Field notes on Microsoft Intune, Entra ID, security, and the modern workplace.https://www.joeyverlinden.com/enhttps://www.joeyverlinden.com/create-a-dev-drive-automated/https://www.joeyverlinden.com/create-a-dev-drive-automated/Development workloads can be surprisingly storage intensive. Cloning repositories, restoring packages, compiling applications, and continuously generating intermediate files all create significant file-system activity. Therefore, Tue, 20 Oct 2026 00:00:00 GMTIntuneWindows 11https://www.joeyverlinden.com/upgrade-to-windows-11-26h2-via-intune/https://www.joeyverlinden.com/upgrade-to-windows-11-26h2-via-intune/Devices being managed with Intune can be upgraded via a Feature Update policy. The blog shows you how to upgrade to Windows 11 26H2.Wed, 30 Sep 2026 00:00:00 GMTIntuneMicrosoft 365Windows 11https://www.joeyverlinden.com/conditional-access-framework-6/https://www.joeyverlinden.com/conditional-access-framework-6/I few weeks ago (June 11th), I have launched an updated version of my Conditional Access Framework. Version 2026.6.1 includes one updated policy and multipleWed, 29 Jul 2026 00:00:00 GMTEntra IDConditional AccessMFASecurityhttps://www.joeyverlinden.com/conditional-access-visualizer-deployer-tool/https://www.joeyverlinden.com/conditional-access-visualizer-deployer-tool/Conditional Access management is critical, but reviewing and documenting policies in the Entra portal can be slow and fragmented. This web app gives security andWed, 29 Jul 2026 00:00:00 GMTAzureEntra IDConditional AccessMFASecurityhttps://www.joeyverlinden.com/block-access-to-removable-storage-while-allowing-exceptions-device-control-to-the-rescue/https://www.joeyverlinden.com/block-access-to-removable-storage-while-allowing-exceptions-device-control-to-the-rescue/Modern workplaces rely on USB drives, printers, Bluetooth devices, and other peripherals, but these devices can also introduce security risks. Microsoft Defender Device Control helpsTue, 28 Jul 2026 00:00:00 GMTDefenderIntuneSecurityWindows 11https://www.joeyverlinden.com/the-long-awaited-dma-sso-admin-controls/https://www.joeyverlinden.com/the-long-awaited-dma-sso-admin-controls/As part of Microsoft’s compliance with the EU Digital Markets Act (DMA), Windows did change the way how Single Sign-On (SSO) works. Users in theThu, 16 Jul 2026 00:00:00 GMTAVDEntra IDIntuneMFASecurityWindows 11https://www.joeyverlinden.com/conditional-access-framework-5/https://www.joeyverlinden.com/conditional-access-framework-5/Today, I have launched an updated version of my Conditional Access Framework. Version 2026.2.1 includes one updated policy and one new policy designed specifically forFri, 13 Feb 2026 00:00:00 GMTEntra IDConditional AccessMFASecurityhttps://www.joeyverlinden.com/windows-autopatch-implementation-how-to/https://www.joeyverlinden.com/windows-autopatch-implementation-how-to/Everyone has heard of Windows Autopatch, yet I have never gotten around to writing a blog about it. While browsing Reddit today, I came acrossSun, 01 Feb 2026 00:00:00 GMTAutopatchIntuneWindows 11Windows 365https://www.joeyverlinden.com/launch-remote-apps-desktops-automated-via-windows-app/https://www.joeyverlinden.com/launch-remote-apps-desktops-automated-via-windows-app/Since the classic Remote Desktop Client is approaching end-of-life, it’s time to transition to the Windows App for accessing RemoteApps and remote desktops. Microsoft hasMon, 26 Jan 2026 00:00:00 GMTAVDWindows 11Windows 365Windows Apphttps://www.joeyverlinden.com/scheduled-intune-remediations/https://www.joeyverlinden.com/scheduled-intune-remediations/When working with Intune, I ran into a challenge: I needed a way to schedule the execution of a remediation script so it wouldn’t runMon, 24 Nov 2025 00:00:00 GMTIntuneWindows 10Windows 11Windows 365https://www.joeyverlinden.com/automate-user-logon-tasks-for-intune-managed-devices/https://www.joeyverlinden.com/automate-user-logon-tasks-for-intune-managed-devices/Managing