Introduction In a previous post we have explored how to create a Conditional Access Policy and have set it to Report Only, so we can observe its potential effects before turning it on. Naturally, we would then use 2 tools provided by Microsoft to assess the impact. One of the

Introduction Conditional Access Policies in Azure are typically one of the first layers of security that a tenant will have as they control who signs in, from where, to what, using what IP/Location etc. Defining a good set of CAs can set you way ahead in securing your O365

Introduction In the previous post we saw how to deploy Chrome via Intune. Now, what happens is that generally you are pushing a certain app version, and some users might never use it (say they have a preference for Mozilla Firefox or Edge). If they never start/use these apps,

Introduction In your organization, you might need at some point to centrally deploy apps, if your devices are enrolled in Intune. You may package and deploy a multitude of apps from browsers ; archive/zip managers ; business applications ; media players ; even scripts or drivers. In today's example, we are

Introduction There might come a time when you need to cancel or remove the meetings and events from a mailbox. Maybe the user left the organization (and the mailbox is still around), or maybe someone has an unplanned leave of absence and you need to clean up the meetings they&

Introduction In the event one of your users has been completely removed from Azure AD/Entra ID (including has been removed from the Entra Deleted Users/recycle bin), you are basically in the worst scenario possible, as a restore of the old account (and relationships in Teams, Exchange, One Drive,

Introduction Hello again, and welcome back! We are going to discuss today about a topic that involves security of data at rest. We already know that data in M365 is encrypted, all of the communication channels are encrypted well via SSL or HTTPS, but what about our physical devices? What

Introduction We spoke last time about controlling Windows Updates via Update Rings, you can check that article here - https://www.cloudpersistence.com/can-you-control-windows-updates-with-microsoft-intune-yes-to-a-degree/ This time we are going to discuss Feature Updates which can be found in the same place in Intune: You can use these Feature updates to

Introduction You might be handed a task one day to give access to some people to be able to manage the Calendars of all your room mailboxes, or a subset of them from a specific building. It could be that your board wants all time access to know who booked

Introduction First and foremost I would like to make a clear distinction between Archiving and Retention. They are not the same thing. The terms might be used one instead of another here and there, but they define 2 distinct things. In simple terms, I would define archiving as the move

Introduction Recently I had the need to enable auto-forwarding for one user account and I figured it would be a perfect subject for another post. It is very important to gain control over forwarding, as this can be the most dangerous method in data exfiltration. Users can easily configure auto-forwarding

Introduction With Intune you have the option to control most parts of Windows Updates for Win10/11 devices. It's very useful to gain control over the behavior of Windows Updates. Options The Winodws Updates in Intune have the following sections: * Windows Update Rings * Feature Updates * Quality Updates * Driver

Introduction As the title reads, you might have a request to secure your Windows Devices and you have those devices enrolled in Intune (Endpoint Manager). Well, then you have a very low hanging fruit option, and it's called Security Baseline for Windows. Security Baseline is a group of

Introduction: One concern with data you might have is labeling or applying a pre-configured set of permissions or encryption on documents. Imagine a very confidential file or email slips out of a VP's One Drive to someone not having clearance for that type of information. The problem here

Introduction: You might be in a scenario in which you have 2-300 Distribution Lists in your Exchange Online organization that have been created in the past 5-7-years or so, and you think that most of them are unused. Well, you might be right. Housekeeping? Context: Distribution Lists (DLs, or formerly

Introduction Once you set up your O365 Tenant, time comes to integrate a custom domain. In this article, we'll see in detail how to do that. Office365 is a powerful suite of productivity tools that can help your organization to communicate and collaborate more efficiently. By integrating your