Category: Security
-
Conditional Access: The Ultimate Inventory Cop
How Rogue Devices Sneak In and How to Throw Them Out The reality is that keeping a current, accurate device inventory in Microsoft Entra ID is a nightmare. Personal devices get registered during a quick Teams login, BYOD endpoints connect without MDM management, stale records sit in the directory years after a laptop was e-wasted,…
-
Your Brand-New Entra ID Joined Devices Hate Your Corporate LAN — Here’s How to Fix It
TL;DR: When you move to pure Entra ID–joined devices, they lose the ability to see traditional Active Directory Domain Controllers. Because Windows Network Location Awareness can’t complete its legacy LDAP domain-authentication handshake, it defaults to the Public firewall profile — blocking inbound management traffic like Ping, RPC, and WMI on your own LAN. The fix…
-
Windows 11 Hotpatching: Because Your Users Will Never Reboot on Purpose
TL;DR Windows 11 Hotpatching is great—if your environment is modern, standardized, and already running clean. It delivers two months of security updates with zero reboots, but it also removes the accidental stability you got from monthly forced restarts. You’ll need Windows 11 24H2, VBS, Secure Boot, TPM 2.0, Entra ID join, Intune, and Autopatch/WUfB before…