device configurations and automating tasks at user logon is a common requirement for IT administrators. To streamline this process, I’ve created a PowerShell scriptThu, 23 Oct 2025 00:00:00 GMTIntuneWindows 11Windows 365https://www.joeyverlinden.com/upgrade-to-windows-11-25h2/https://www.joeyverlinden.com/upgrade-to-windows-11-25h2/Devices being managed with Intune can be upgraded via a Feature Update policy. The blog shows you how to upgrade to Windows 11 23H2.Tue, 30 Sep 2025 00:00:00 GMTIntuneMicrosoft 365Windows 11https://www.joeyverlinden.com/fasten-hybrid-join-avd-intune-deployment/https://www.joeyverlinden.com/fasten-hybrid-join-avd-intune-deployment/Recently we faced a situation that we needed to revert from Entra ID Join back to a Hybrid Azure AD Join, for an AVD environment.Tue, 22 Jul 2025 00:00:00 GMTAVDEntra IDIntunehttps://www.joeyverlinden.com/avd-sessionhost-uptime-threshold/https://www.joeyverlinden.com/avd-sessionhost-uptime-threshold/Managing session host uptime in a 24×7 Azure Virtual Desktop (AVD) environment can be tricky. With users constantly connecting and load balancing spreading sessions across.Wed, 25 Jun 2025 00:00:00 GMTAVDhttps://www.joeyverlinden.com/envoy-lightweight-user-environment-manager/https://www.joeyverlinden.com/envoy-lightweight-user-environment-manager/🛠️ What Is Envoy? Envoy is a lightweight PowerShell-based User Environment Manager (UEM) created for IT admins. Designed primarily for Windows machines managed via MicrosoftTue, 10 Jun 2025 00:00:00 GMTAVDIntuneWindows 11Windows 365https://www.joeyverlinden.com/conditional-access-framework-4/https://www.joeyverlinden.com/conditional-access-framework-4/Today I’ve released a new version of my Conditional Access Framework. Version 2025.2.3 has one modified and one new policy which are meant for internals.Thu, 13 Feb 2025 00:00:00 GMTEntra IDConditional AccessMFASecurityhttps://www.joeyverlinden.com/entra-id-joined-kiosk-or-autologon-device-on-a-budget/https://www.joeyverlinden.com/entra-id-joined-kiosk-or-autologon-device-on-a-budget/Deploying Kiosk devices on modern Windows endpoints can be quite challenging, often leading to issues like start menu glitches, black screens after logon, and autologonWed, 05 Feb 2025 00:00:00 GMTIntuneWindows 11https://www.joeyverlinden.com/conditional-access-framework-3/https://www.joeyverlinden.com/conditional-access-framework-3/Today I’ve released a new version of my Conditional Access Framework. Version 2025.2.2 has some additional policies which are meant for internals admins. In short:Mon, 27 Jan 2025 00:00:00 GMTEntra IDConditional AccessMFASecurityhttps://www.joeyverlinden.com/block-and-whitelist-url/https://www.joeyverlinden.com/block-and-whitelist-url/Recently, I faced a scenario where I needed to restrict access to all URLs while allowing only a few specific ones for certain machines. TheWed, 11 Dec 2024 00:00:00 GMTAVDEdgeIntuneSecurityWindows 10Windows 11Windows 365https://www.joeyverlinden.com/azure-region-capacity-and-azure-virtual-desktop/https://www.joeyverlinden.com/azure-region-capacity-and-azure-virtual-desktop/The demand for cloud resources continues to grow, and even major cloud infrastructures like Microsoft’s Azure occasionally face capacity constraints. Recently, we encountered this firsthandMon, 25 Nov 2024 00:00:00 GMTAVDAzurehttps://www.joeyverlinden.com/how-about-cloud-datacenter-capacity-risk-management/https://www.joeyverlinden.com/how-about-cloud-datacenter-capacity-risk-management/Note: Today’s blog takes a unique direction, written exclusively for CIOs, business owners, decision-makers, and IT managers responsible for business continuity and mitigating risks. WhileMon, 25 Nov 2024 00:00:00 GMTDatacenterhttps://www.joeyverlinden.com/avd-sessionhosts-not-executing-set-time-limit-for-disconnected-sessions/https://www.joeyverlinden.com/avd-sessionhosts-not-executing-set-time-limit-for-disconnected-sessions/This