More often than not, I see both per-user MFA and Conditional Access MFA enabled in Azure AD tenants. There seems to be a misconception amongst IT admins that by disabling per-user MFA, users will need to re-register their MFA authentication methods. So, admins end up leaving per-user MFA enabled and also creating a Conditional Access […]
Move from per-user MFA to Conditional Access MFA in Azure AD Read More »
This post describes a recent issue I had with BitLocker drive encryption. It started with Hybrid AAD joined devices showing successfully encrypted, but keys are not uploading to Azure AD, and the encryption settings were not really being deployed. Further investigation revealed a strange BitLocker state on most of the machines. If you find yourself in
Before I begin, you should not use Hybrid Azure AD Join unless the organization truly needs it. This was a unique situation where due to a compliance requirement, MDM needed to be implemented in less than a week. There wasn’t time to move to AADJ in the very short term. Therefore, it was decided to
HAADJ devices stuck with pending registration state Read More »
If you’re using AD connect and you’re planning to eliminate Active Directory, you’ll eventually need to remove AD connect and convert all users to cloud managed identities. Azure AD Connect synchronizes your AD identities with Azure AD, giving the users a cloud identity in addition to their on-prem identity. However, AD remains the source of
How to Convert AD Connect Synchronized Users To Cloud Managed Identities Read More »
As organizations continue to expand their remote workforces, those refusing to adopt modern cloud solutions are neglecting tools that enhance mobility and productivity. They’re also putting corporate data at higher risk of compromise by not taking advantage of modern cloud security solutions. It wasn’t that long ago where nearly all employees were reporting to an
This is a quick post, but useful for anyone who has not stamped out basic authentication in their environment. Or perhaps you’ve inherited several new clients, or need to identify this across many clients. In any case, you can always use the manual method of signing into the Azure GUI and filtering sign-in logs, which
Find successful basic authentications quickly with PowerShell Read More »
Microsoft recently brought back the Windows 365 Cloud PC trial, and with limited Windows 365 experience, this was my chance to get some hand-on experience for free. With AVD and Windows 365 really looking like the future of large scale VDI, I wanted to do some benchmarking on the hardware, test RDP Short path for
Win365 Cloud PC review – Benchmarking, RDP Short path, and Mobile device Experience Read More »
If you use Teams as a collaboration tool, you or your clients may have outside businesses they collaborate with. The traditional way to add outside users is to add them as guest users, and then give them permissions to your Teams/Channels. However, what if this is a long term project, you have numerous departments or
