Why this exists Right, so Microsoft didn’t bolt Intune and Defender together because any of us were sat there begging for more toggles. They did it because the old model was ridiculous. Defender c...
Attackers do not care about the average device in your estate. They care about the machines and identities that let them own the rest of it. Domain controllers, identity sync servers, certificate i...
Secure SSH Access to Azure VMs Using Microsoft Entra Private Access: A Cost-Effective Alternative to Azure Bastion Small and medium-sized businesses (SMBs) often face challenges managing secure an...
Why Microsoft 365 E5 Finally Feels Like the “E7” License I’ve spent years complaining that Microsoft’s licensing left security and endpoint teams half-equipped. I was one of the people saying “we ...
A Nuclear weapons story: Making SharePoint Zero-Day-Tolerant with Microsoft Entra, Microsoft Sentinel, & Security Copilot A SharePoint zero-day went from stage demo to real-world disaster afte...
Migrating Windows 10 to Windows 11 with Microsoft Intune With Windows 10 reaching end-of-life in October 2025, organizations are planning their move to Windows 11. Fortunately, modern tools like M...
Microsoft’s Sovereign Cloud Announcement: A New Era for EU Compliance and Control In this post, I’ll break down what Microsoft’s new sovereign cloud measures really mean for Microsoft 365 in the E...
Retaining and Preserving Microsoft 365 and Purview Forensic Logs and Insider Risk Evidence Managing a Microsoft 365 E5 tenant for forensic and legal requirements involves ensuring that all relevan...
Printer Automatus: The Ultimate Printer Management Script Sharing My Secret Weapon Let’s be honest, printers are the bane of every IT professional’s existence. In a world where automation reigns ...
The Hidden Classic Conditional Access Policy When I recently faced a frustrating access issue with Microsoft Sentinel, it took me on a deep dive into Azure’s Conditional Access settings. This blog...