blog is something different than usual. Normally my blog focusses on implementations with step by step context. This time, I’m sharing a story aboutWed, 06 Nov 2024 00:00:00 GMTAVDhttps://www.joeyverlinden.com/upgrade-to-windows-11-24h2/https://www.joeyverlinden.com/upgrade-to-windows-11-24h2/Devices being managed with Intune can be upgraded via a Feature Update policy. The blog shows you how to upgrade to Windows 11 23H2.Tue, 01 Oct 2024 00:00:00 GMTIntuneMicrosoft 365Windows 11https://www.joeyverlinden.com/setup-azure-monitor-for-vms-with-custom-image/https://www.joeyverlinden.com/setup-azure-monitor-for-vms-with-custom-image/A few weeks ago i was configuring Azure Monitor for an environment full of Azure Virtual Desktop machines where a custom image was being used.Mon, 23 Sep 2024 00:00:00 GMTAVDAzureMonitorhttps://www.joeyverlinden.com/conditional-access-framework-2/https://www.joeyverlinden.com/conditional-access-framework-2/Today I’ve released a new version of my Conditional Access Framework. The previous version (2024.4.1) was mostly focused on Windows Modern Workplace environments. Version 2024.6.1Wed, 26 Jun 2024 00:00:00 GMTEntra IDConditional AccessMFASecurityhttps://www.joeyverlinden.com/windows-deployment-with-autopilot-device-preparation/https://www.joeyverlinden.com/windows-deployment-with-autopilot-device-preparation/22 May ’24 was the data that Microsoft announced the next generation of Windows Autopilot (V2). Now this is finally available we can implement andMon, 03 Jun 2024 00:00:00 GMTautopilotIntunehttps://www.joeyverlinden.com/conditional-access-framework/https://www.joeyverlinden.com/conditional-access-framework/Few months ago i decided to redesign my Conditional Access Framework. While reading some docs and blogs for recent changes i found Claus Jespersen hisTue, 16 Apr 2024 00:00:00 GMTEntra IDConditional AccessMFASecurityhttps://www.joeyverlinden.com/manage-fonts-in-outlook-new-via-powershell/https://www.joeyverlinden.com/manage-fonts-in-outlook-new-via-powershell/In the past I’ve created a blog post about managing the default fonts for Outlook. Someone replied to this post asking if this is alsoTue, 09 Apr 2024 00:00:00 GMTMicrosoft 365Office 365https://www.joeyverlinden.com/connect-to-azure-virtual-desktop-via-microsoft-entra-private-access/https://www.joeyverlinden.com/connect-to-azure-virtual-desktop-via-microsoft-entra-private-access/Last year (2023) Microsoft announced Global Secure Access (SSE). This is the unifying term used for both Microsoft Entra Internet Access and Microsoft Entra PrivateMon, 18 Mar 2024 00:00:00 GMTAVDAzureEntra IDGlobal Secure Accesshttps://www.joeyverlinden.com/deploy-the-new-attack-surface-reduction-rules/https://www.joeyverlinden.com/deploy-the-new-attack-surface-reduction-rules/Microsoft recently released two (2) new Attack Surface Reduction rules. These are still in preview but can already be deployed using Intune. Be careful deployingMon, 04 Mar 2024 00:00:00 GMTIntuneSecurityWindows 11https://www.joeyverlinden.com/configure-outlook-new-as-default-mail-app/https://www.joeyverlinden.com/configure-outlook-new-as-default-mail-app/We all know that default apps are a common thing for users. This can be done via Intune for ages already. In the past itTue, 27 Feb 2024 00:00:00 GMTIntuneMicrosoft 365Office 365Windows 10Windows 11https://www.joeyverlinden.com/block-the-microsoft-store-via-intune-windows-11/https://www.joeyverlinden.com/block-the-microsoft-store-via-intune-windows-11/Today’s post is all about blocking the Microsoft store via Intune on Windows 11. To me personally i don’t mind having the store app openThu, 08 Feb 2024 00:00:00 GMTIntuneWindows 11https://www.joeyverlinden.com/offboard-device-via-defender-for-endpoint-api-explorer/https://www.joeyverlinden.com/offboard-device-via-defender-for-endpoint-api-explorer/Have