Dean is a Microsoft Security MVP, Microsoft Certified Trainer, and co-organizer at the Workplace Ninjas UK.
Moving from a hybrid IT environment to a fully cloud-based architecture is a transformative journey for many organizations. This shift, driven by evolving business requirements and technological advancements, can unlock new levels of agility, scalability, and efficiency. Why cloud-only makes sense for Microsoft 365 organizations Most organizations running Microsoft Entra ID, Microsoft 365, Intune, and…
Last Update: Oct 15, 2025
Privileged access workstations are used, as the name suggests, with privileged accounts, like users in the Domain Admins group, to manage sensitive resources in your environment such as Active Directory (AD) domain controllers (DCs). If an attacker is able to get access to a privileged account, they can move laterally throughout your network, escalate privileges,…
The dsregcmd command is an important tool for troubleshooting device authentication and registration issues in Microsoft Entra ID. It helps admins figure out if a device is correctly joined to Microsoft Entra ID, hybrid-joined, or domain-joined Active Directory. Running dsregcmd By analyzing the output of dsregcmd /status, IT administrators can diagnose and resolve authentication, compliance, and…
The Windows System Assessment Tool (WinSAT) is a benchmarking tool built into Microsoft Windows, not that you would know it if you went searching for it! The underlying WinSAT commands originally powered the Windows Experience Index (WEI), popular in Windows Vista, and removed with Windows 7. Nevertheless, this powerful disk assessment, memory assessment and CPU…
Windows Autopilot is a cloud-based deployment and provisioning service that simplifies setting up new devices. It ensures devices are configured with the right security policies, settings, and applications the moment the user logs in for the first time. With Windows Autopilot, IT professionals can: The end of device imaging For decades, device provisioning and deployment…
Microsoft Configuration Manager first appeared in 1994 as Microsoft Systems Management Server (SMS), offering tools to centrally manage software distribution and inventory across Windows networks. But is it still the same product today? What is Microsoft Configuration Manager? At its core, Configuration Manager helps organizations deploy applications and apply configuration and security updates to both…
The introduction of iOS web-based device enrollment marked a significant step forward in simplifying how personal devices are managed by Microsoft Intune. As one of two methods now available for enrolling personal iOS devices, the other being the traditional Intune Company Portal app that is obtained from the Apple app store, web-based enrollment offers a faster,…
Last Update: Mar 25, 2025
At its core, Microsoft Intune is a Mobile Device Management (MDM) and Mobile Application Management (MAM) solution. It enables organizations to manage both corporate-owned and personal devices (Bring Your Own Device, or BYOD) in a way that balances security requirements with employee productivity. Intune integrates deeply with the Microsoft ecosystem, including Microsoft Entra ID (formerly…
At the device and user level, the Intune Company Portal serves as powerful application that allows end users to install approved apps, securely access resources, and stay compliant with organizations policies. In the modern workplace, ensuring that company-owned devices remain secure and compliant is essential. Without proper oversight, these endpoints can quickly become a conduit for security…
Microsoft Global Secure Access (GSA) offers an integrated, identity-driven approach to securing remote access to applications, file shares and resources, regardless of location, device, or user identity. I didn’t expect we’d see the beginning of the end of traditional VPNs for at least a decade. The ever-present need for on-premises applications, file shares, and resources to…
When we consider Microsoft Intune Endpoint Privilege Management as a solution, we have a very real problem that’s being solved. Admin rights. Technical solutions are there to solve a problem, right? Without a problem, a solution is just a gimmick – a token – a gesture, at best. As Bill Gates is said to have…
Last Update: Dec 09, 2024
Second only to Generative AI, cybersecurity is top of mind for organizations across the globe. But with Microsoft’s rapid release approach to cloud-based and cloud-enabled security features, how do you make sure you have the basics covered? In this short guide, we’ll walk through the first 4 steps you should consider when implementing or securing…