Microsoft Secure Score Series – 14 – Designate more than one global admin
Having more than one global administrator helps if you are unable to fulfill the needs or obligations of your organization. It's important to have a delegate…
Archive
Posts
Microsoft Secure Score Series – 13 – Set automated notifications for new and trending cloud applications in your organization
With Cloud Discovery policies, you can set alerts that notify you when new apps are detected within your organization. And again, we're back at Cloud App…
Use Power Automate or Logic Apps to keep an eye on your licenses
I guess we've all been there; you ran out of licenses in your Azure AD or Office 365 tenant. Despite you hang out in your admin portal every day, you were…
A first look at Administrative Units and My Staff in Azure Active Directory
Recently, Microsoft introduced Administrative Units in Azure Active Directory. At the time of writing, this feature is in preview. Today we take a first look…
Microsoft Secure Score Series – 12 – Turn on customer lockbox feature
Turning on the customer lockbox feature requires that approval is obtained for data center operations that grants a Microsoft employee direct access to your…
Microsoft Secure Score Series – 11 – Turn on user risk policy
With the user risk policy turned on, Azure AD detects the probability that a user account has been compromised. As an administrator, you can configure a user…
Microsoft Secure Score Series – 10 – Discover trends in shadow IT application usage
Add a data source in automatic log upload for Cloud App Security Discovery to identify applications in your organization that run without official approval.…
Set additional clocks to Windows 10 using Intune
When you work for an international company, or you have to deliver support in other timezones, you might find yourself Googling for time in different timezones…
Microsoft Secure Score Series – 09 – Do not allow users to grant consent to unmanaged applications
Tighten the security of your services by regulating the access of third-party integrated apps. Only allow access to necessary apps that support robust security…
Install Windows Package Manager (winget) using Intune
Microsoft released a preview of the Windows Package Manager. I'm not going into detail about the product itself, because there are a lot of (better)…
Sure, keep me signed in! And don't prompt for MFA!
Today a short blog about MFA prompts, session lifetime, and cookies. This will give you an idea of how you can tune the end-user experience and where to…
Going passwordless with the FEITIAN Fingerprint card
A quick word upfront. I'm not a salesperson. I'm interested in FIDO2 because it delivers passwordless and strong authentication. That means that you should be…