Administrator Protection vs. Intune EPM: Who gets the admin keys?

My first car had a key you could copy at the hardware store for about four dollars. No verification. No questions. If the key fit, the car assumed you belonged there. Modern key fobs are smarter. The ...

Learn how to safely deploy App Control in audit mode, analyze events, document rules, and prepare for enforcement.

Microsoft Defender finds the AI agents quietly occupying your endpoints.

First, a small confession. I seem to have lucked out these past few years. Customer after customer has handed me enormous fleets of kiosk devices. Somewhere along the way, I actually started to enjoy ...

Microsoft Entra passkeys on Shared Windows PCs before serving phishing-resistant access to production.

GSA and Purview team up to block data leaks

6,000 groups, zero visibility. So I built a fix.

Secure Windows BYOD access with Edge for Business.

My wife and I recently took a trip to Savannah, Georgia, and let me tell you, that city knows how to do food. We stumbled into this little restaurant, and…

If your org is starting to rely on tools like ChatGPT, Copilot, Claude, or Gemini, you are probably already thinking about data leakage. However, there is another problem that shows…

Lock down kiosks. Troubleshoot blocks fast.

Taming AI agents with Entra Conditional Access guardrails

Connect GSA to Sentinel: see more, guess less.

Block risky clicks: enable Entra GSA Threat Intelligence.

Edge password protection setup

Microsoft Connected Cache for Enterprise and Education helps organizations save bandwidth during Windows 11 upgrades, Autopilot provisioning, Intune app...

Simply device compliance with MDE.

Intune EPM deny rules

Setting up Personal Data Encryption.

Automatic risky app blocking

Integrate MDCA and MDE to automatically block risky cloud apps.

Delivery Optimization slashes bandwidth and eases troubleshooting.

Optimize updates with Delivery Optimization and Connected Cache in Intune.

Edge + Defender = Faster, smarter cloud app session protection.

Script fixes primary‑user chaos in Intune

Identify device users fast with this Intune-friendly PowerShell script.

Web filtering made fun and simple.

Protected Actions save more than meatloaf.

LAPS gets a cleanup upgrade

Spring clean your Entra groups with Access Reviews and keep access tidy.

It slices; it dices. Okay, not really. But the M365 Traffic Profile does speed up your apps and fend off cyber threats

Implement Entra Password Protection

Simplifying GPO migrations to Intune.

Today, I wanted to dive into a topic that’s both intriguing and slightly nerdy M365 Security Baselines in Intune! When I posted about Windows 10 Baselines, my friend Thiago Beier…

Join the Rebel IT forces as we harness the power of Entra ID Lifecycle Workflows to automate employee onboarding, because even Luke Skywalker needs a seamless first day!