Dean Ellerby

At the device and user level, the Intune Company Portal serves as powerful application that allows end users to install approved apps, securely access resources, and stay compliant with organizations policies.  In the modern workplace, ensuring that company-owned devices remain secure and compliant is essential. Without proper oversight, these endpoints can quickly become a conduit for security…

Microsoft Global Secure Access (GSA) offers an integrated, identity-driven approach to securing remote access to applications, file shares and resources, regardless of location, device, or user identity. I didn’t expect we’d see the beginning of the end of traditional VPNs for at least a decade. The ever-present need for on-premises applications, file shares, and resources to…

What are the benefits of a Hybrid Azure AD (Microsoft Entra ID) Join? I hear this question a lot; especially since I’ve published many videos referring to Hybrid Azure AD joins as a bad idea. Synchronizing existing on-premises Active Directory (AD) devices to Entra ID is beneficial, but for new devices, leveraging the security and…

When we consider Microsoft Intune Endpoint Privilege Management as a solution, we have a very real problem that’s being solved. Admin rights. Technical solutions are there to solve a problem, right? Without a problem, a solution is just a gimmick – a token – a gesture, at best. As Bill Gates is said to have…

Second only to Generative AI, cybersecurity is top of mind for organizations across the globe. But with Microsoft’s rapid release approach to cloud-based and cloud-enabled security features, how do you make sure you have the basics covered? In this short guide, we’ll walk through the first 4 steps you should consider when implementing or securing…

Workplace Ninjas UK 2025, scheduled for June 16-17, 2025, at the Edinburgh International Conference Centre (EICC) in Edinburgh, Scotland, is a conference tailored for IT Pros and security experts seeking to deepen their knowledge across Microsoft 365, Intune, ConfigMgr, Microsoft Defender, and the revolutionary AI-powered Microsoft 365 Copilot. This two-day event presents a robust lineup…

Endpoint security plays a vital role in safeguarding enterprise cybersecurity, particularly in the context of remote work scenarios. As the number of endpoints accessing corporate networks rises with the growth of remote work, the need for robust endpoint security becomes increasingly paramount, enabling a secure environment for users on the move. In this article, I…

Implementing identity and access management processes is an effective way to protect sensitive corporate data. It allows organizations to regulate user access and prevent instances of identity theft, data breaches, and unauthorized access to confidential corporate information. In this article, we’ll detail how organizations can significantly minimize their exposure by controlling access privileges with Microsoft…

Microsoft has recently unveiled the Intune Microsoft Store repository integration, which is intended to replace the current Microsoft Store for Business integration with Intune and provide a more consumer-like experience for employees. Microsoft has also released the WinGet Windows Package Manager, which allows IT pros to manage apps and updates through the Microsoft Store repository…

Windows Local Administrator Password Solution (Windows LAPS) is a powerful tool that allows organizations to better manage and protect their local administrator account passwords on Windows devices. This feature is available on Azure Active Directory-joined or Windows Server Active Directory-joined devices. In this article, I will explain how to configure Windows LAPS in an Microsoft…

Both Windows 365 and Azure Virtual Desktop perform a similar function for end users, which is providing access to a Windows desktop. From the IT admin perspective though, they are fundamentally different solutions. In this article, we’ll walk through the major differences between Windows 365 and Azure Virtual Desktop so that you can understand which solution,…

Windows 11 Secured-core configuration lock (config lock) is a new system-level feature on the Windows 11 2022 Update to protect secured-core PCs from unintentional misconfiguration. When enabled, Windows 11 config lock should guarantee that secured-core PCs won’t be affected by configuration drift. In this article, I’ll be detailing how config lock works and how you…