The Curious Engineer

Core Infrastructure and Security Blog

2020–2026

828 posts

← 2018–2019

2026 80

October 2026

  1. AKS Pod Scheduling Demystified
  2. Bracing for BlockNtlmv1SSO
  3. Where Does My Microsoft Entra ID Data Reside? Understanding Azure Regions and Data Residency
  4. Check This Out! (CTO!) Guide (October 2026)
  5. Finding the Elusive MDE PUA Audit Events on Linux

September 2026

  1. From Domain Lists to Decisions: Scaling WHOIS Threat Intelligence with MDTI and Microsoft Graph
  2. Updating Purview DLP Sensitive Service Domain Groups with PowerShell
  3. CoreDNS in AKS: service discovery, upstream DNS, and failover
  4. Locking down PAWs internet access when GSA drops
  5. Securing Your Certification Authorities (Practical PKI Part 4)
  6. Check This Out! (CTO!) Guide (September 2026)
  7. TysonPaul
  8. MDATP Linux agent latest release reporting

August 2026

  1. Unified AI Defense: Security Copilot, Project Perception, and MDASH
  2. Check This Out! (CTO!) Guide (August 2026)

July 2026

  1. Securing Enterprise AI Agents with Microsoft Sentinel
  2. Device Code Flow: The Gift That Keeps on Giving — To Attackers
  3. Understanding Microsoft 365 Copilot Risk Surface and Mitigations
  4. Should You Use the New Microsoft Entra Tenant Governance or Azure Lighthouse? (part 3 of 3)
  5. Azure Lighthouse: Bring Your Partner In, Without Letting Their Identities In (part 2 of 3)
  6. Customer Offerings: Solution Optimization for GitHub Copilot
  7. Hunting Local AI Tools on macOS with Microsoft Defender for Endpoint
  8. Check This Out! (CTO!) Guide (July 2026)
  9. When Arc Goes Silent: Turning Visibility Gaps into SOC Action
  10. Azure Database Security Newsletter - July 2026
  11. Turning Azure Policy Signals into Actionable Governance Insights
  12. Windows 365 Boot
  13. Building C# and C++ Apps with GitHub Copilot CLI and Visual Studio 2026

June 2026

  1. Authenticating AWS Workloads to Azure Functions using Workload Identity Federation
  2. Check This Out! (CTO!) Guide (May/June 2026)
  3. Microsoft Security Copilot: AI-Driven Security Operations at Greater Scale
  4. Security Copilot RBAC for Embedded Experience in Unified Security Platform
  5. Automating Daily MDE Compliance Monitoring Across Azure VMs
  6. Analyse Intune Diagnostics Logs with GitHub Copilot
  7. At-Scale Failure Reporting for Azure Update Manager

May 2026

  1. Redefining Security for an AI Driven World
  2. Build a Local Microsoft Sentinel Triage Agent in VS Code (Copilot + MCP)
  3. TLS Certificate Pinning and Best Practices in Azure Open-Source Relational Databases
  4. Check This Out! (CTO!) Guide (April 2026)
  5. Triggering Azure Functions from Blob Storage Using Event Grid
  6. Purpose For Your PKI (Practical PKI Part 3)

April 2026

  1. Hardening OpenClaw on AKS: Mitigating Container Escapes with Kata microVM Isolation
  2. How to Manage RC4 Hardening – Definitive Guide
  3. Extracting and Auditing Azure DevOps Permissions at Scale with PowerShell
  4. Designing Outbound Connectivity for "Private Subnets" in Azure
  5. Strengthening Identity Resilience: A Deep Dive into Microsoft Entra Backup and Recovery
  6. Running multimedia AI models on Container Apps with Serverless GPU (A100 & T4)
  7. Maintaining Azure Public IP Inventory by Retrieving Exact Deleted Public IP Using Activity Logs
  8. Microsoft Defender for Endpoint (MDE) — Custom Role Design for Troubleshooting Mode–Only Access
  9. Customer Offerings: Azure Local - Implementation, Migration, and Management
  10. Customer Offerings: Hyper-V - Implementation, Migration, and Management
  11. Auditing FIDO2 authentication for Windows Sign-in
  12. Azure Database Security Newsletter - April 2026

March 2026

  1. Check This Out! (CTO!) Guide (March 2026)
  2. Implementing Intune RBAC and Scope Tags for Zero Trust and Least Privilege
  3. What Changed in RC4 with the January 2026 Windows Update and Why it is Important
  4. Remove Unnecessary Azure Storage Account Dependencies in VM Diagnostics
  5. Bulk enable Azure Arc Connected Machine Agent Automatic Upgrade (Tag Scoped) with Azure Cloud Shell
  6. Check This Out! (CTO!) Guide (February 2026)
  7. The Nightmare of renewing NDES Enrollment Agent Certificates
  8. The Future of Identity: Self-Service Account Recovery (Preview) in Microsoft Entra
  9. Demystifying the Client Repeatable Feature in Edge

