How to Restrict M365 PowerShell Access to Managed Devices Using Conditional Access
PowerShell remains one of the most powerful and essential tools for Microsoft 365 administration. However, this immense power inherently…
The Microsoft Zero Trust Assessment Tool
Saw a new tool announcement from the Microsoft Entra team. They’ve launched an 𝐨𝐩𝐞𝐧-𝐬𝐨𝐮𝐫𝐜𝐞 𝐙𝐞𝐫𝐨 𝐓𝐫𝐮𝐬𝐭 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭 𝐭𝐨𝐨𝐥. Basically, a…
How to Add a Connected Organization in Microsoft Entra
When collaborating with external partners, vendors, or clients, providing them access to internal resources, like SharePoint sites or…
Find Device State in Entra ID/Microsoft Defender with PowerShell
We often face a big problem managing devices: Microsoft Defender for Endpoint (MDE) keeps records of old, inactive devices for up to six…
How to Block Authentication Transfer Flow Using Conditional Access Policy
Let’s start with a small story we’ve all been part of (knowingly or not). We all live on multiple devices. We begin a task on the desktop,…
Moving User Management to the Cloud: A Practical Guide to Source of Authority Transfer
As organizations embrace cloud transformation, one critical milestone is shifting user management from on-premises Active Directory to…
Switch to Microsoft 365 Idle Session Timeout – Alternative for Activity-based Timeouts
If you spend a fair amount of time navigating Microsoft 365 like I do, here’s an important update you’ll want to know about early in 2026. For…
Microsoft Entra Adds Agent Sign In Logs and New Attributes
Logs are the first place we run to when something looks suspicious. But traditional logs often leave gaps. You see a few details here and…
Securing Microsoft 365: Lessons from a Privileged Role Administrator Misstep
Even the most carefully managed Microsoft 365 tenant can be compromised by a single overly-powerful role. This story highlights how a simple…
Legacy MFA and SSPR Policies Retirement: Migrate to Authentication Methods
Microsoft is retiring the legacy policies for multifactor authentication (MFA) and self-service password reset (SSPR). Starting September 30,…
How to Test Conditional Access Policies Using What-If API
Conditional Access in Microsoft 365 is one of those things that can either be your best friend or your worst headache! And while most of us…
How to Prepare for Microsoft 365’s Secure by Default Changes in 2025
Yesterday, Microsoft quietly dropped something big—and it’s going to impact every Microsoft 365 tenant starting this July. As part of their…