In this post we will discover how to further harden the security around Windows Hello for Business. We will have a look at that Enhanced Sign-in Security is, when to use it and how to enable it. ❗Make sure to read the full post before starting your testing. What is Enhanced Sign-in Security? I think […]
Windows Hello for Business: Enhanced Sign-in Security Read More »
How to disable WHfB DisablePostLogonProvisioning in Windows 11, using Microsoft Intune Intro Windows 11 is getting better by the minute and the latest additions are here. In this post we will have a look at the new control which will allow us to roll out (allow) Windows Hello for Business without the requirement to actually
Windows 11: WHfB – DisablePostLogonProvisioning Read More »
Remote help is the good ole Quick Assist on steroids. With added security and more possibilities, Remote Help is used to support users through remote control of their devices. Remote Help should be considered and evaluated if your organization is looking for a remote control tool, and the administrator experience is great as it supports
Remote Help – Security hardening Read More »
Intune Suite: Intro Intune is included in most Microsoft 365 subscriptions and allows for device management through Microsoft Intune. The Intune Suite is a separate subscription with additional features to Microsoft Intune. It has been around for a while and more features are being added over time which makes the suite more and more valuable.
Intune Suite: Enterprise App Management Read More »
Bad actors (internal and external) have so far been able to run brute-force attacks against local accounts in the dark, to try to find the correct password. These attacks could be done by having physical access to the device but also by using RDP. But those days are over as the built-in local account lockout
Windows 11: Local account lockout policy Read More »
Policies are used to configure Windows to make each device as usable and secure as possible. For Intune Managed Windows devices, these settings are evaluated during check-in to make sure they are still in the desired state. But, what happens to settings which have been manipulated by a user/administrator/bad actor (configuration drift), and the computer
Windows 11: Config Refresh Read More »
2023-06 quality update comes with some security fixes for supported Windows operating systems. But, one of the fixes is not enabled by default and it is up to us administrators to prepare, test and roll out the fix to our devices. In this case we just need to add a registry value and we will
Fix CVE-2023-32019 the easy way Read More »
Being able to elevate permissions on Windows clients and servers in a secure and controlled way can be a struggle. Pass-the-Hash (PtH) must always be considered, rendering environments where an admin has signed on with domain credentials vulnerable. Using local administrator accounts has been used for a long time and we have seen solutions such
Windows LAPS: More than just a policy Read More »
No admin ever: “Working with printers is the best thing in the world!” Working with printers is just something we need to deal with and moving from Hybrid Azure AD join to Azure AD join usually include a hard time for admins, in-regards to printers. #PrinterNightmare should still be considered and moving away from GPOs
A while back I created a post where we had a look at how to create a white list to allow Microsoft Edge extensions. As most extensions involve some kind of risk it is important to take control to make sure we help our users work as safe as possible. In this post we are
Microsoft Edge – Sidebar Read More »
This website uses cookies. By continuing to use this site, you accept our use of cookies.
