Writing
Notes from the work: modern workplace, identity and security, mostly Microsoft. Written when something is worth writing down, not on a schedule.
-
Before you block legacy authentication, find out who still uses it
Blocking legacy auth is a one-click policy and one of the most effective. The click is easy. Knowing what breaks when you click it is the actual work.
-
The two Essential Eight controls everyone underestimates
Application control and patching look like the simple ones on paper. In practice they are where most Essential Eight uplifts stall, and for the same reason.
-
Why your Autopilot devices sit on the Enrollment Status Page
The ESP is where Autopilot goes to die. Nearly every stall comes down to one of five causes, and none of them are mysterious once you know where to look.
-
The Conditional Access exclusions that quietly undo MFA
Most tenants I review have MFA "enforced". Most of them also have a handful of exclusions that mean it isn't. Here is where they hide.