Check how authentication and policy requirements combine before treating a blocked sign-in as resolved.

A tool to assess historical impact of report-only policies

Automate analysis of MDE Client Analyzer output for common issues

Comprehensive automation for device cleanup

The defaults are better than they used to be, but you can still do better.

Use reviewed Graph PowerShell samples to report application credential expiry.

Hunt for copied or renamed ie4uinit processes with version metadata and context.

Block unknown client platform claims with a carefully tested Conditional Access policy.

Use the browser's built-in NetLog capture to troubleshoot awkward network issues.

Bundle several Defender macOS permissions in one profile, then check the remaining deployment requirements.

Require a second admin to approve protected Intune changes before they are applied.

Process independent work in parallel with PowerShell 7 and a sensible throttle.

Use resource-level Defender for Servers Plan 1 and built-in Azure Policy for selected machines.

Review whether guests can reshare items they don't own, alongside their site permissions.

Use an upload-only link to collect files without exposing the destination folder.

Retrieve available Entra LAPS password history with Get-LapsAADPassword.

I joined the Trimarc team for a Happy Hour conversation about a little bit of everything.

Check preset policy scope before expecting a custom email protection policy to apply.

Filter the Graph authentication registration report instead of querying every user's methods.

Collect Azure Activity Logs in Sentinel and check which tables have ingestion charges.

Set up free cost anomaly alerts to help catch unexpected Azure spending.

This step-by-step tutorial is ideal for those looking to experiment with Certificate Authority setups in a lab environment. Learn how to configure an offline CA using OpenSSL, use it to sign an Enterprise ADCS Intermediate CA, and publish CRLs in an Azure Static Web App.

Note This article was last updated on 01/30/2025 for readability and updated URLs. I am working on updating this for the UI changes that have been made to Intune :)

Compare event and ingestion timestamps to see how long records take to reach Log Analytics.

Note This article was last updated on 01/30/2025 for readability and updated URLs. We no longer need to manually load modules as shown, and this article will be completely overhauled to include backup of LAPS passwords and BitLocker keys to Azure Key Vault as well :)

Note This article was last updated on 01/30/2025 for readability and updated URLs. I am working on updating this for the UI changes that have been made to Intune :)

Note This article was last updated on 01/30/2025 for readability and updated URLs

Note This article was last updated on 01/30/2025 for readability and updated URLs

Note This article was last updated on 01/30/2025 for readability and updated URLs

Note This article was last updated on 01/30/2025 for readability and updated URLs