This post revolves around the e-mail concepts for SPF/DKIM and DMARC to increase your e-mail reputation as well as protecting your domain from being misused by others i.e impersonation. We will also go through the tool provided by Valimail to have this monitored, all integrated with your Azure AD for SSO.
LAPS – Local Admin Password Solution, has for a long time been one of those great tools to have in the toolbox when it comes to securing your devices from lateral movement from a potential attacker. And Microsoft LAPS have been around for quite some time already.
This tool was orginally available for deployment to server/desktop devices connected to a traditional domain (on-prem) setup.
This changed as of April 2023, and Microsoft have now introduced Microsoft LAPS (Preview) with support for configuration with Intune, and saving the passwords to Azure AD, giving us – once again – a native LAPS solution to handle the local admin account.
Users are currently experiencing outage to expected functions inside Microsoft Teams. Vital functions inside the apps like the ability to do calls, video, meetings etc, are broken for a random group of users across a multitude of user groups.
Around where I am based the discussion started to show itself at the end of january. Troubleshoothing has been ongoing since then, with limited results to an acualt fix.
The temporary fix have been around rolling back to version 1.4 for users that have experienced the issues. But, as Teams gets updated automatically, this is very temporary.
There has also not been very clear as to why only some users have been affected.
During the last week or so, this has become more clear.
Read on for details and a temporary workaround until this gets resolved
his is another post to deal with one of thelimitations of the various licensing editions of Windows.
To be specific, there are certain features that are only available if you have an Enterprise or Education edition of Windows.
This post beeing around the limitation of controlling the settings around enforcing and controlling the screen saver on devices via intune.
As always, every problem has a solution, or a viable workaround.
When it comes to managing anything within IT, it will always be a good thing to keep things organized, in one way or another. You should also make sure that the way you organize things, is made understandable for others as well (maybe you share the responsibility of management with a group, or may do so in the future).
Make it a habit to creating an organizational model that others can jump in or out of over time, that is logical and understandable by others than yourself. Document the logic/model that is defined, and make sure not to deviate from the actual definition as time goes by.
If you have kept up to date with the many announcements around 365 – spesifically Exchange Online, from Microsoft, you may remember that they announced that end of support for basic authentication were coming to various parts of Exchange Online in 365.
Subscribers of O/M365 should move to using modern authentication, as this is more secure and gives alot of other benefits.
The said date for this change was set to October 13 2020,
If you are running Windows autopilot on devices you may experience issues during enrollment/configuration after the 1903 update.
The issue comes when deploying Windows store apps with autopilot, and you may get faced with the enrollment process giving you an error when it gets to this step.
So, you got licenses for Microsoft Intune, and want to roll out some applications to your devices.
If you are new to this you may be faced with some issues, especially regarding what kind of applications you can publish, and how to do so.
There are numerous formats for applications to manage these days – you got the Windows store applications (appx) from Windows 8>>, Line of business apps in the form of MSI installers, and win32 apps.
I will not go into detail on MSI and Windows store here, as these are rather easy to deploy via the information in the web gui.
Setting up Mulitfactor is an important security task on all externally available services whether its for facebook aswell as services from work. If you are using services inside Microsoft Azure like Office 365 the option exists for everyone, but is not turned on for the users by default. Each user can do this by themselves Read more about User setup guide for Azure MFA on 365/Azure AD account[…]
It’s no secret that Microsoft is doing good when it comes to their subscription-based Office 365 package, it’s also not a secret that this is the preferred way for Microsoft to sell the Office package for their customers, as prices for volume based licensing are on the rise. But why should you opt in to Read more about Why you need Office 365[…]