February 2026

  1. Running Text to Image and Text to Video with ComfyUI and Nvidia H100 GPU
  2. Managed Identity on SQL Server On-Prem: The End of Stored Secrets
  3. Windows Hello for Business - Registered Methods and Last-used Method
  4. Check This Out! (CTO!) Guide (January 2026)
  5. Implementing Azure Lighthouse: A Technical Guide for Service Providers and Enterprises (part 1 of 3)
  6. CRL & AIA Publishing Guidance (Practical PKI Part 2)
  7. TLS 1.3 in SQL Server 2025: What It Really Changes for Security

January 2026

  1. Splitting single-tenant Microsoft Defender XDR Sentinel logs in multiple company scenarios
  2. Conditional Access for Agent Identities in Microsoft Entra
  3. “Automating Export of Microsoft Sentinel Analytic Rules mapped to MITRE Tactics & Techniques”
  4. GitHub Copilot + SQL Server: Understanding the Security Analyzer
  5. Determine Defender for Endpoint offboarding state for Linux devices
  6. Run a SQL Query with Azure Arc
  7. Active Directory Hardening Series - Part 8 – Disabling NTLM
  8. Determine Defender for Endpoint offboarding state of Windows machines using PowerShell
  9. Azure Database Security Newsletter - January 2026
  10. Check This Out! (CTO!) Guide (December 2025)
  11. OPNsense Firewall as Network Virtual Appliance (NVA) in Azure

2025 95

December 2025

  1. Understanding Windows Settings URIs and How to Use Them in Enterprise Environments
  2. Automating Windows Server Licensing Benefits with Azure Arc Policy
  3. Empower Your Cloud Identity: How to Convert User SOA from AD to Entra ID
  4. Empower Your Cloud Identity: How to Convert User SOA from AD to Entra ID
  5. Bulk Device Tagging in MDE: PowerShell & API Approach
  6. Check This Out! (CTO!) Guide (November 2025)
  7. Implementing and Managing an ADCS Offline Root Certificate Authority (Practical PKI Part 1)

November 2025

  1. Using the Microsoft Defender for Endpoint Files API to Validate Malware Hashes
  2. MDE for Non‑Persistent VDI — Implementation Guide & Best Practices.
  3. Platform SSO for macOS
  4. Check This Out! (CTO!) Guide (October 2025)
  5. Update Coverage Workbook in Microsoft Defender for Cloud to Include Defender for AI Plan status

October 2025

  1. Using Microsoft Sentinel MCP Server with GitHub Copilot for AI-Powered Threat Hunting
  2. Ollama on HTTPS for SQL Server
  3. Subscription Governance: The Relationships and Dependencies Involved with Managing Subscriptions
  4. Identify Device state in EntraID/Defender with PowerShell
  5. Secure Configuration and Hardening of Active Directory Certificate Services
  6. Automating VMware to Hyper-V Migration with SCVMM
  7. Applying DISA STIG Settings with Microsoft Intune: Overcoming Native Limitations
  8. Check This Out! (CTO!) Guide (September 2025)
  9. Solving Network Connectivity for MDE and MDI
  10. Detecting and Alerting on MDE Sensor Health Transitions Using KQL and Logic Apps
  11. Managing Hotpatching for Azure Arc connected Machines using APIs

September 2025

  1. Optimizing Microsoft Sentinel: Resolving AMA-Induced Syslog & CEF Duplicates
  2. Entra Group Source of Authority CONVERSION: Enabling Cloud-First Identity Management
  3. Check This Out! (CTO!) Guide (August 2025)
  4. Windows 365 Link – Deployment Planning, Setup and Enrollment
  5. Update Entra ID Device Extension Attributes via PowerShell & Create Dynamic Security Groups.

August 2025

  1. Transforming Enterprise AKS: Multi-Tenancy at Scale with Agentic AI and Semantic Kernel
  2. Ingesting .CSV log files from Azure Blob Storage into Microsoft Sentinel
  3. Identify Defender for Endpoint Onboarding Method using PowerShell - Part 2
  4. Using Entra ID Authentication with Arc-Enabled SQL Server in a .NET Windows Forms Application
  5. Gpresult Like Tool For Intune
  6. Issuing Custom Claims Using Directory Extension Attributes in Microsoft Entra ID
  7. Azure App Service Domain module for Terraform
  8. From Healthy to Unhealthy: Alerting on Defender for Cloud Recommendations with Logic Apps
  9. Optimize Azure Log Costs: Split Tables and Use the Auxiliary Tier with DCR
  10. Check This Out! (CTO!) Guide (July 2025)

July 2025

  1. Check This Out! (CTO!) Guide (June 2025)
  2. Determine Onboarding Methods in Defender for Endpoint - Part 1
  3. Microsoft Defender for Endpoint (MDE) Live Response and Performance Script.
  4. Creating Custom Intune Reports with Microsoft Graph API
  5. Securing Kubernetes Applications with Ingress Controller and Content Security Policy

June 2025

  1. Azure Arc and Defender for Servers: Connectivity and Monitoring Script
  2. Enabling Extended Security Updates (ESU) for Windows 10 with Intune
  3. Making the Most of Attack Simulation Training: Dynamic Groups, Automation, and User Education
  4. Best Practices for Investigating Phishing Incidents in Microsoft Defender for Office 365
  5. Introduction to Network Trace Analysis 06: Kerberos it’s AUTH-some!
  6. Check This Out! (CTO!) Guide (May 2025)
  7. Understanding Device Control for macOS in Defender for Endpoint

