Topic
The March 2026 Stryker breach wiped 80,000 devices through one compromised admin and Intune's own remote wipe. Multi Admin Approval, PIM, and break glass governance close that hole.
CloudCapsule's new Manage tier adds Quick Fixes, 100+ policy deployments, a reusable Policy Library, outcome-based Capsules, and Explorer, so multi-tenant M365 remediation happens in one place.
Guest accounts enter Microsoft 365 through deliberate Entra invitations and through everyday file shares that mint identities automatically. The SharePoint B2B integration setting decides which.
Cyber Essentials v3.3 maps cleanly onto Microsoft 365 Business Premium. Entra, Intune, and Defender for Business cover all five technical controls without buying a single new tool.
Strong user MFA means nothing if Global Admins carry the exceptions. This 8-level playbook takes tenant admin security from inventory to PIM, alerts, and quarterly access reviews.
One reused local admin password turns a single infected laptop into a fleet-wide incident. Here is how to deploy Windows LAPS through Intune, step by step.
Windows Autopilot turns 2 to 5 hours of manual device setup into a 30 to 60 minute out-of-box experience nobody in IT touches. Here is the full configuration.
As of September 30, 2025, authentication methods can no longer be managed in Entra's legacy MFA and SSPR policies. Here is the migration path and what breaks.
Five Entra ID settings included in Business Premium close off reconnaissance, password spray, rogue app consent, and token theft. Here is where each one lives and how to enable it.
Microsoft blocks legacy browser auth and requires admin consent by default, Safe Attachments loses Monitor mode, passkey profiles go per-group, and Teams channels learn to thread.
The Australian Essential Eight maps cleanly onto Microsoft 365. Here is the strategy-by-strategy mapping, the licensing each one needs, and which checks you can automate.
Attack Surface Reduction rules block the macros and scripts antivirus misses, and a careless rollout blocks payroll too. The Intune deployment sequence that gets you to Block mode safely.
