Hi all, This is my first post as an MVP and i was not planning to do a post on How to configure Autopilot Device Preparation (APv2) because there are a lot of very good posts already available. However during the configuration of Autopilot Device Preparation i ran into something i did not expect. I…
Many individuals depend on Azure AD Sign-in logs, yet there are valuable additional features to consider for implementation within your tenant. One such feature is the Insights and reporting feature for Conditional Access. This feature allows administrators to analyze and visualize sign-in activities, helping to identify trends and patterns that can inform security policies. By…
In the dynamic field of IT security and management, safeguarding sensitive information stands as a top priority. Central to this effort is the secure handling of administrator passwords, an area where Windows Local Administrator Password Solution (LAPS) plays a pivotal role. It effectively streamlines the management of local administrator passwords on Windows devices. Historically, the…
Hi, as you might know it is possible for some time now to add extension attributes to you Entra ID joined devices. A few reasons for doing this would be: Using a device filter on a conditional access policy – see this Microsoft article For instance, you might include a “BE” attribute specifically for Belgian…
From the standpoint of endpoint security management architecture, this situation addresses the challenge of overseeing security features on devices that are not under direct management. In the case of Intune-managed devices, whether operating solely in the cloud or through co-management scenarios, endpoint security management capabilities are provided. Additionally, integration between Intune and Configuration Manager offers…
Your organization’s attack surface includes all the places where an attacker could compromise your organization’s devices or networks. Reducing your attack surface means protecting your organization’s devices and network, which leaves attackers with fewer ways to perform attacks. Configuring attack surface reduction rules in Microsoft Defender for Endpoint can help with Intune ASR Rules for…
It is important that you prevent being accidentally locked out of your Microsoft Entra organization because you can’t sign in or activate another user’s account as an administrator. You can mitigate the impact of accidental lack of administrative access by creating two or more emergency access accounts or break glass accounts (BGA account) in your…