May 2025

  1. Protect Tier 1. Sleep well at Night.
  2. Demystifying Anomaly Detection in Microsoft Sentinel using KQL
  3. Sentinel-Threat Intelligence Feeds Integration to strengthen Threat Detection & Proactive Hunting.
  4. Migrating BitLocker Recovery Key Management from ConfigMgr to Intune: A Practical Guide
  5. Sentinel Notebook: Guided Hunting - Domain Generation Algorithm (DGA) Detection
  6. Check This Out! (CTO!) Guide (April 2025)
  7. Check This Out! (CTO!) Guide (March 2025)
  8. How to easily apply DISA STIGs with Intune

April 2025

  1. Managing PAC Script Configuration in Microsoft Edge
  2. Configure App-V Server to use HTTPS
  3. How-To Use Graph Object Change Notifications
  4. How to identify Azure resources using default outbound Internet access?
  5. Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key)
  6. Ingest Custom Data into Azure Log Analytics via API Using PowerShell

March 2025

  1. Passwordless Authentication with FIDO2 Security Key for Remote Desktop Connection
  2. Microsoft Entra HR and Inbound Provisioning – World’s Best Boss Edition
  3. Azure Monitor: How To Create Overrides for Log Search Alerts
  4. Life After APP-V Server: Exploring Options for Application Streaming and Delivery
  5. Deprecation of Microsoft Defender Application Guard: Transitioning to Enhanced Security Solutions
  6. Application Control for Business, Schema Definition
  7. How-To Sync EntraID Group Memberships Into Any System
  8. Quick Wins - Custom Images for Windows 365
  9. Check This Out! (CTO!) Guide (Feb 2025)
  10. Active Directory is 25 Years Old. Do You Still Manage It Like It's 1999?
  11. Automate enabling Defender for servers P1 at resource group or individual machines using Tags.
  12. Entra ID SAML Federation with an External Identity Provider

February 2025

  1. Automate MDE Extension Status Checks with PowerShell
  2. Sentinel Notebook: Guided Hunting – Anomalous Process Network Connections
  3. Azure Update Manager – Patching .NET Core
  4. Supporting Users with Remote Help on Personal Devices: Unenrolled Device Scenario
  5. Understanding Windows Server 2012 Extended Security Update Options with Azure Arc
  6. Protecting Workload Identities Using Conditional Access Policy in Entra
  7. Seamless Security: Smartcard Logon from Entra-Only Machines to domain-joined Servers or AVDs
  8. Quickly deploy Azure Arc Enabled Data-Services on Openshift
  9. Deploying Microsoft Defender for Identity
  10. Importing AWS Security Hub Findings into Microsoft Sentinel
  11. End-to-End automation of Onboarding a Virtual Machine to a Defender for servers.
  12. Enhancing Azure DevOps Traceability: Tracking Pipeline-Driven Resource Changes
  13. Leveraging Custom Security Attributes in Conditional Access Policies

January 2025

  1. Ingesting custom application logs Text/JSON file to Microsoft Sentinel
  2. Azure Migrate – Deployment Failure Due to Policy Blocking
  3. Enhancing Security with Entra PIM and Conditional Access Policy using Authentication Context
  4. Active Directory Hardening Series - Part 7 – Implementing Least Privilege
  5. Break the 30,000 Rows Limit with Advanced Hunting API!
  6. Creating a Custom Sentinel GCP WAF /Load balancer Data Connector

2024 68

December 2024

  1. Passkeys Authentication Across Platforms and Devices using Entra ID
  2. Entra ID Continuous Access Evaluation unfold
  3. M.A.D. Day 2024 – Hamburg 15th November 2024 – Recap.
  4. Collect IIS logs from multiple locations into Sentinel Log Analytics Workspace.
  5. Building an Azure Storage Data Integrity Checker with .NET

November 2024

  1. Installing Offline Microsoft Store Apps with Intune for Intune Government Customers
  2. Token Protection by using Microsoft Entra ID.
  3. Configuring total retention period for log analytics workspace tables at scale

October 2024

  1. Active Directory Hardening Series - Part 6 – Enforcing SMB Signing
  2. AI-Powered Customer Success with Semantic Kernel
  3. Demystifying Log Ingestion API
  4. TLS for Sentinel Syslog CEF Data connector(Secure Transfer of logs to Sentinel Log analytics workspa

September 2024

  1. Unmasking DNS Timeouts: The Hidden Culprit in Azure Virtual Networks
  2. How to Create an xPath Filter for a Data Collection Rule
  3. Implementing Governance for your Azure Cloud Using Azure Policy
  4. Active Directory Hardening Series - Part 5 – Enforcing LDAP Channel Binding

August 2024

  1. Easily deploy an Azure Open AI instance with Documents
  2. Save ingestion costs by splitting logs into multiple tables and opting for the basic tier!
  3. Automating Disk Cleanup in Azure Using PowerShell, Azure Resource Graph and LastOwnershipUpdateTime
  4. Switch off Virtual Machines on a schedule using an Azure Tag
  5. How-To Migrate ConfigMgr Apps to Intune Win32Apps

July 2024

  1. Monitoring Microsoft Sentinel Reports with Dashboard Hub & Power BI
  2. Azure Monitor: How To Get Alerts for Disconnected Arc Agents
  3. Azure Monitor: How To Stop Log-search Alerts for Specific Resources
  4. Check This Out! (CTO!) Guide (June 2024)
  5. Microsoft Virtualization Migration Options
  6. Workspace & DCR Transformation Simplified
  7. Introduction to Network Trace Analysis 5: SMB? Sounds good to me!

