Archive
CISA's SCuBA project gives you a checklist. A real hardening program needs CIS mapping, licensing notes, setup steps, user-impact warnings, and scripts for every control across all six M365 workloads.
A device lifecycle walkthrough of 16 Intune security controls: enrollment restrictions, compliance enforcement, encryption, patching, app protection, and offboarding, with licensing and setup steps.
Teams Premium launches with GPT-3.5 features at $7 intro pricing, the Microsoft Intune Suite and Plan 2 get a March 1 GA date, Exchange tightens quarantine permissions, and GDAP dates firm up.
Manual app packaging means downloading installers, building IntuneWin files, and redoing it all per update and per tenant. Here are the package managers, Intune features, and tools that end the loop.
Desired state configuration turns M365 baselines from physical checklists into monitored, enforceable standards. We review Microsoft 365 DSC and take an honest look at Simeon Cloud's friendlier take.
Azure AD gains IPv6 support that can break location-based Conditional Access, GDAP milestones shift with an update promised by February 15, cross-tenant sync previews, and Teams retires the wiki.
Most MSPs track KPIs well and set goals poorly. Here is why OKRs close that gap, the five things they buy you, and how Viva Goals brings the whole framework inside Microsoft Teams for $6 per user.
Premiums up 79%, coverage shrinking, questionnaires growing. Here is what the cyber insurance market is telling MSPs, and five predictions for how underwriting changes from 2023 onward.
Intune connects to Winget for store app deployment with auto-updates, legacy CSP incentives end December 31, Teams gains a free Virtual Appointment template, and Microsoft Feed arrives.
Microsoft 365 Lighthouse now bulk-migrates DAP to GDAP with suggested role tiers, reusable templates, and built-in JIT access. How the wizard works and how it compares to CIPP.
A December 2022 proof of concept: a custom Microsoft Teams app that answers user questions with the OpenAI completions API and reads and creates PSA tickets. Architecture, token math, and lessons.
Microsoft sets a February 27, 2023 date to enable Authenticator number matching by default, Teams Premium adds Advanced Virtual Appointments, users can delete chats, and SharePoint URL rename hits GA.
CISA's SCuBA project pairs a free M365 security baseline with ScubaGear, a PowerShell tool that grades your tenant against it. Setup steps, licensing gotchas, and a CIS Controls mapping.
Azure AD P2 auto-remediates risky users; P1 only detects them. This Power Automate flow sweeps every customer tenant for risk detections and opens a PSA ticket the moment a new one lands.
As of November 2022, Intune can schedule macOS updates, defer releases, and enforce minimum OS versions. Here is how to configure update policies, deferrals, and compliance for your Macs.
October 2022 for MSPs: Teams Premium lands at $10/user/month and absorbs existing features, GDAP's DAP removal dates firm up, and Intune previews Endpoint Privilege Management and Chrome OS.
Five Azure AD MFA controls most tenants never touch: number matching, location context, authentication strengths, and two registration reports that catch attacker-added MFA methods.
Field notes from a real GDAP migration: a seven-step checklist, the security group and PIM structure that worked, and answers on customer emails, competencies, Azure access, and distributors.
