Practical Endpoint: Restricting Admin Access to an Endpoint
In this episode of Practical Endpoint, we explain two approaches to restricting Admin rights to corporate devices using Intune and Autopilot.
Azure Active Directory (Azure AD) is a cloud-based enterprise directory service used by Microsoft 365 to store details of user accounts, groups, and applications.
In this episode of Practical Endpoint, we explain two approaches to restricting Admin rights to corporate devices using Intune and Autopilot.
Microsoft recently stopped supporting Microsoft Entra Connect and introduced its successor, Microsoft Entra Cloud Sync. This blog reviews how to set up and configure Microsoft Entra Cloud Sync, with helpful tips along the way.
Looking to score that raise? In this episode of Practical Protection, we dive into Microsoft 365 Secure score, how it works, and help you better secure your Microsoft cloud environments.
In this episode of the Practical 365 Podcast, Steve and Rich are joined by Becky Cross to discuss Hybrid Identity Migration, new Exchange On-Premises cumulative updates, Azure OpenAI features, and more!
Microsoft Entra administrative units are gaining in popularity. Restricted administrative units are now available and many Purview solutions support administrative units. In this article, we explain how to use Microsoft Graph PowerShell SDK cmdlets to create a report about administrative units, role assignments for their management, and their membership.
Most articles covering how to bulk delete Azure AD accounts use a CSV file to hold the input set of accounts for removal. That approach works, but there are better ways to do the job if the contents of Azure AD are accurate.
Maintaining accurate Azure AD User Account manager links is important because many Microsoft 365 features like the Organization chart in Teams, the user profile card, and Outlook's Org Explorer depend on the information. This article covers how to use PowerShell to maintain the manager-employee links.
After much humming and hawing, Microsoft reset the retirement date for several old Azure AD modules to March 30, 2024. The nine-month extension is there to help customers convert scripts to use the Microsoft Graph PowerShell SDK or Graph API requests. On the upside, the extra time is good as it creates space to migrate scripts. On the downside, there's still some challenges in converting from the old Azure AD modules.
You can’t disrupt a chain if you can’t identify the links. In this blog, Paul Robichaux goes over some of the ways you can break a Kill Chain in your environment. And it all starts with asking yourself the right questions.
At the end of March, Practical 365 traveled with the TEC European roadshow, traveling between three cities in Europe over a week, listening to experts talking primarily about security-focused topics aimed at improving your Microsoft 365, Azure AD and Active Directory. Read our whistle-stop tour of the most important points made by expert speakers.
Many PowerShell scripts written to automate operations in Microsoft 365 tenants fetch Azure AD users or mailboxes to process. In this article, we explain how to fetch user objects effectively by using filters to make sure that scripts process the right set of accounts or mailboxes.
Because of the way the Windows security model works, it’s not currently possible to eliminate the use of passwords for local administrator accounts. Given that fact, the next best solution is to remediate the biggest problems with passwords for these local accounts, including weakness, reuse, and tenure. In this article, we discuss how the Local Administrator Password Solution (LAPS) helps with all of those!