June 2024

  1. Update on MFA requirements for Azure sign-in
  2. Simplifying Azure Diagnostics with Category Groups and the New Built-In Policies
  3. Dynamically Updating Azure IP Ranges with PowerShell and DevOps
  4. Check This Out! (CTO!) Guide (May 2024)

May 2024

  1. Addressing Common Entra ID Protection Deployment and Maintenance Issues
  2. Microsoft Entra ID Tenant Starters Guide: Understanding Identity Management and Licensing
  3. Check This Out! (CTO!) Guide (April 2024)
  4. Optimizing Cloud Management: Leveraging Azure Update Manager with Pre and Post Events
  5. Enable Zero Touch Enrollment of MDE on macOS devices managed by Microsoft Intune
  6. Microsoft will require MFA for all Azure users
  7. Revisiting Enterprise Policy as Code v10

April 2024

  1. Building Your Own Copilot for Credit Card Selection
  2. Controlling AKS egress using an HTTP Proxy
  3. Active Directory Hardening Series - Part 4 – Enforcing AES for Kerberos
  4. Proxies, proxies everywhere but still no Internet. Overview of the Windows Proxies
  5. Check This Out! (CTO!) Guide (February AND March 2024)
  6. ConfigMgr: Avoiding Remote Management Point Pitfalls
  7. Get Azure Reservations and Savings Plans Insights with the Azure Optimization Engine

March 2024

  1. Securing Monitoring Services
  2. Azure Monitor: Create Dedicated Clusters Using Any Commitment Tier
  3. Archive MDE Data to Event Hubs to ADX
  4. Mastering Azure Cost Optimization - A Comprehensive Guide
  5. Azure PowerShell Tips and Tricks
  6. Optimize Your Azure Costs
  7. Active Directory Hardening Series - Part 3 – Enforcing LDAP Signing

February 2024

  1. Zero Trust: Rapid Offboarding with Intune and Microsoft Entra ID
  2. ConfigMgr Windows Update Compliance Reporting FAQ
  3. Quick, Check It Out Before It's Too Late! Azure Cost Optimization At It's Finest!
  4. Protecting Tier 0 the Modern Way
  5. Check This Out! (CTO!) Guide (January 2024)
  6. Protect unmanaged or 3rd party MDM managed iOS/Android devices with MDE
  7. Test your Patches! A Staged Patching Solution with Azure Update Manager
  8. Monitoring for an Azure Server Going Offline

January 2024

  1. Migrating from the Azure MMA to AMA Agent
  2. Collect Event Ids using Azure Monitor Agent
  3. Zero Touch Enrollment of MDE on iOS/iPadOS devices managed by Intune
  4. ConfigMgr CMG Least Privilege Setup Approach
  5. Intune iOS/iPadOS Management In a Nutshell
  6. Check This Out! (CTO!) Guide (December 2023)
  7. Onboarding Intune Managed iOS User Enrollment Devices to Microsoft Defender for Endpoint

2023 122

December 2023

  1. Check This Out! (CTO!) Guide (November 2023)
  2. Designing Cloud Architecture: Creating Professional Azure Diagrams with PowerPoint
  3. The Twelve Days of Blog-mas: No.12 - Copilot(s) - Your AI Assistant(s)
  4. The Twelve Days of Blog-mas: No.11 - The Kitchen Sink
  5. The Twelve Days of Blog-mas: No.10 - It’s a Multi-Tenant and Cross-Platform World: Part II
  6. The Twelve Days of Blog-mas: No.9 - It’s a Multi-Tenant and Cross-Platform World: Part I
  7. Introduction to Network Trace Analysis 4: DNS (it's always DNS)
  8. The Twelve Days of Blog-mas: No. 8 - The Evolution of Windows Server Management
  9. The Twelve Days of Blog-mas: No. 7 - Architecture Visuals - for Your Reference or Your Own Docs
  10. The Twelve Days of Blog-mas: No. 6 - The Reporting Edition
  11. Switch to the New Defender for Resource Manager Pricing Plan
  12. The Twelve Days of Blog-mas: No.5 - The Endpoint Management Jigsaw
  13. The Twelve Days of Blog-mas: No.4 - Sync Cloud Groups from AAD/Entra ID back to Active Directory

November 2023

  1. The Twelve Days of Blog-mas: No.3 - Windows Local Admin Password Solution (LAPS)
  2. The Twelve Days of Blog-mas: No.2 - Windows Web Sign in and Passwordless
  3. Connecting to Azure Services on the Microsoft Global Network
  4. The Twelve Days of Blog-mas: No.1 - A Creative Use for Intune Remediations
  5. Active Directory Hardening Series - Part 2 – Removing SMBv1
  6. Azure MMA Agent Bulk Removal
  7. Check This Out! (CTO!) Guide (October 2023)
  8. Microsoft Assessments - Milestones

