One of the reasons why I always suggest to clients that they only use Edge is how much more manageable it is – as well from a security point of view. It’s a chromium-based browser anyways! But old habits die hard in some organizations. Luckily, Microsoft does provide a nifty Defender Browser Protection Chrome extension that we…
Ransomware is one of, if not the most, dangerous threat to organizations, and smaller businesses sometimes lack the resources to implement a security solution. Cyber attack threat scenarios have become more complicated than ever. Organizations with limited resources attempt to keep up with the going-ons while ensuring they have a zero-trust security policy that adapts…
Azure Dynamic Groups is a feature that allows you to automatically add users to a deployment group based on certain criteria. This can be useful when you want to ensure that users have the appropriate licenses and permissions to access the resources in the deployment group. To use Azure Dynamic Groups, first you will need…
One of my favorite policies to implement is the User Account Control: Behavior of the elevation prompt for both standard and administrator accounts. I tend to just outright block CMD and powershell for standard users and force an elevation prompt for admins. It’s low hanging fruit, sure, but is generally considered best practice. But what if…
Endpoint USB-block security settings are a critical measure in preventing attacks. Uncontrolled installation of USB devices creates entry points for malware and raises the risk of data theft. Administrators can use Microsoft Intune to prevent end users from installing USB peripherals on their computers. Intune has profiles for various types of devices. IOS/iPadOS, Android, Android…
If you recognize the term Intune then you’re probably not new to the Microsoft Cloud Experience. Now if you’re more familiar with the term Microsoft Endpoint Manager…! No, let’s just stick to Intune for now. That is because Microsoft has a pretty awesome piece of Mobile Device Management (MDM) tech that it uses to manage an organizations’…