App Control for Business – Hope Is Not a Deployment Strategy
Learn how to safely deploy App Control in audit mode, analyze events, document rules, and prepare for enforcement.
Category Intune
Practical Microsoft Intune guidance for admins: device compliance, app protection, security baselines, and conditional access. Written from real-world deployments, not just docs.
Intune Vulnerability Remediation Agent: What It Really Does
Intune's Vulnerability Remediation Agent turns a wall of CVEs into a short
ranked list. Here is the setup, the permissions everyone gets stuck on, and
what it still cannot do.
Find Blocked Kiosk Apps at Scale with Intune Remediations
First, a small confession. I seem to have lucked out these past few years. Customer after customer has handed me enormous fleets of kiosk devices. Somewhere along the way, I actually started to enjoy the puzzle. When you work on…
Don’t Burn the Steak: Entra Passkeys, Shared PCs, and Phishing-Resistant Access
Microsoft Entra passkeys on Shared Windows PCs before serving phishing-resistant access to production.
Stay Tunedin: Why I Built My Own Intune Assignment Dashboard
6,000 groups, zero visibility. So I built a fix.
Happy Little Edge. Securing Windows BYOD with Edge for Business
Secure Windows BYOD access with Edge for Business.
Windows 365 Cloud Apps. Give them the biscuit, not the kitchen
My wife and I recently took a trip to Savannah, Georgia, and let me tell you, that city knows how to do food. We stumbled into this little restaurant, and they brought out a basket of biscuits that genuinely changed…
Prompt Injection is the New Phishing…. Here’s how GSA Can Help
If your org is starting to rely on tools like ChatGPT, Copilot, Claude, or Gemini, you are probably already thinking about data leakage. However, there is another problem that shows up fast. People can “talk” an AI tool into doing…
Kiosk Chaos to Calm. Building Multi-App Assigned Access with Intune
Lock down kiosks. Troubleshoot blocks fast.
AI Agents Are Swarming Your Tenant. How Conditional Access for Agent ID Keeps Them in Check
Taming AI agents with Entra Conditional Access guardrails
Come Fly the Friendly Skies – Edge Password Protection
Edge password protection setup
Flipping Intune Switches – The Secret Sauce to Smarter Endpoint Security
Simplify device compliance with MDE.
Deny, Deny, Deny! A Look at EPM’s Newest Superpower
Intune EPM deny rules
Your Files Called… They want Personal Data Encryption
Setting up Personal Data Encryption.
Bringing Defender for Cloud Apps + Defender for Endpoint Together
Integrate MDCA and MDE to automatically block risky cloud apps.