October 2023

  1. Calling Azure Resource APIs from Power Automate Using Graph Explorer
  2. Service Endpoints vs Private Endpoints
  3. Defender Definition Updates with ConfigMgr - Part 2 – How to set it up
  4. Check This Out! (CTO!) Guide (September 2023)
  5. Quick-Start Guide to Azure Private Endpoints with AKS & Storage
  6. Mobile Application Management on Windows 11
  7. Unlocking Azure Secrets: Using Identities for Key Vault Access

September 2023

  1. Azure Firewall Tips from the Field
  2. Infrastructure as Code Testing with Azure Policy
  3. Active Directory Hardening Series - Part 1 – Disabling NTLMv1
  4. Check This Out! (CTO!) Guide (August 2023)
  5. Another Way To Personalize Multiple Thresholds in Log Analytics Alerts
  6. Windows 365 Enterprise – Points of Clarification and PoC Proven Practices
  7. AKS Egress Traffic Demystified
  8. Automating Azure VM Deployment: The Power of PowerApps, SharePoint, Flow and Azure DevOps Pipe

August 2023

  1. Using Automation Runbook Webhooks To Alert on Databricks Status Updates
  2. MDE Device Control – Leveraging Reusable Settings in Intune
  3. Move Backups In Recovery Service Vault From LRS/GRS To ZRS While Not Preserving The Data
  4. Move Backups In Recovery Service Vault From LRS/GRS To ZRS While Preserving The Data
  5. Use PowerShell to Remediate Non-Compliant Policy Definitions
  6. Check This Out! (CTO!) Guide (July 2023)
  7. Do I Need VPN Connectivity for Windows Hello for Business Registration

July 2023

  1. Deploying Microsoft Defender for Servers in Network-Restricted Environments
  2. Q: My laptop stops charging sometimes, what do I do?
  3. Azure Monitor: Gain Observability On Your DHCP Server
  4. Customer Offerings: Continuous Collaboration for DevOps in Teams
  5. Azure Role Assignment Hygiene
  6. Azure Monitor: How To Use Managed Identity with Log Ingestion API
  7. Azure Policy Exemption Validation
  8. Check This Out! (CTO!) Guide (June 2023)
  9. May 2023 Cumulative Update Explained
  10. Immutable Blobs Inside Azure Storage (WORM)

June 2023

  1. Exploring Configuration Manager Automation Fundamentals – Administration Service
  2. Exploring Configuration Manager Automation Fundamentals – PowerShell Cmdlets
  3. Using Resource Locks To Prevent Accidental Changes In Azure
  4. Exploring Configuration Manager Automation Fundamentals – WMI
  5. Exploring Configuration Manager Automation Fundamentals– SMS Provider
  6. Unlocking Insights from Azure Activity Logs with Power BI
  7. Use Azure Functions to Remove Unauthorized Role Assignments
  8. Avoiding Disk Export and VHD Download in Azure
  9. Moving Cloud PC from One Datacenter Region to Another - Summer 2023 Edition
  10. Azure Monitor: Gain Observability Over Guest Users
  11. Check This Out! (CTO!) Guide (May 2023)

May 2023

  1. Tidying Up URLs: Removing Trailing Slashes in Azure Static Web Apps
  2. Cloud Management Gateway - Inbound Rule for Port 8443
  3. Mastering AKS Troubleshooting #3: Kernel view and AKS Observability
  4. Mastering AKS Troubleshooting #2: VNet cross-connectivity and Port resolution
  5. Mastering AKS Troubleshooting #1: Resolving Connectivity and DNS Failures
  6. Unified Update Platform with ConfigMgr – Questions from the Field
  7. Build Reports Faster with Azure Resource Graph
  8. Azure Cost Management Dashboard
  9. Check This Out! (CTO!) Guide (April 2023)
  10. Azure Savings Dashboard
  11. How to Allocate Azure Monitor Logs Ingestion Costs by Resource Tag
  12. Azure Policy Recommended Practices
  13. Kubernetes External DNS for Azure DNS & AKS

April 2023

  1. Using Microsoft Intune for Local Administrator Password Management
  2. Reporting on Azure AD Password Protection
  3. Azure Data Studio - Connections to Azure Government
  4. Azure Monitor: Logs Ingestion API Tips & Tricks
  5. Azure Monitor: Use Dynamic Thresholds in Log Alerts
  6. Bitlocker Is Not Resuming After Reboot Count Has Been Reached
  7. Cost Governance with Azure Policy
  8. Check This Out! (CTO!) Guide (March 2023)
  9. Modernizing Endpoints - Installing CM Client on AADJ Device
  10. Customer Offerings: Well-Architected Cost Optimization Implementation

