On Friday, the 19th of March, I will speak at the 2103 virtual meetup of the Workplace Ninja User Group Switzerland. During this event which lasts a whole day I’m going to present two sessions. One, together with Erik Loef will be about: “What is this Modern Authentication everyone is talking about?” and the other…
Category: Modern Workplace
A first look at the settings catalog in Microsoft Endpoint Manager
With the 2101 Service Release of Microsoft Intune, released this week (February 1, 2021) Microsoft released a lot of new features. One of those features is the introduction of the settings catalog, which is now in preview. Microsoft describes the settings catalog as: “Settings catalog lists the settings you can configure, and all in one…
February 2021 update of the Azure AD Conditional Access demystified whitepaper and workflow cheat sheet.
I’m proud to announce the February 2021 update of my Conditional Access demystified whitepaper. With this release, we have reached the third iteration of the whitepaper starting with the first one released in August 2019 after writing several blogposts on the subject. In May last year I released the second version containing a lot of…
First look at Access Reviews for guests in all Teams and Microsoft 365 Groups
In January, Microsoft announced that they released a public preview allowing entitled customers to create Azure AD access reviews for guest users across all Microsoft Teams and Microsoft 365 Groups in the organization. By implementing Access Reviews, an identity governance feature you can review members of groups, enterprise applications and roles within your Azure Active…
Demystifying Windows 10 in cloud configuration
On February 2, 2021 Microsoft announced “Windows 10 in cloud configuration”, when reading the title I was immediately interested to find out what that meant. Hence, even Mary Jo Foley wrote an article on the subject: Microsoft makes available Windows 10 ‘in cloud’ configuration settings for IT admins Let’s dive in deeper and see. Microsoft…
Updating your Security baselines in Microsoft Endpoint Manager to a newer version
With the 2101 Service Release of Microsoft Intune, released this week (February 1, 2021) Microsoft released a lot of new features (more on that in other blogposts). One of the important changes in this service release is the fact that the security baselines for Windows 10 and Microsoft Defender for Endpoint (formerly Microsoft Defender ATP)…
Speaking at the Nordic Virtual Summit 2021 about Conditional Access
On Wednesday 10 and Thursday 11 February, several communities (A joint venture by #SGUCSE #SCUGDK #SCUGFI #MMUGNO and #MSEndpointMgr) in the Nordics are organizing the Nordic Virtual Summit. The organizing team consists of well-known community leads: Jan Ketil Skanke, Nicolay Andersen, Jörgen Nilsson, Stefan Schörling, Ronni Pedersen, Panu Saukko, Sandy Zeng and Maurice Daly. You…
Enabling Self Service Password Reset (SSPR) for your Modern Workplace users
On modern workplaces we use authentication techniques provided by Windows Hello for Business, like biometric and PIN. Due to this, user don’t login with their password all the time. Nowadays Microsoft even recommends to not set any password expiration policies because passwords which expire make users select predictable passwords, composed of sequential words and numbers…
My presentation about Conditional Access at the Workplace Ninja User Group München
Yesterday, on Thursday January 21, I presented for the Workplace Ninja User Group München about one of my favorite topics “Conditional Access”. My presentation started right after the presentation of Sandy Zeng who talked about her top features of Endpoint Manager and how they changed over time. My session, titled “Azure AD Conditional Access demystified”…
Announcing #WPNinjasNL Tuesdays Webinar #1, January 19, 2021 featuring Adnan Hendricks
For Today, January 19th we are proud to announce that our own Adnan Hendricks, Microsoft Azure MVP will host a session about: Azure AD Identity Protection. Session abstract: One of the advantages of Microsoft having many customers using its services is that Microsoft can leverage data from those customers and apply some real fancy Machine…
Speaking about Conditional Access at the Workplace Ninja Usergroup München on Thursday January 21st 2021
On Thursday, January 21st 2021 I’m honored to announce that I will be speaking at the Workplace Ninja Usergroup München meetup. The Workplace Ninja User Group München is run by Christian Lehrer, @chri_tea on Twitter and Maren Beuth. The meeting will start at 19:00 Central European Time, click here to find out at what time…
Defining more granularity for your Conditional Access App Enforced Restrictions using Sensitivity Labels
In June this year I wrote an article about: Limit Access to Outlook Web Access, SharePoint Online and OneDrive using Conditional Access App Enforced Restrictions, the article explains how you can use Azure AD Conditional Access to restrict downloading and printing within SharePoint Online/OneDrive and Outlook Web Access (OWA). Within that article we used a…
Designing and building your Microsoft Endpoint Manager/Intune environment for Operations
In my work as a modern workplace consultant, I see a lot of Microsoft Endpoint Manager/Intune environments. Many of these environments have been build based on trial and therefore it lacks structure and overview. Most of the environments have been built from scratch, adding and removing functionality until a point was reached where the solution…
Conditional Access demystified: My recommended default set of policies
In August last year, I published eight articles in a series on Conditional Access, and later once finished I decided to bundle those articles in a paper which are now available on GitHub. You can find version 1.1. of the Conditional Access demystified paper there. You can expect a new version coming soon, since I…
Understanding and governing reauthentication settings in Azure Active Directory
Governing when users receive authentication prompts when authenticating to Azure Active Directory (Azure AD) is depending on more than one setting, on which functionalities are in use and also in which scenario you authenticate (Browser, Modern clients or other). Reauthentication can take place by asking for a single factor, like password, FIDO, the password less…