Articles on cloud security
Licensing, hardening and what we’ve learned in the field.
Microsoft Defender in the MITRE evaluations: why people think its EDR falls short, and what’s true
A low MITRE score doesn’t mean Defender for Endpoint is weak. What the evaluation tests and what it doesn’t, and why real protection comes from ASR, Intune, TVM and one incident view.
Migrating from SentinelOne to Microsoft Defender for Endpoint, the right way
How to move devices from SentinelOne to Defender for Endpoint with the shortest possible gap in protection: an Intune pilot group, removal, checks on every device, and full endpoint hardening.
Detection rules in Defender XDR or Sentinel? Building a rule set from scratch without duplicates or noise
Where each rule should live (custom detections in Defender XDR or Sentinel), how to avoid duplicates, the least-privilege roles to use with PIM, and what the final rule catalog looks like.
Break glass accounts: how not to lock yourself out of Microsoft 365
One wrong Conditional Access policy can lock out the whole organization, admins included. How to set up emergency access accounts under Microsoft’s current guidance, monitor them, and roll out CA in stages.
AI meeting notetakers taking over your organization, and how to take back control
One employee connecting an AI notetaker can bring it into meetings across the whole organization. How it gets in without approval, why it’s risky, and how to regain control in Entra ID and Teams.
Past 300 users on Business Premium? Your options and prices after July 2026
Business Premium is capped at 300 users. What to do from user 301, what changed in Microsoft 365 E3 in July 2026, and how to mix plans without losing protection.
Microsoft Defender Suite for Business Premium: what you get, and who it’s for
The add-on launched as "Microsoft 365 E5 Security" is now Microsoft Defender Suite for Business Premium. What its five components add on top of Business Premium, and when it’s worth the price.
How to save on Microsoft 365 licensing in 2026: 8 checks before you renew
After the July 2026 price and packaging changes, some add-ons you pay for are now included in your plan. Eight checks to run before your next renewal.
Do we still need NAC in a Zero Trust world? It depends on how you use it
NAC and ZTNA don’t replace each other. What NAC still does well, where its old approach no longer works, and what an architecture combining NAC, Intune, Conditional Access and network segmentation looks like.
Forgotten service accounts in Active Directory: how Defender for Identity helps you find and clean them up
A service account nobody uses, with high privileges, is a quiet way in for an attacker. Which Defender for Identity assessments find these accounts, and how to clean them up without breaking a service.
Intune security baselines: how to use them well, and what to do when a new version ships
What Intune security baselines are, which ones exist, and exactly what happens when Microsoft releases a new version such as Windows 11 26H2. Includes a workflow to update without breaking devices.
Microsoft 365 account compromised: what to do in the first hours
An account in your tenant was compromised, or you suspect it was? A practical guide based on Microsoft’s playbooks: how to contain the account, what attackers leave behind, how to find out what was exposed, and when to report.
How to convince management to upgrade to Microsoft 365 Business Premium
What Business Premium includes, the four gaps it closes, and how to give management two real options to choose from.
Microsoft security for organizations on Google Workspace
Enterprise Mobility + Security (EMS) brings Microsoft identity, device management and data protection to organizations that run on Google Workspace.
How to remove local admin rights: a deployment guide for EPM with Admin By Request
How to remove local admin rights without stopping work: pilot, learning mode, pre-approvals, staged removal and a support desk without standing rights, with Admin By Request.
Four myths about implementing EPM, and why they're no longer true
Four fears that keep local admin rights in place: long projects, heavy maintenance, stuck users and developers. Why they no longer hold.
Managing admin rights on Mac with Admin By Request
How to remove standing admin rights from Macs, including developer environments: what Admin By Request does on macOS and what’s new in version 6.0 with Managed sudo.
Intune EPM vs Admin By Request: what's really different
Intune EPM is now included in Microsoft 365 E5. A comparison from the official docs: what it can’t do, what Admin By Request adds, and when Intune is enough.
Web Access Management: full control over what reaches the endpoint from the internet
Admin By Request’s Web Access Management: control downloads, browsing and browsers from the endpoint agent, before a malicious file gets there.
Migrating from Pineapp to Microsoft Defender for Office 365: a practical three-phase guide
How we moved a client from Pineapp to Defender for Office 365 before license renewal: prepare, set up and onboard, including the SCL=-1 rule, ORCA, MX records and printers.
No posts match these filters.