Windows Hello for Business Is More Than a Login Method
Most organisations think their phishing-resistant authentication journey starts with passkeys. In reality, many have already deployed one of the most important phishing-resistan...
Category: Microsoft
Showing all posts in Microsoft.
Windows 365 for Secure Work: The Device Experience Nobody Talks About
Introduction Windows 365 promises a simple idea: a consistent, secure Windows experience delivered from the cloud, accessible from almost anywhere. In practice, the quality of t...
Data – The Fourth Pillar of Zero Trust
Introduction In this Zero Trust blog series, we’ve already explored how Identity, Devices, and Applications form the foundation of a modern security strategy. Each pillar plays...
Compliance & Governance Cyber Security Data Protection Entra Information Protection Microsoft Microsoft 365 Security Security Strategy Zero Trust
#Compliance
#Continuous Improvement
#DLP (Data Loss Prevention)
#Data Security
#Encryption
#Insider Risk
#Microsoft
#Microsoft Purview
#Sensitivity Labels
#Shadow IT
#Zero Trust
Applications – The Third Pillar of Zero Trust
Introduction In the first two posts of this Zero Trust series, we established that identity is the new perimeter and devices are the frontline of defence. By verifying every use...
Devices – The Second Pillar of Zero Trust
Introduction In the first post of this series, we explored how identity has become the new perimeter in a world where users, apps, and data are no longer confined to…
Identity: The New Perimeter in Zero Trust
Welcome to the first deep dive in my Zero Trust blog series. If you’ve read the series introduction, you’ll know that Zero Trust isn’t a single product or a quick…
Zero Trust Blog Series: A Microsoft-Centric Approach
Introduction Over the past few years, I’ve seen a growing interest in Zero Trust but also a lot of confusion. Many still view it as a product you can buy…
Deploying Azure Virtual Desktop – A Modular, Automated Approach
Introduction Azure Virtual Desktop (AVD) is Microsoft’s comprehensive Desktop-as-a-Service platform, enabling secure remote access to Windows desktops and apps from virtual...
Automation Azure Azure Virtual Desktop Entra Infrastructure as Code Intune Microsoft Microsoft Graph PowerShell Scripting Virtual
#AVD
#Azure
#Conditional Access
#Entra ID
#Microsoft
#Microsoft Graph
#PowerShell
#Virtual
#automation
#azure-ad
#bicep
#dns
#enterprise
#fslogix
#hybrid-join
#identity
#infrastructure-as-code
#rbac
#remote-desktop
#storage
Windows Image Prep Tool for Microsoft Surface Laptop 7th Edition
Introduction A while back I wrote a post about my experience with getting my Microsoft Surface Laptop 7th Edition working with a clean install of Windows 11, you can see…
Using Cloud PKI with Always On VPN
Using Microsoft Cloud PKI With Always On VPN Introduction I have been playing around with Always On VPN recently. Using it with Domain, Hybrid and Entra Joined devices. As you&#...
Always On VPN Entra Join – Part 5 Deploy Always On VPN for Entra Joined Devices
This is part 5 of my Always On VPN series You can review the pervious posts if required: Introduction So we now have everything in place for Always On VPN….
Always On VPN Entra Join – Part 4 Configure Always On VPN for Entra Joined Devices
This is part 4 of my Always On VPN series You can review the pervious posts if required: Introduction The infrastructure you have in its current state is great if…
Always On VPN Entra Join – Part 3 Core Always On VPN Infrastructure
This is part 3 of my Always On VPN series You can review the pervious posts if required: Introduction Now we have the certificates available the next step is to…
Always On VPN Entra Join – Part 2 Certificate Templates
This is part 2 of my Always On VPN series You can review the pervious posts if required: Introduction Certificates are at the heart of Always On VPN as this…
Always On VPN Entra Join – Part 1 Whats needed
This is part 1 of my Always On VPN series You can review the pervious posts if required: Introduction Always on VPN is a technology thats been around for some…
Microsoft Surface Laptop 7th Edition
Introduction I recently with picked up a Microsoft Surface Laptop with Copilot. I wanted to go throguh my frustrations with it to get a clean install of Windows 11 on…
Mac OS connecting to Windows 365 and AVD
Introduction You may have seen from some of my posts on here and also on my YouTube channel I have been doing a lot about Windows 365 and AVD. You…
Virtual PAW – Part 4 – Completing the basic setup
So this is part 4 of my multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction In this part I’ll go…
Virtual PAW – Part 3 – Deploying the session hosts
So this is the 3rd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction Welcome to the 3rd…
Virtual PAW – Part 2 – Core Components
So this is the 2nd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW. Part One was the high…
Virtual PAW – Part 1 – A high level overview
I have decided to create this as a multi part post to hopefully make it easier to understand. Introduction So Following on from my last post I thought I’d share…
Why use a PAW?
Introduction Following on from my previous post I have been asked why I use a PAW for my own tenant, and or why not just use a conditional access policy…
Securing my privileged access with AVD
I’m trying to “lead by example” (I use that term loosely), when it comes to privileged access. A bit of background For a long time my regular Microsoft 365 acc...
Privileged Identity Management and Access Tiers
Introduction I’ve been working with a customer recently assisting with sorting out their privileged access and assisting them with their adoption of PIM (Privileged Identi...
Cost effective IPSec Site to Site VPN with Azure and UDM
Introduction There are many ways to establish a VPN between my UDM and Azure andI’ve tried them all, but, for the best result I would still recommend using an Azure…
Creating Multiple Security Groups in Microsoft Entra
I was recently asked if there was a quick way to create 180 plus Security Groups in Microsoft Entra. I used to do a lot of PowerShell Scripting but not…