Microsoft Defender
Enhanced Phishing Protection is a device configuration for Microsoft Defender that many companies overlook. Arguably, it's not the most important one, but it will still notify our users whenever they type their password or reuse it in places they shouldn't. Sadly, this is only applicable whenever
Microsoft Entra
Initially, Microsoft introduced the cross-tenant access settings in Microsoft Entra simultaneously with the shared channel feature in Microsoft Teams. Setting up this B2B collaboration between tenants was a requirement for working with these shared channels. Today, many organizations require their users to work from managed and compliant devices before
Quick Guides
Many times, I've seen companies actively managing personal devices in Microsoft Intune, sometimes intentionally, but most of the time, accidentally without the user's knowledge. My personal stance on the subject is simple: don't fully manage a device that isn't yours. To solve
Microsoft Entra
In short, we can use a break glass (or emergency access) account to regain access to our Microsoft Cloud environment during critical situations where admin access has been lost or is not possible. Examples of situations are: * Multi-factor authentication server outage. * Mistakes while configuring conditional access policies. * Malicious admin
Quick Guides
Enabling Single Sign-On (SSO) for third-party browsers like Google Chrome and Firefox offers several benefits. Firstly, users won't have to repeatedly authenticate when working from different browsers. However from a security perspective, when SSO is enabled, Microsoft Intune is able to assess the device's
Quick Guides
In this quick and easy guide, I show you how to configure LAPS (Local Administrator Password Solution) with Microsoft Intune. LAPS is a solution which secures the local administrator account on your devices by enforcing password requirements, backing up local admin accounts, and scheduling password rotations. Prerequisites * Platform requirements: Windows
Quick Guides
If you want to grant your users the ability to apply Sensitivity Labels to content, you'll need to create a Sensitivity Label policy. This quick guide will walk you through the steps of configuring the policy and provide some useful information to help you along the way. 1.
Quick Guides
This is a quick little guide on how to enable Sensitivity Labels for containers such as Microsoft 365 groups, SharePoint sites and Microsoft Teams. I hope that these steps can provide clearer guidance then what is provided in the Microsoft documentation. 1. Start the PowerShell or PowerShell ISE application. 2.