March 2023

  1. Managing and Optimizing Your Azure Hybrid Benefit Usage (With Tools!)
  2. Migrating from Office 2016\2019 to Microsoft 365 Apps
  3. Change Configuration Manager Site Server OS – Side-by-Side Migration Reference
  4. Change Configuration Manager Site Server OS – High Availability Reference
  5. Change Configuration Manager Site Server OS – In-place Upgrade Reference
  6. Decision Flow to Estimate Pod Spread on AKS
  7. Change Configuration Manager Site Server OS – Disaster Recovery Reference
  8. How To Upgrade/Change the Operating System Which Hosts Microsoft Configuration Manager
  9. Automating Block Blob Backup
  10. Field Tips for AKS Storage Provisioning
  11. Monitoring Storage Replication - Part 2
  12. Enabling Remote Help and Supporting Users with Intune
  13. Check This Out! (CTO!) Guide (February 2023)

February 2023

  1. The Nightmare of Validating Certificate Requests
  2. Group Policy Analytics Framework
  3. Reporting on Storage Account Access Tier Statistics
  4. Monitoring Storage Replication - Part 1
  5. Accessing Microsoft Graph Data with Powershell
  6. Sorry, OneDrive can’t add your folder right now
  7. What is an Azure Load Balancer?
  8. Check This Out! (CTO!) Guide (January 2023)
  9. Introduction to Network Trace Analysis 3: TCP Performance
  10. ConfigMgr Collection Evaluation Analysis The Easy Way
  11. How to Manage Microsoft Defender Policies with Intune on Non-Managed Devices
  12. NetDevOps on Azure

January 2023

  1. Automating Cumbersome Tasks - Disk Snapshots!
  2. How To Automate The Hybrid World Part Two Of Two
  3. Customer Offerings: Vulnerability Management Dashboard: Microsoft Defender for Endpoint
  4. How To Automate The Hybrid World Part One Of Two
  5. Capturing MDE Client Analyzer Results to Azure Log Analytics Workspace
  6. Public and Private AKS Clusters Demystified
  7. How to Manage Microsoft Defender on Windows Server via Intune
  8. Switch to the New Defender for Storage Pricing Plan
  9. Check This Out! (CTO!) Guide (December 2022)
  10. Windows 10 or Windows 11 GPO ADMX – An Update

2022 68

December 2022

  1. Software Installation Using Machine Configuration and Azure Policy
  2. Azure Update Management Windows Update Desired State Configuration
  3. Azure Monitor: Manage Data Access for Your Log Analytics Workspace
  4. Creating MFA Policies with Zero Trust Advanced Deployment Guide in Microsoft 365
  5. Quick Reference: Understanding Azure Reservations vs Savings Plans
  6. Check This Out! (CTO!) Guide (November 2022)

November 2022

  1. Customer Offerings: Well-Architected Cost Optimization Assessment
  2. Moving a Windows 365 Cloud PC From One DC Region to Another - MS Hosted Network
  3. Private Endpoint DNS Resolution with Azure Private Resolver for Multi-Region
  4. Learning Op: Migrate Away From ADFS to Azure AD
  5. How Do I Know If My AD Environment Is Impacted By The November 8th 2022 Patch?
  6. Flexible and Simple Solution to Start and Stop VMs
  7. Azure Monitor: Check and Assess Log Analytics Workspace, Application Insights and Dedicated Cluster
  8. Azure Monitor: Calculating Chargeback to Split Monitoring Costs Across Projects
  9. Check This Out! (CTO!) Guide (October 2022)

October 2022

  1. Create Emergency Access Accounts for Azure AD and Use Log Analytics to Monitor Sign-ins from Them
  2. Estimating Azure Diagnostics Cost
  3. Introduction to Network Trace Analysis 2: Jumping into TCP Connectivity
  4. Internet of PowerShell
  5. Check This Out! (CTO!) Guide (September 2022)
  6. Azure Enterprise Policy as Code – Azure Landing Zones Integration

September 2022

  1. Prepare for Cloud Service Disaster Recovery - Export Key M365 Services Configurations
  2. How To Determine What Devices Are Connecting To a Storage Account
  3. Create Azure Service Health Alerts for All Resource Groups
  4. Azure Enterprise Policy as Code – A New Approach
  5. Check This Out! (CTO!) Guide (August 2022)
  6. Fun with Azure VPN
  7. Upgrading AKS Using REST API

August 2022

  1. Domain Join a Storage Account Leveraging Azure Automation
  2. Q: Who is adding a bunch of DNS records to my environment?
  3. Right Size/Recommend Azure SQL Managed Instance
  4. Modernizing Endpoint Management – Encryption – Part 2
  5. Modernizing Endpoint Management – Encryption - Part 1
  6. CIS Tech Community-Check This Out! (CTO!) Guide (July 2022)
  7. The RC4 Removal Files Part 3 – The “Everything Else” Of It

July 2022

  1. Accessing Key Vault from Another Subscription Over Private Endpoint
  2. Introduction to Network Trace Analysis Part 1: Asking Questions and Collecting Data
  3. Deprovisioning Cloud PCs in Windows 365
  4. Bicep for Terraform Engineers
  5. Accessing Key Vault from Another Subscription Over Public Endpoint

June 2022

  1. CIS Tech Community-Check This Out! (CTO!) Guide (June 2022)
  2. VM Backup Tiering with Azure Automation
  3. Understanding Reprovision & Point-in-Time Restore in Windows 365
  4. Azure DDoS Protection Standard Costs Estimation
  5. Reconcile Tag Names Across Azure
  6. Update Management for Windows on a Windows 365 Cloud PC

