Startup Performance in Endpoint Analytics
In this series on Endpoint Analytics we explore the different reports and possibilities that Endpoint Analytics currently offers. In part 1 we discussed the advantages of XLA over SLA, how…
Getting Started With Endpoint Analytics
When an organization purchase a service they usually get some kind of SLA (Service Level Agreement) that dictates how that service is measured and if the vendor will pay penalties…
Patching Third-Party Applications Automatically with Ivanti Security Controls
In this post we will discuss Patch Management and demonstrate how Ivanti Security Controls can be used to automatically and seamlessly patch Microsoft and third party products, that are installed…
Getting Started With Conditional Access
In this introduction to Conditional Access we will be exploring what Conditional Access is, why you should use it in your Azure/Microsoft 365 environment and provide setup instructions for four…
Windows 10 Update Guidance
Microsoft offers their customers a lot of different ways to patch and upgrade their Windows 10 installations, though they did not (as far as i know) have any public documentation…
Microsoft 365 Licensing Overview
It's not always easy to understand what components are included in Microsoft's 365 licenses, therefore I would like to share two great resources that i find really useful. Aaron Dinnage…
Using Privileged Identity Management for Super User Management in Azure Information Protection
The Azure Information Protection (AIP) Super User feature allows administrators or authorized people full access to the documents and data that is protected by AIP and allows them to update/change…
Extract Certificate and Key from PFX
If you have a PFX Certificate from a Windows environment and want to utilize it for example on an Apache server running on Linux, the certificate and key needs to…
Set the Intune MDM Authority using PowerShell
If you have been using Office 365 Mobile Device Management in the past and looking to move to Intune, you might notice that functionality like Enrollment Restrictions and the Enrollment…
Azure Site-to-Site (S2S) VPN with Windows Server 2019
In this post we will walk though the steps of configuring a site-to-site VPN with Azure, using RRAS (Routing and Remote Access Services) on Windows Server 2019 as our on-premise…
Administering Local Admin Access with Privileged Identity Management (PIM)
If your organization has an Active Directory Premium 2 license (included in EMS E5 or Microsoft 365 E5) then you are most likely already utilizing PIM (Privileged Identity Management) for…
Force Password Change on Azure AD Users from Active Directory
Many organizations leveraging Microsoft 365 and Azure, are utilizing hybrid identities with Microsoft's Azure AD Connect synchronization tool. A nice feature that is not enabled by default is the ability…
Wireless 802.1x Authentication Using Network Policy Server
In this post we will be installing Network Policy Server (NPS) on Windows Server 2019 in order to authenticate users/devices connecting to our corporate wireless network. Network Policy Server is…
Creating an AutoPilot Proof of Concept
In this post we will setup an AutoPilot proof of concept (User Driven Azure AD Join). It is possible to use both physical and virtual machines, in my case I…
Introduction to Windows AutoPilot
This post is targeted at those who have little or no experience with Microsoft Intune and Windows AutoPilot. The main goal of this article is to provide a basic understanding…