Since the Entra Tenant Governance solution became generally available on August 10, 2026, I thought it was the perfect time to take a closer look at what it has to offer and share my findings in this blog. To give this solution the attention it deserves, I’m going to
Recently, a group of Microsoft Security MVPs and I organized a Microsoft Security event called YellowHat, which was a big success, reaching over 150 in-person attendees and 1500+ online participants. The MVP program team contacted me for an interview, and the output was featured on the Microsoft site in
Did you know Microsoft Defender for Cloud has a built-in cost calculator to easily calculate the costs of protected resources in your cloud environment? No? Well, I didn't either until I stumbled upon the button in the MDC portal myself. Apparently, Microsoft announced the preview for the
Microsoft's annual tech event, Microsoft Ignite 2024, was held in Chicago last week. The on-site event includes informative sessions, product demos, hands-on labs, and valuable networking opportunities. Still, people worldwide can also join in on (most) of the fun remotely. I couldn't attend in
Enhanced Phishing Protection is a device configuration for Microsoft Defender that many companies overlook. Arguably, it's not the most important one, but it will still notify our users whenever they type their password or reuse it in places they shouldn't. Sadly, this is only applicable whenever
Today, it's time for another blog post in the unmanaged devices series. We'll look at a newly introduced feature called in-browser protection with Edge for Business. This new preview feature is a welcome addition to Microsoft Defender for Cloud Apps (MDA) and its session policies.
On a snowy morning, while snowboarding down the slopes of Sölden (Austria), I received something memorable. I stepped onto a Gondola (Ski lift) to reach the top of the mountain and read the following email. I was very proud and beyond excited to tell my family and friends about this,
Mobile Application Management (MAM) for Android and iOS has been part of Microsoft Intune for many years now. MAM allows us to manage and protect corporate data on an application level. Besides protecting data, we can also set access requirements and perform a remote selective wipe of corporate data while
Today, we will discuss nothing new, but it's still a topic that remains as relevant and important as ever. If you decide to block users working from unmanaged devices, you can securely mitigate various security risks, such as data leaks and successful phishing attacks. For example, we see
Initially, Microsoft introduced the cross-tenant access settings in Microsoft Entra simultaneously with the shared channel feature in Microsoft Teams. Setting up this B2B collaboration between tenants was a requirement for working with these shared channels. Today, many organizations require their users to work from managed and compliant devices before
Many times, I've seen companies actively managing personal devices in Microsoft Intune, sometimes intentionally, but most of the time, accidentally without the user's knowledge. My personal stance on the subject is simple: don't fully manage a device that isn't yours. To solve
rganizations with access to Microsoft Intune will almost always choose to manage their corporately owned devices using Mobile Device Management. However, when dealing with mobile devices such as Android and iOS devices, especially if they are personal devices, they will most likely keep them unmanaged, and for good reason: we