you ever encountered the situation where you need to offboard a device from Defender for Endpoint, but don’t have access to the device? IWed, 24 Jan 2024 00:00:00 GMTATPDefenderSecurityhttps://www.joeyverlinden.com/setup-microsoft-365-backup/https://www.joeyverlinden.com/setup-microsoft-365-backup/Microsoft 365 Backup is finally in public preview! Last night Microsoft announced the public preview via e-mail and i immediately grabbed my notebook to setupFri, 19 Jan 2024 00:00:00 GMTMicrosoft 365https://www.joeyverlinden.com/logon-script-for-intune-managed-devices-start-apps-actions-at-logon/https://www.joeyverlinden.com/logon-script-for-intune-managed-devices-start-apps-actions-at-logon/Last week i came across a post on Reddit. Someone was asking how to launch Edge at user logon. He had a script which wasThu, 18 Jan 2024 00:00:00 GMTIntuneWindows 10Windows 11https://www.joeyverlinden.com/dynamic-rules-for-device-tagging-in-microsoft-defender/https://www.joeyverlinden.com/dynamic-rules-for-device-tagging-in-microsoft-defender/Microsoft announced on 09-01-2024 that Dynamic device tagging rules is now generally available. While using dynamic rules, we can group (tag) devices based on certainWed, 10 Jan 2024 00:00:00 GMTDefenderSecurityhttps://www.joeyverlinden.com/device-compliance-for-your-virtual-machines/https://www.joeyverlinden.com/device-compliance-for-your-virtual-machines/This article describes a simple but effective way to configure Device Compliance policies for Virtual Machines. Probably every admin recognizes the problem of testing IntuneThu, 04 Jan 2024 00:00:00 GMTIntuneWindows 10Windows 11https://www.joeyverlinden.com/shutdown-startup-script-for-intune-devices/https://www.joeyverlinden.com/shutdown-startup-script-for-intune-devices/We all know that startup, shutdown, logon or logoff scripts are not natively available within Intune. I actually don’t know if it’s even supported butTue, 28 Nov 2023 00:00:00 GMTIntuneWindows 10Windows 11https://www.joeyverlinden.com/upgrade-to-windows-11-23h2/https://www.joeyverlinden.com/upgrade-to-windows-11-23h2/Devices being managed with Intune can be upgraded via a Feature Update policy. The blog shows you how to upgrade to Windows 11 23H2.Tue, 31 Oct 2023 00:00:00 GMTIntuneMicrosoft 365Windows 11https://www.joeyverlinden.com/retrieve-newly-created-users-groups-or-apps-and-more-using-mg-graph/https://www.joeyverlinden.com/retrieve-newly-created-users-groups-or-apps-and-more-using-mg-graph/Something slightly different but still useful for some of us. The commands shown below are pretty straight forward to retrieve some information using PowerShell. TheMon, 30 Oct 2023 00:00:00 GMTEntra IDMG Graphhttps://www.joeyverlinden.com/require-mfa-for-microsoft-admin-portals/https://www.joeyverlinden.com/require-mfa-for-microsoft-admin-portals/Microsoft has released (globally available) a new form of Conditional Access (CA) policies. This CA policy requires users to use MFA when accessing admin portals.Tue, 17 Oct 2023 00:00:00 GMTEntra IDConditional AccessMFASecurityhttps://www.joeyverlinden.com/find-expiring-client-secrets-using-graph-api-and-powershell/https://www.joeyverlinden.com/find-expiring-client-secrets-using-graph-api-and-powershell/In the past it was possible to create non-expiring client secrets. When creating a client secret the drop down menu showed the option Never expires.Tue, 01 Aug 2023 00:00:00 GMTAzureEntra IDSecurityhttps://www.joeyverlinden.com/the-snapshot-corresponding-to-the-selected-recovery-point-does-not-exist/https://www.joeyverlinden.com/the-snapshot-corresponding-to-the-selected-recovery-point-does-not-exist/Today a slightly different blog. Normally I blog about implementing stuff in Microsoft 365/Azure AD/Security. This one, is about an issue I encountered last weekTue, 18 Jul 2023 00:00:00 