically provide significantly more configuration and customization options.

How to manage Microsoft 365 Apps updates via Microsoft Intune

120

Lukas Beran @lukasberan.com · 13/01/2025

Authentication Strengths in Microsoft Entra ID allows you to granularly define authentication requirements for different situations.

Authentication strength in Microsoft Entra ID explained

151

Lukas Beran @lukasberan.com · 09/01/2025

HOW TO DEPLOY MICROSOFT DEFENDER FOR ENDPOINT ON MACOS VIA MICROSOFT INTUNE Microsoft Defender for Endpoint supports all commonly used platforms. Including Apple’s macOS.

140

Lukas Beran @lukasberan.com · 19/12/2024

There are multiple ways to block specific domains. The easiest way is within Microsoft Defender for Endpoint using Indicators. However, Indicators do not allow you to block top level domains (TLDs). But what if you want to block the entire top level domain, for example everything on the .ru domain?

How to block top-level domains via Microsoft Intune

150

Lukas Beran @lukasberan.com · 18/12/2024

RECOMMENDED CONDITIONAL ACCESS POLICIES IN MICROSOFT ENTRA ID Conditional access policies in Entra ID allow granular security management. Although, organizations usually do not have conditional access policies properly defined. There tend to be blind spots, policies don’t cover all scenarios.

140