May 2022

  1. To AAD Join or Not … That is the Question
  2. Semi-Automate ConfigMgr Firewall Settings
  3. Azure Monitor: Expanding the Out-of-the-Box Observability for your IT Infrastructure
  4. Introduction to Network Trace Analysis Part 0: Laying the Groundwork
  5. Passwordless RDP with Windows Hello for Business

April 2022

  1. Removing Duplicate Device Objects from Configuration Manager with PowerShell
  2. Move Azure VM to a New Virtual Network Subnet Using Terraform
  3. Configure IE Mode in Edge with Microsoft Endpoint (Intune)
  4. A Starting Point for Monitoring Azure

March 2022

  1. A Light Overview of Microsoft Security Products
  2. When Is True Not Equal To True?
  3. Seamless Onboarding Cloud Native Win10 PCs to MDE Using MEM
  4. Defender Definition Updates with ConfigMgr - Part 1 - Learnings from the Field

February 2022

  1. Quickly Estimate Replication Time for Azure Migrate Virtual Machines
  2. Secrets from the Deep – The DNS Analytical Log – Part 5
  3. How to Find Azure Resources with Public IP Addresses
  4. Private AKS and ACR Using Private Endpoint – Part 2/2

January 2022

  1. Private AKS and ACR Using Private Endpoint – Part 1/2
  2. Azure Identities and Roles Governance Dashboard At Your Fingertips
  3. Windows 10 or Windows 11 GPO ADMX - Which One To Use For Your Central Store?
  4. Azure Monitor: Audit Your Azure and Non-Azure SQL Server
  5. How to Remote Assist Autopilot Deployments with Quick Assist

2021 107

December 2021

  1. Recurring Active Directory Checks
  2. Azure Update Management (Log Analytics Agents & Automation Accounts)
  3. Forward On-Premises Windows Security Event Logs to Microsoft Sentinel
  4. Azure Virtual Desktop, ADFS SSO | The Case of the Trailing Slash
  5. Using Azure Bicep to Deploy SQL MI into an Existing Virtual Network
  6. PowerApp Meets MECM: Modern Software Deployment

November 2021

  1. Simple and Central Azure Virtual Network Management Using the New Azure Virtual Network Manager
  2. Use Azure Logic Apps to Notify of Pending AAD Application Client Secrets and Certificate Expirations
  3. Fixing Mobile Devices in Non-Compliant Status – MEM
  4. Application Guard Deployment by MECM
  5. How to Retrieve an Azure AD Bulk Token with PowerShell
  6. Azure Policy Guest Configuration – Using Tags for Configuration of Features

October 2021

  1. SQL Server 2019 PolyBase feature High Availability
  2. Microsoft 365 Password Expiration Notification Email Solution for On-Premises AD Accounts
  3. NDES Security Best Practices

September 2021

  1. How Do I Install Windows Supplemental Fonts on Windows 10?
  2. Azure Monitor - OMI Vulnerabilities Rapid Check Workbook
  3. Parsing JSON with PowerShell
  4. Alert Based on Log to Metrics Feature on Azure Monitor
  5. Azure & Desired State Configuration Part 4/4

August 2021

  1. Azure & Desired State Configuration Part 3/4
  2. Azure & Desired State Configuration Part 2/4
  3. Azure AD Sign-in Logs + Workbooks = Know Who is Using Windows Hello for Business
  4. Azure & Desired State Configuration Part 1/4
  5. AD FS to Azure AD Migrations: Notes from the Field
  6. Disassemble Powershell Commandlets
  7. Azure Arc: How To Update Arc Agent Using Azure Automation

July 2021

  1. Azure Kubernetes Services - Start & Stop Your AKS Cluster on Schedule using Azure Automation
  2. Azure File Sync Switching Server Endpoint on Existing Server
  3. LOG SENSOR AND TELEMETRY SERVICES IN ISOLATED NETWORK
  4. Register the Azure AD Connect Health for ADDS Agent via Service Principal
  5. Azure Sentinel – How to Audit Management Groups
  6. Kubernetes Nodepools Explained
  7. Azure Monitor - Restrict Log Analytics Query Results to Business Days and Business Hours
  8. Azure Monitor - Alert Notification via Teams
  9. Diagnosing Network Isolation Issues

June 2021

  1. The Case of Azure AD Quota Exhaustion
  2. Intune - Enrollment Options for End-Entity Certificates
  3. DEPLOYING WINDOWS 10 APPLICATION CONTROL POLICY
  4. TLS and SQL Server Reporting Services: An Interesting Interaction
  5. Part 2 - You Might Want to Audit Your LAPS Permissions....
  6. Software Installation Using Azure Policy State Change Events
  7. Windows 10 - All Things About Application Guard
  8. How-To: Automated Company-Wide IP Blocking via Azure Firewall and Azure Functions
  9. STIGing Made Easy - Microsoft Endpoint Manager
  10. Azure Web App for Containers: Pulling a Container Image from ACR Without Exposing Credentials
  11. How-To: Deploy Microservice Application with Secrets Store CSI Driver Using Helm Chart
  12. Use Power Automate to Notify of Upcoming Azure AD App Client Secrets and Certificate Expirations