GMTAzureSecurityhttps://www.joeyverlinden.com/protect-handle-users-not-protected-by-mfa/https://www.joeyverlinden.com/protect-handle-users-not-protected-by-mfa/Protecting users and authentications with MFA is one of the most important things to do. Users need to identify their authentications with at least oneWed, 28 Jun 2023 00:00:00 GMTEntra IDConditional AccessMFAMicrosoft 365Office 365Securityhttps://www.joeyverlinden.com/onboard-servers-to-mde-using-dfc/https://www.joeyverlinden.com/onboard-servers-to-mde-using-dfc/In this blog I’ll show you step by step how to onboard Windows Servers (Known in Microsoft Defender for Cloud) to Microsoft Defender for Endpoint.Tue, 02 May 2023 00:00:00 GMTDefenderSecurityhttps://www.joeyverlinden.com/sanction-or-unsanction-with-defender-for-cloud-apps/https://www.joeyverlinden.com/sanction-or-unsanction-with-defender-for-cloud-apps/There might be a scenario where you would like to block (or Allow) specific Cloud Applications/Web Applications. In this blog I pick OpenAI ChatGPT asTue, 18 Apr 2023 00:00:00 GMTDefenderMicrosoft 365Securityhttps://www.joeyverlinden.com/endpoint-analysis-proactive-remediation-community-repository/https://www.joeyverlinden.com/endpoint-analysis-proactive-remediation-community-repository/Proactive Remediations Scripts are an excellent way to counteract problems or to check desired states. The possibilities are almost limitless. So are the ideas. AlongFri, 10 Mar 2023 00:00:00 GMTIntuneMicrosoft 365Windows 10Windows 11Windows 365https://www.joeyverlinden.com/palo-alto-globalprotect-vpn-for-managed-devices/https://www.joeyverlinden.com/palo-alto-globalprotect-vpn-for-managed-devices/While using Conditional Acces, we can require specific requirements for users, devices, apps, countries (locations), device states, etc. This gives us the opportunity to allowFri, 03 Mar 2023 00:00:00 GMTEntra IDConditional AccessSecurityhttps://www.joeyverlinden.com/require-attack-surface-reduction-rules-in-your-custom-compliance-policy/https://www.joeyverlinden.com/require-attack-surface-reduction-rules-in-your-custom-compliance-policy/Intune has great features, why don’t we combine them!? In this post I’ll show you how you can require specific ASR (Attack Surface Reduction Rules)Tue, 07 Feb 2023 00:00:00 GMTDefenderIntuneSecurityWindows 10Windows 11https://www.joeyverlinden.com/protect-office-365-data-on-unmanaged-devices-with-defender-for-cloud-apps/https://www.joeyverlinden.com/protect-office-365-data-on-unmanaged-devices-with-defender-for-cloud-apps/In this blog I’ll show you step by step instructions for data protection on unmanaged devices. We can do this using Microsoft Defender for CloudMon, 02 Jan 2023 00:00:00 GMTDefenderDLPMicrosoft 365Office 365Securityhttps://www.joeyverlinden.com/conditional-access-insights-and-reporting-the-forgotten-feature/https://www.joeyverlinden.com/conditional-access-insights-and-reporting-the-forgotten-feature/While most people rely on Azure AD Sign-in logs, there are some additional features which are worth implementing in your tenant. One of these featuresWed, 07 Dec 2022 00:00:00 GMTEntra IDConditional AccessMFAMicrosoft 365Securityhttps://www.joeyverlinden.com/disable-smtp-authentication-in-exchange-online/https://www.joeyverlinden.com/disable-smtp-authentication-in-exchange-online/The SMTP Authentication protocol (in Exchange Online) is the most attacked (legacy) protocol now a days. This happened since Microsoft is currently disabling all otherWed, 07 Dec 2022 00:00:00 GMTEntra IDMicrosoft 365Office 365Securityhttps://www.joeyverlinden.com/schedule-windows-365-cloud-pc-reboots-with-azure-automation/https://www.joeyverlinden.com/schedule-windows-365-cloud-pc-reboots-with-azure-automation/The idea Since a while I’m testing/playing around with Windows 365 Cloud PC’s. For performance purposes I would like to reboot and/or reprovision Windows 365Tue, 29 Nov 2022 00:00:00 GMTAzureAzure AutomationEntra IDIntuneMicrosoft 365Windows 