# RK Solutions

> Technical blog by Roy Klooster — Technical Product Manager, Workplace & Compliance at Inforcer, with 8+ years of hands-on M365 experience.

## About

RK Solutions (rksolutions.nl) publishes practitioner-level deep dives into Microsoft 365 administration, security, and automation. Topics include Intune device management, Entra ID identity governance, Conditional Access policies, Microsoft Defender for Endpoint, PowerShell automation with Microsoft Graph, and open-source tooling for MSPs.

All content is written from real deployment experience managing production M365 tenants.

## Author

- Name: Roy Klooster
- Role: Technical Product Manager, Workplace & Compliance @ Inforcer
- Expertise: Microsoft 365, Intune, Entra ID, Conditional Access, Microsoft Defender, PowerShell, Microsoft Graph API
- GitHub: https://github.com/royklo
- LinkedIn: https://linkedin.com/in/roy-klooster/

## Content

### Series: Forgotten Features (Entra ID & Intune)

- [Part 1: Conditional Access Terms of Use](https://rksolutions.nl/posts/forgotten-features-series-part-1-the-legal-gatekeeper-you-arent-using-conditional-access-terms-of-use/): How to enforce legal acceptance as a Conditional Access grant control with full audit trail.
- [Part 2: Administrative Units](https://rksolutions.nl/posts/forgotten-features-series-part-2-the-overlooked-control-layer-administrative-units/): Scoped role delegation in Entra ID using Administrative Units for least-privilege administration.
- [Part 3: Custom Security Attributes](https://rksolutions.nl/posts/forgotten-features-series-part-3-the-metadata-revolution-youre-missing-custom-security-attributes/): Tagging users and groups with custom metadata for dynamic access control and reporting.
- [Part 4: Intune Custom Compliance Policies](https://rksolutions.nl/posts/forgotten-features-series-part-4-beyond-built-in-checks-intune-custom-compliance-policies/): Writing PowerShell-based custom compliance detection scripts for Intune beyond built-in checks.
- [Part 5: Custom MDE Tags via Intune](https://rksolutions.nl/posts/forgotten-features-series-part-5-the-defender-tag-bridge-youre-not-using-custom-mde-tags-via-intune/): Bridging Intune device groups to Defender for Endpoint using custom MDE tags.

### Series: MSP License Ladder

- [#1: The Hunting Gap](https://rksolutions.nl/posts/msp-license-ladder-01-hunting-gap/): Why MSPs need Defender for Endpoint Plan 2 for advanced hunting, with multi-tenant KQL scripts and license cost analysis.
- [#2: The Data Gap](https://rksolutions.nl/posts/msp-license-ladder-02-data-gap/): Where base Purview DLP stops for MSPs, what closing the gap costs, and how to deploy a DLP baseline across a customer base.
- [#3: The Identity Gap](https://rksolutions.nl/posts/msp-license-ladder-03-identity-gap/): Why Entra ID P1 lacks risk-based Conditional Access, PIM, and on-prem visibility, and how Entra ID P2 plus Defender for Identity close it.
- [#4: The Exposure Gap](https://rksolutions.nl/posts/msp-license-ladder-04-exposure-gap/): Measuring exposure after prevention fails - Defender for Office 365 P2 and Defender for Cloud Apps for OAuth consents, shadow IT, and AI app visibility.
- [#5: The Endpoint Gap](https://rksolutions.nl/posts/msp-license-ladder-05-endpoint-gap/): Where Intune Plan 1 stops (endpoint privilege management, third-party patching) and how the Intune Suite closes it, with 2026 licensing changes.
- [#6: The Full Picture](https://rksolutions.nl/posts/msp-license-ladder-06-the-full-picture/): The capstone single-page reference tying together all five gaps, their upgrade paths, and the licensing math behind each step.

### Tools & Modules

- [RKSolutions PowerShell Module](https://rksolutions.nl/posts/rksolutions-powershell-module/): Microsoft Graph reporting module for Intune, Entra ID, and M365 license management.
- [InforcerCommunity Module](https://rksolutions.nl/posts/inforcercommunity-a-powershell-module-for-the-inforcer-api/): Community-built PowerShell module for the Inforcer REST API, enabling multi-tenant M365 automation.
- [InforcerCommunity MCP](https://rksolutions.nl/posts/inforcercommunity-mcp/): Community-built MCP server that connects a locally installed AI assistant (Claude, VS Code, Cursor, Codex) to the Inforcer REST API for plain-language questions about tenant baselines, alignment and policies. Read-only by default.
- [MaesterDiff](https://rksolutions.nl/posts/maesterdiff-because-comparing-maesters-just-got-twice-as-fun/): Tool for comparing Maester security baseline test results across tenants.

### Security & Identity

- [Secure Enterprise Apps via PIM](https://rksolutions.nl/posts/how-to-secure-your-enterprise-application-via-pim/): Step-by-step guide to protecting enterprise application access using Privileged Identity Management.
- [ASR Rules & the ASR Rule Inspector](https://rksolutions.nl/posts/asr-rules-the-importance-of-configuration-and-verifying-with-the-asr-rule-inspector/): Why Attack Surface Reduction rule deployment needs verification, and a PowerShell tool to audit it.
- [Introducing ASR Rule Inspector V2](https://rksolutions.nl/posts/introducing-asr-rule-inspector-v2/): The next iteration of the ASR reporting script, rebuilt from community feedback and feature requests.

### Reports & Scripts

- [Entra ID Admin Roles Report](https://rksolutions.nl/posts/entra-id-admin-roles-report/): PowerShell script to audit all Entra ID admin role assignments across a tenant.
- [M365 License Assignment Report](https://rksolutions.nl/posts/m365-license-assignment-report/): Automated reporting on Microsoft 365 license assignments and usage.
- [Intune Anomalies Report](https://rksolutions.nl/posts/intune-anomalies-report-script/): Script to detect anomalies in Intune device compliance and configuration.
- [Intune Cross-Platform Assignment Filters](https://rksolutions.nl/posts/intune-cross-platform-assignment-filters/): Microsoft Graph accepts an assignment filter from the wrong platform and the Intune portal writes it back, with a read-only detection script.

### Scripts & Tooling

- [Intune Language Packs via Autopilot](https://rksolutions.nl/posts/language-packs-i-just-told-my-computer-to-figure-it-out-apparently-it-did/): Automating Windows language pack provisioning for worldwide Intune/Autopilot device rollouts.
- [Remote Speedtest in CLI](https://rksolutions.nl/posts/remote-speedtest-in-cli-easy-quick-troubleshooting/): Fast command-line network speed testing for remote and server-only troubleshooting scenarios.
- [Everyone Gets the Same Toolbox](https://rksolutions.nl/posts/everyone-gets-the-same-toolbox-powershell-script/): A PowerShell script to standardize developer/admin tooling and eliminate "works on my machine" environment drift.
- [Semi-automated Git Branch Cleanup](https://rksolutions.nl/posts/streamline-your-git-workflow-semi-automated-branch-cleanup-with-powershell/): PowerShell workflow to clean up old, merged, and orphaned local Git branches.

## Links

- Website: https://rksolutions.nl
- RSS Feed: https://rksolutions.nl/feed.xml
- Sitemap: https://rksolutions.nl/sitemap.xml
- License: Content (c) Roy Klooster / RK Solutions. Reuse with attribution to https://rksolutions.nl