Guides and news on Intune, Entra ID, Defender, Exchange Online, Windows and Apple device management.
From the October update, the Security Compliance Toolkit baselines turn on Administrator protection. How to decide with Intune where it goes on.
Two vulnerabilities in PHP allow remote code execution without signing in. Which versions fix them, who is at risk and how the release went wrong.
How I moved soulbit.nl from WordPress to a static site, with AI assistants that write and check posts, and what building, testing and steering it took.
Roll out a Win32 app or a Settings catalog or endpoint security policy for Windows in stages, in rings, with fixed wait times.
Supported Windows devices can trigger a compliance evaluation themselves when the firewall or BitLocker changes. What that means and where to see the status.
On 30 November 2026, MS-102 and the Microsoft 365 Administrator Expert retire. What happens to your certification and why AB-650 is a logical step.
Since August and September 2026, WMIC is gone from Windows 11, version 24H2 and later. How to find scripts that use it and replace them.
With enrollment time grouping, a Mac joins the right Entra group during enrollment, so apps and policies arrive sooner. This is how to set it up.
With a registration campaign, Entra ID asks eligible users for a passkey after their MFA sign-in. This is how you set up that campaign.
Since 27 March 2026, Microsoft no longer supports the Remote Desktop client (MSI) for Azure Virtual Desktop in the public cloud. Switch to Windows App.
Since February 2026, Sysmon is an optional feature of Windows 11, first through a preview update. How to turn it on, configure it and check it.
Microsoft is moving the end of Basic authentication for SMTP AUTH. What changes at the end of 2026 and how to prepare your printers and apps now.
Since December 2025, CVE exceptions in Defender Vulnerability Management are generally available. How to exclude one CVE and what changes then.
With an ESP setting you decide whether a supported Windows 11 device installs security updates during Autopilot setup, under conditions.
Turn on sending from aliases in Exchange Online, add an alias and choose it as the sender in Outlook on the web. Plus addressing is covered too.
Onboard iPhones and iPads into Microsoft Defender for Endpoint with zero-touch through Intune, and use the risk level in compliance and app protection.
How to create an App Protection Policy in Intune for Outlook, Teams and OneDrive on personal iPhones and iPads, without managing the device.
Enroll Apple devices in Intune automatically with Apple Business Manager: the connection, the tokens, the enrollment profile and the user experience.
Use the Require compliant device template so users sign in to your cloud apps only from an enrolled, compliant device.