App Control for Business – Hope Is Not a Deployment Strategy
Learn how to safely deploy App Control in audit mode, analyze events, document rules, and prepare for enforcement.
Dustin Gullett
Dustin Gullett is a Microsoft MVP focused on Microsoft Security, Intune, Entra ID, and Zero Trust architecture. He writes practical guides for admins deploying Microsoft security tools in the real world.
Microsoft Defender Local AI Agents: Your Endpoints Have Houseguests
Microsoft Defender finds the AI agents quietly occupying your endpoints.
Intune Vulnerability Remediation Agent: What It Really Does
Intune's Vulnerability Remediation Agent turns a wall of CVEs into a short
ranked list. Here is the setup, the permissions everyone gets stuck on, and
what it still cannot do.
Global Secure Access in Sentinel, Part 2: From Dashboards to Detections
Back in March, I showed you how to install the deadbolt: GSA file policies plus Purview DLP, blocking sensitive uploads at the network layer. A deadbolt is great. A deadbolt also has one glaring flaw. It cannot tell you who…
Global Secure Access in Sentinel, Part 1: Logs Are Not a Strategy
Every house has a junk drawer. You know the one. Dead batteries, three takeout menus, a single Allen wrench, and a charger for a phone you sold in 2018. Everything went in because “we might need it later.” Nothing has…
Find Blocked Kiosk Apps at Scale with Intune Remediations
First, a small confession. I seem to have lucked out these past few years. Customer after customer has handed me enormous fleets of kiosk devices. Somewhere along the way, I actually started to enjoy the puzzle. When you work on…
Don’t Burn the Steak: Entra Passkeys, Shared PCs, and Phishing-Resistant Access
Microsoft Entra passkeys on Shared Windows PCs before serving phishing-resistant access to production.
Your Data Has a Back Door. GSA and Purview Are the Deadbolt
GSA and Purview team up to block data leaks
Stay Tunedin: Why I Built My Own Intune Assignment Dashboard
6,000 groups, zero visibility. So I built a fix.
Happy Little Edge. Securing Windows BYOD with Edge for Business
Secure Windows BYOD access with Edge for Business.
Windows 365 Cloud Apps. Give them the biscuit, not the kitchen
My wife and I recently took a trip to Savannah, Georgia, and let me tell you, that city knows how to do food. We stumbled into this little restaurant, and they brought out a basket of biscuits that genuinely changed…
Prompt Injection is the New Phishing…. Here’s how GSA Can Help
If your org is starting to rely on tools like ChatGPT, Copilot, Claude, or Gemini, you are probably already thinking about data leakage. However, there is another problem that shows up fast. People can “talk” an AI tool into doing…
Kiosk Chaos to Calm. Building Multi-App Assigned Access with Intune
Lock down kiosks. Troubleshoot blocks fast.
AI Agents Are Swarming Your Tenant. How Conditional Access for Agent ID Keeps Them in Check
Taming AI agents with Entra Conditional Access guardrails
Global Secure Access and Sentinel Integration…. and brisket?
Connect GSA to Sentinel: see more, guess less.