10Windows 11Windows 365https://www.joeyverlinden.com/require-dynamic-lock-with-custom-compliance-policy/https://www.joeyverlinden.com/require-dynamic-lock-with-custom-compliance-policy/Require dynamic lock as part of your compliance policy using custom compliance policies.Tue, 11 Oct 2022 00:00:00 GMTEntra IDConditional AccessIntuneSecurityWindows 10Windows 11https://www.joeyverlinden.com/upgrade-to-windows-11-22h2/https://www.joeyverlinden.com/upgrade-to-windows-11-22h2/Devices being managed with Endpoint Manager (Intune) can be upgraded via a Feature Update policy. The blog shows you how to upgrade to Windows 11 22H2.Tue, 20 Sep 2022 00:00:00 GMTIntuneMicrosoft 365Windows 11https://www.joeyverlinden.com/what-happens-if-you-lock-out-your-azure-tenant/https://www.joeyverlinden.com/what-happens-if-you-lock-out-your-azure-tenant/Have you ever wondered what to do when you lost admin access to your Tenant? Have u got a panic plan or any idea how to act when there’s absolutely no admin access to your tenant anymore?Tue, 13 Sep 2022 00:00:00 GMTAzureEntra IDConditional AccessCSPMFAMicrosoft 365Securityhttps://www.joeyverlinden.com/csp-failed-to-connect-to-customer-user-account-from-identity-provider-does-not-exist-in-tenant/https://www.joeyverlinden.com/csp-failed-to-connect-to-customer-user-account-from-identity-provider-does-not-exist-in-tenant/Last week I encountered a strange issue while connecting to a customer it’s tenant via CSP (Partner Center). It seemed to start since I’ve migratedThu, 01 Sep 2022 00:00:00 GMTEntra IDConditional AccessCSPSecurityhttps://www.joeyverlinden.com/my-most-used-proactive-remediations/https://www.joeyverlinden.com/my-most-used-proactive-remediations/A list of my most used proactive remediations for intune managed devices.Fri, 26 Aug 2022 00:00:00 GMTDefenderIntuneMicrosoft 365SecurityWindows 10Windows 11https://www.joeyverlinden.com/setup-self-service-password-reset-sspr-with-password-writeback/https://www.joeyverlinden.com/setup-self-service-password-reset-sspr-with-password-writeback/Last week I was scheduled to implement Self Service Password reset for a client. Enabling Self Service Password Reset (SSPR) is not quite difficult butFri, 22 Jul 2022 00:00:00 GMTEntra IDMicrosoft 365Office 365Securityhttps://www.joeyverlinden.com/passwordless-authentication-with-idmelon/https://www.joeyverlinden.com/passwordless-authentication-with-idmelon/A while ago i’ve tested FEITIAN FIDO2 security keys. This time I’m testing Passwordless Authentication with IDmelon for my Azure AD / Office 365 authentications!Mon, 02 May 2022 00:00:00 GMTEntra IDMFAOffice 365Securityhttps://www.joeyverlinden.com/which-user-is-still-using-sms-voice-as-default-mfa-method/https://www.joeyverlinden.com/which-user-is-still-using-sms-voice-as-default-mfa-method/Since a few weeks Azure AD Recommendations is available in preview. While reviewing my recommendations it showed me that some users had used SMS orTue, 22 Mar 2022 00:00:00 GMTEntra IDMFAMicrosoft 365Securityhttps://www.joeyverlinden.com/change-windows-language-with-intune-endpoint-manager/https://www.joeyverlinden.com/change-windows-language-with-intune-endpoint-manager/Note: The Store for Business has been discontinued, making this article no longer applicable in real-world scenarios. By default I always deploy devices with EnglishWed, 02 Mar 2022 00:00:00 GMTIntuneWindows 10Windows 11https://www.joeyverlinden.com/p2s-azure-vpn-gateway-and-azure-vpn-client/https://www.joeyverlinden.com/p2s-azure-vpn-gateway-and-azure-vpn-client/It was Q4 2020 when I was asked to design a new Modern Workspace concept. The customer had no on-premises hardware/resources and wanted us toWed, 26 Jan 2022 00:00:00 GMTAzureEntra IDConditional AccessIntuneMFAMicrosoft 365Securityhttps://www.joeyverlinden.com/useful-dynamic-groups-for-azure-ad/https://www.joeyverlinden.com/useful-dynamic-groups-for-azure-ad/Dynamic Groups