Security baselines are intended to make it easier to configure security-related settings in Windows or Edge. They are available from Microsoft as Group Policy packages, or they can be configured through the interfaces for mobile device management such as Intune. In my opinion, they are mainly intended for clients who have limited experience with Intune and/or security, i.e.,…
Last time(!), some dastardly devil wrote a Part 1 guide on how to reset your administrator password via the On-Screen Keyboard and despite: It being a handy workaround for forgetful people; and Microsoft treating this as an acceptable risk …it is still pretty stupid. And, so, a colleague of mine asked the blindingly obvious… How do you…
So now that my clickbait title has gotten your attention – let me first say that I am not joking. I did! But what we’re talking about is a throwaway test VM with Windows Server 2022. Naturally I expect anyone reading this blog to have adequate breakglass protocols 😉 But, that said, this tiny annoyance…
In this, my latest and straightest, blog post! We’ll start setting up a Hybrid Active Directory lab environment starting with the whats, whys, hows, and whos (?) of the Active Directory Connect tool! Let’s be honest with ourselves. On-premise set-ups aren’t going away anytime soon and Hybrid is here to stay for the foreseeable future….
The main aim (hey, that rhymed!) is to give a quick introduction to custom profiles via OMA-URIs rather than going all theory heavy. If you’re interested in that, check out some of the other posts on this blog! First of all, by default, all AzureAD devices will have two roles automatically assigned as Device Administrators….
Group Policy Administrative Templates are registry-based policy settings and provide an XML-based structure for defining the display of administrative template policy settings in the Group Policy Editor. Now I know the name of this blog is Thomas’ head in the cloud so why all the focus on on-premise tech? It’s because understanding how these templates…
MDE for Mac currently includes preventive antivirus capabilities and reporting via Microsoft Defender Security Center. The following document regards the latest Public Preview build of MDE. Defender for Endpoint endpoint detection and response capabilities provide advanced attack detections that are near real-time and actionable. Security analysts can prioritize alerts effectively, gain visibility into the full…
I’ve only encountered this twice in my career. The first time was a few years ago when I had just started at an MSP (Managed Service Provider). I’d been tasked with refurbing a laptop and, for the life of me, couldn’t get Windows 10 Pro to install! No matter what I did, Windows 10 Home…
This is a very shallow guide to be read in conjunction with Azure AD Connect: Your first step towards an Hybrid Windows Environment. It was originally part of that post but it started getting a bit long so I decided to throw it into a post of its own. If you’re new to Windows sysadmin’ing and…
One of the reasons why I always suggest to clients that they only use Edge is how much more manageable it is – as well from a security point of view. It’s a chromium-based browser anyways! But old habits die hard in some organizations. Luckily, Microsoft does provide a nifty Defender Browser Protection Chrome extension that we…