This is the fifth post in a series spotlighting forgotten features (policy) in Microsoft Intune and the broader Microsoft 365 ecosystem. Today, we’re digging into a handy but often ignored capability: pushing custom Microsoft Defender for Endpoint (MDE) device tags…
Every administrator knows the problem of licenses and their allocation. This is often a drama to get a good overview and to review this periodically. I have run into this problem several times and often you end up with ugly…
As a Managed Service Provider (MSP), you enforce device compliance with Intune’s built-in policies: antivirus running, encryption enabled, OS version current. But your customers have unique requirements that are absolute, non-negotiable conditions for their business operations – requirements that Intune’s…
As a Managed Service Provider (MSP), you manage dozens or hundreds of customers across multiple tenants, each with different service tiers, billing models, and compliance requirements. Critical customer context lives in your PSA tool, CRM, or billing system – completely…
Administrative Units in Microsoft Entra ID are one of those features that often fly under the radar – but they can be game-changing for organizations managing large, complex environments. Think of them as your secret weapon for delegating control, scoping policies, and simplifying…
This blog post demonstrates how to securely enforce organizational compliance and gain explicit, auditable user consent before granting access to sensitive cloud applications. While powerful security controls like Multi-Factor Authentication (MFA) and Compliant Devices are standard, configurations often lack the…
As Microsoft 365 environments grow in complexity, maintaining security and compliance becomes increasingly challenging. Maester provides excellent testing capabilities for Microsoft 365 security compliance, but comparing results across different runs, tenants, or time periods often requires manual effort and disparate…
This blog post demonstrates how to securely enable Single Sign-On (SSO) for sensitive enterprise applications. While commonly used for tools like RMM platforms (e.g., NinjaOne, N-Able, Kaseya) or business software (e.g., Informer, SimeonCloud), SSO configurations often grant access without fully…
As developers and scripters, our local Git repositories can quickly become cluttered with old, merged, or orphaned branches. This accumulation not only makes it harder to navigate your local branches but can also lead to confusion about what’s active and…
As someone who’s spent way too much time troubleshooting “it works on my machine” problems, I got tired of the constant friction that comes from inconsistent development environments. You know the drill: colleague shares a PowerShell script that uses a…