are great! They can be used for maintaining device and user groups based on parameters available in Azure AD. Strict management of AzureThu, 20 Jan 2022 00:00:00 GMTEntra IDMicrosoft 365https://www.joeyverlinden.com/disable-defender-antivirus-toast-notifications/https://www.joeyverlinden.com/disable-defender-antivirus-toast-notifications/Today I’ve seen someone asking how to disable the toast notifications. Microsoft released documentation on how to configure it using a GPO. But, what ifTue, 18 Jan 2022 00:00:00 GMTMFAhttps://www.joeyverlinden.com/conditional-access-ca-policies-everyone-should-use-in-azure-ad/https://www.joeyverlinden.com/conditional-access-ca-policies-everyone-should-use-in-azure-ad/If you reached this blog i assume you already know what Conditional Access is and where it’s used for. Therefor we can skip the smoothMon, 17 Jan 2022 00:00:00 GMTConditional AccessMFAMicrosoft 365Securityhttps://www.joeyverlinden.com/bock-edge-extensions-but-allow-specific/https://www.joeyverlinden.com/bock-edge-extensions-but-allow-specific/By default, I always block Edge extensions. Sometimes users really need some extensions to make their work easier or safer. Today I got a callTue, 11 Jan 2022 00:00:00 GMTEdgeIntuneMicrosoft 365https://www.joeyverlinden.com/implementing-and-monitoring-attack-surface-reduction-rules-asr/https://www.joeyverlinden.com/implementing-and-monitoring-attack-surface-reduction-rules-asr/Attack Surface Reduction rules have huge impact on endpoint security in a positive way. Last year I’ve implemented these rules in at least 10 environmentsTue, 11 Jan 2022 00:00:00 GMTDefenderIntuneMicrosoft 365Securityhttps://www.joeyverlinden.com/passwordless-authentication-setup-with-a-security-key/https://www.joeyverlinden.com/passwordless-authentication-setup-with-a-security-key/Passwords, the most common thing to authenticate with for years. Everyone knows about it and/or uses it. Since passwords are a weak security feature, andTue, 04 Jan 2022 00:00:00 GMTConditional AccessIntuneMFAMicrosoft 365Securityhttps://www.joeyverlinden.com/default-fonts-and-styles-for-outlook-via-intune/https://www.joeyverlinden.com/default-fonts-and-styles-for-outlook-via-intune/I might be not the only one who thought it would be simple to configure default fonts and styles for Outlook, via Intune. There’s noWed, 22 Dec 2021 00:00:00 GMTIntuneOffice 365https://www.joeyverlinden.com/deploy-ios-custom-vpp-apps-using-microsoft-intune/https://www.joeyverlinden.com/deploy-ios-custom-vpp-apps-using-microsoft-intune/Deploying iOS Apps from Intune. How can we do that? Well, as always. It’s simple if you know how. Deploying a VPP (Volume Purchased Program)Wed, 22 Dec 2021 00:00:00 GMTIntunehttps://www.joeyverlinden.com/microsoft-defender-for-endpoint-defender-atp-why-it-is-more-than-just-anti-virus/https://www.joeyverlinden.com/microsoft-defender-for-endpoint-defender-atp-why-it-is-more-than-just-anti-virus/In the past I was not really interested in Anti-Virus software. After having completed several Microsoft Defender for Endpoint implementations and migrations for desktops andWed, 22 Dec 2021 00:00:00 GMTATPDefenderSecurityhttps://www.joeyverlinden.com/prevent-accidental-modifications-or-worse-with-azure-locks/https://www.joeyverlinden.com/prevent-accidental-modifications-or-worse-with-azure-locks/Mistakes are being made everywhere and every day. While being an administrator in Azure this could lead to serious issues! Think of removing a resource,Wed, 22 Dec 2021 00:00:00 GMTAzurehttps://www.joeyverlinden.com/why-is-my-windows-hello-logon-reported-single-factor/https://www.joeyverlinden.com/why-is-my-windows-hello-logon-reported-single-factor/The problem Last week I was investigating Azure AD sign-in logs to improve security and multi-factor sign-ins. By filtering all sign-ins to show only single-factorWed, 22 Dec 2021 00:00:00 GMTEntra IDConditional AccessMFA