Install Windows Package Manager (winget) using Intune
Microsoft released a preview of the Windows Package Manager. I'm not going into detail about the product itself, because there are a lot of (better)…
Archive
Posts
Sure, keep me signed in! And don't prompt for MFA!
Today a short blog about MFA prompts, session lifetime, and cookies. This will give you an idea of how you can tune the end-user experience and where to…
Going passwordless with the FEITIAN Fingerprint card
A quick word upfront. I'm not a salesperson. I'm interested in FIDO2 because it delivers passwordless and strong authentication. That means that you should be…
Use Graph API data in Power BI using Logic Apps
You can use Graph API data in Power BI using Logic Apps and Power Query. In this blogpost, I show you how to do this step by step.
What admins should know about the combined registration portal for Azure MFA and Self Service Password Reset
The (long) title pretty much reveals the purpose of this blog post. This one was on my to-do list for a while now, and now the combined registration portal is…
Microsoft Secure Score Series – 08 – Use Cloud App Security to detect anomalous behavior
Cloud App Security anomaly detection policies provide User & Entity Behavior analytics (UEBA) and advanced threat detection across your cloud environment.
How to keep an eye on your Teams with Log Analytics and Azure Monitor?
In my previous blog post, I wrote about the new Teams activity policy templates in Cloud App Security. A great addition to easily keep an eye on your teams.…
Activity policy templates for Teams in Microsoft Cloud App Security
The usage of Teams is massively increased over the past weeks. The numbers of people using Teams nowadays are insane. Organizations rapidly enrolled Teams to…
Manage Teams custom backgrounds using Intune
Update! I got some feedback on this blog. Seems that if your users are not members of the local administrator group, install will faill with error: 0x80070001.…
Microsoft Secure Score Series – 07 – Turn on sign-in risk policy
Turning on the sign-in risk policy ensures that suspicious sign-ins are challenged for multi-factor authentication.
Microsoft Secure Score Series – 06 – Enable policy to block legacy authentication
Today, most compromising sign-in attempts come from legacy authentication. Older office clients such as Office 2010 don’t support modern authentication and use…
Use Power Automate for your custom "dynamic" groups
Dynamic groups in Azure AD are awesome. I use them a lot. Dynamic groups can create groups based on attributes. For example, you can create a group that…