Dean Ellerby

Privileged access workstations are used, as the name suggests, with privileged accounts, like users in the Domain Admins group, to manage sensitive resources in your environment such as Active Directory (AD) domain controllers (DCs). If an attacker is able to get access to a privileged account, they can move laterally throughout your network, escalate privileges,…

The dsregcmd command is an important tool for troubleshooting device authentication and registration issues in Microsoft Entra ID. It helps admins figure out if a device is correctly joined to Microsoft Entra ID, hybrid-joined, or domain-joined Active Directory. Running dsregcmd By analyzing the output of dsregcmd /status, IT administrators can diagnose and resolve authentication, compliance, and…

The Windows System Assessment Tool (WinSAT) is a benchmarking tool built into Microsoft Windows, not that you would know it if you went searching for it! The underlying WinSAT commands originally powered the Windows Experience Index (WEI), popular in Windows Vista, and removed with Windows 7. Nevertheless, this powerful disk assessment, memory assessment and CPU…

Windows Autopilot is a cloud-based deployment and provisioning service that simplifies setting up new devices. It ensures devices are configured with the right security policies, settings, and applications the moment the user logs in for the first time. With Windows Autopilot, IT professionals can: The end of device imaging For decades, device provisioning and deployment…

Microsoft Configuration Manager first appeared in 1994 as Microsoft Systems Management Server (SMS), offering tools to centrally manage software distribution and inventory across Windows networks. But is it still the same product today? What is Microsoft Configuration Manager? At its core, Configuration Manager helps organizations deploy applications and apply configuration and security updates to both…

The introduction of iOS web-based device enrollment marked a significant step forward in simplifying how personal devices are managed by Microsoft Intune. As one of two methods now available for enrolling personal iOS devices, the other being the traditional Intune Company Portal app that is obtained from the Apple app store, web-based enrollment offers a faster,…

At its core, Microsoft Intune is a Mobile Device Management (MDM) and Mobile Application Management (MAM) solution. It enables organizations to manage both corporate-owned and personal devices (Bring Your Own Device, or BYOD) in a way that balances security requirements with employee productivity. Intune integrates deeply with the Microsoft ecosystem, including Microsoft Entra ID (formerly…

At the device and user level, the Intune Company Portal serves as powerful application that allows end users to install approved apps, securely access resources, and stay compliant with organizations policies.  In the modern workplace, ensuring that company-owned devices remain secure and compliant is essential. Without proper oversight, these endpoints can quickly become a conduit for security…

Microsoft Global Secure Access (GSA) offers an integrated, identity-driven approach to securing remote access to applications, file shares and resources, regardless of location, device, or user identity. I didn’t expect we’d see the beginning of the end of traditional VPNs for at least a decade. The ever-present need for on-premises applications, file shares, and resources to…

When we consider Microsoft Intune Endpoint Privilege Management as a solution, we have a very real problem that’s being solved. Admin rights. Technical solutions are there to solve a problem, right? Without a problem, a solution is just a gimmick – a token – a gesture, at best. As Bill Gates is said to have…

Second only to Generative AI, cybersecurity is top of mind for organizations across the globe. But with Microsoft’s rapid release approach to cloud-based and cloud-enabled security features, how do you make sure you have the basics covered? In this short guide, we’ll walk through the first 4 steps you should consider when implementing or securing…

Workplace Ninjas UK 2025, scheduled for June 16-17, 2025, at the Edinburgh International Conference Centre (EICC) in Edinburgh, Scotland, is a conference tailored for IT Pros and security experts seeking to deepen their knowledge across Microsoft 365, Intune, ConfigMgr, Microsoft Defender, and the revolutionary AI-powered Microsoft 365 Copilot. This two-day event presents a robust lineup…