TL;DR: I’ve published a PowerShell tool that will switch SOA of user accounts. In a hybrid model, you might still be running Active Directory Domain Services on premises, synchronising users into Entra ID with Entra Connect. It works, but it keeps your cloud identity dependent on domain controllers and legacy infrastructure with a very different …
Welcome back to the series. If you missed the first half of my top 10 practical recommendations for real-world Defender for Identity deployments, you can catch up with Part 1 here. In this second part, we’ll pick up where we left off and dive into tips 6–10. The operational refinements that really strengthen visibility, reduce …
Deploying Microsoft Defender for Identity effectively takes more than just installing sensors and watching alerts appear in the portal. The service provides powerful visibility into Active Directory activity, but realizing its full value depends on careful planning, some maintenance, and integration with the broader on-premises Microsoft identity ecosystem. I’ve gathered a set of recommendations that …
Governing external users’ access to Azure resources using Microsoft Entra ID Governance for guests. The other day, I was granting a guest user access to an Azure Subscription in my tenant. The guest in this case is me, but from another account. I do this often when I move Azure Subscriptions from one directory to …
This is a short post about PIM activations for reference purposes. (Because I tend to forget things and refer to my own blogs for reminders) If a user is “eligible” for membership into a group, and that group is “eligible” for an Azure resource role. The user can elevate as a member of the group …
Starting July 16, 2025, Microsoft is rolling out a significant update to how user consent to applications works in Entra ID. If your tenant is still on the original wide-open default consent setting, you will be automatically migrated to a more secure configuration designed to reduce the risk of excessive data exposure. Here’s a quick …
Deploy 14 Entra ID Conditional Access Policies in minutes to enable your Zero Trust security strategy Microsoft 365 and Office 365 advanced deployment guides help you set up and deploy your tenant, apps, and services. They include best practices, security features, collaboration tools, and scripts for faster deployment. You can access these guides in the …
Introduction As an IT administrator, PowerShell has always been my go-to tool for managing Microsoft environments. When I first started working with the Microsoft Graph PowerShell module, I could execute commands successfully, but I soon realized that while I could follow a script, I didn’t fully grasp the fundamentals of authentication and interacting with APIs. …
As organizations increasingly adopt hybrid and cloud-first strategies, managing secure access to resources has become more challenging. Ensuring that only authorized users and devices can access sensitive data, while maintaining flexibility for remote work and mobile users, requires a robust identity and access management (IAM) solution. Microsoft Entra Suite offers a set of tools designed to …
This post is not going to go into the basics of DMARC because there are plenty of resources out there on what DMARC is and how to enforce it. For the purpose of this post, however, I will preface it with saying DMARC is an enhancement on SPF and DKIM email security protocols. I assume …