May 2021

  1. FAQs from the Field on KRBTGT Reset
  2. Multi-Tenant B2B Sync with MIM Graph Connector
  3. Microsoft Endpoint Manager and Delivery Optimization
  4. How To Detect Changes In MECM Environments
  5. Running PowerShell Against All Azure Subscriptions
  6. Redirecting Known Folders to OneDrive for Business with MEMCM
  7. WINDOWS 10 CONTROLLED FOLDER ACCESS EVENT SEARCH
  8. Set Your Alert State Using Azure Automation

April 2021

  1. Finding a Process Which Sporadically Locks the Workstation
  2. Azure Network Security Hygiene with Traffic Analytics
  3. You Might Want to Audit Your LAPS Permissions....
  4. CSI: Redmond - Episode 1 “Mistaken Identity”
  5. Hybrid Identity: Getting Users Aligned
  6. How-To: Deploy Microservice Application with Pod Identity Using Helm Chart
  7. Azure Files: Single Forest Multiple Domain Setup Troubleshooting
  8. Exploring Anomalies with Log Analytics using KQL

March 2021

  1. HOW-TO: Deploy AKS with POD Managed Identity and CSI using Terraform and Azure Pipeline
  2. Create Your Own Custom Endpoint Administration Console Using Microsoft Power Apps
  3. Why Hyper-V Live Migrations Fail with 0x8009030E
  4. Infrastructure + Security: Noteworthy News (March, 2021)
  5. Attack Surface Reduction Rules - Warn Mode with MEM/M365 Defender
  6. Microsoft 365 Defender – Investigating an Incident
  7. Azure REST API through Logic App
  8. Microsoft Defender for Endpoint – Red Hat Linux Manual Deployment
  9. MBAM Server Migration To Microsoft Endpoint Manager
  10. MEM - All Things About USB Drive Management and Troubleshooting
  11. Microsoft 365 Defender Incident Overview
  12. Customer Offerings:Device Protection w/ Microsoft Endpoint Manager & Microsoft Defender for Endpoint

February 2021

  1. Enable Application Setups to Change File Type Associations
  2. New Resource Reporting
  3. Augmenting Azure Advisor Cost Recommendations for Automated Continuous Optimization – Part 2
  4. Importance of Browser Updates and Browser Based Security Controls
  5. Upload Custom Linux Hyper-V Image for Gen 2 VM in Azure
  6. MECM: How Site Maintenance Tasks Can Make Your Life Much Easier
  7. MDE Antivirus Configuration Common Mistakes and Best Practice
  8. Enhanced Audit Status Message Queries
  9. All Things Migration from Internet Explorer to Edge Chromium
  10. MEM - Managing CM Collection in the Cloud Configuration and Troubleshooting
  11. Configuration Manager Current Branch Antivirus Exclusions
  12. Azure AD: Custom Application Consent Policies
  13. Network Security Group Monitoring
  14. Microsoft Defender Application Guard for Office
  15. ConfigMgr Bitlocker Management
  16. Dynamic ARM Templates with Copy Variable

January 2021

  1. The Poky Little DHCP Server and Finding DORA
  2. Staying on top of Microsoft 365 Updates
  3. How to Remove at Scale the Azure Diagnostics Extension and its Storage Data
  4. Deep Dive How To Debug Syslog Ingestion for Sentinel and Log Analytics
  5. Secure Application Lifecycle - Part 3 - Azure Sentinel
  6. Microsoft Defender for Endpoint Adding Tags for Multiple Devices from CSV List
  7. Secrets from the Deep – The DNS Analytical Log – Part 4
  8. Secure Application Lifecycle - Part 2- Secure DevOps Kit for Azure (AzSK)
  9. Windows Defender SmartScreen - File and Flash Player Blockage Problem
  10. Configuration Manager - Collect Client Logs
  11. Orphaned Start Menu Apps Workaround
  12. Introduction to Microsoft Azure Government Secret
  13. Preparing to Manage Windows Virtual Desktops (WVD)
  14. Troubleshooting Third Party Updates in MEM CM Hierarchy
  15. Detecting Azure Cost Anomalies

2020 288

December 2020

  1. Managing Hybrid Runbook Worker At Scale
  2. Monitoring for Azure Subscription Creation
  3. Microsoft Defender for Endpoint Upgrade Readiness MacOS Big Sur
  4. The Mysterious Case of the Self-Moving FSMO Roles
  5. Have Your Company's Systems Passed All Security Tests?
  6. Secrets from the Deep – The DNS Analytical Log – Part 3
  7. WAC-Active Directory Trust Not Established or Broken. …
  8. HOW TO AUTHOR SCCM REPORTS LIKE A SUPERHERO
  9. Secure Application Lifecycle - Part 1 - Using CredScan
  10. Always Encrypted Data Displayed in SSRS with a gMSA
  11. MEM - Endpoint Analytics Setup Operation and Troubleshooting
  12. Network Controller Update Is In Progress…All Operations Are Blocked At The Moment…
  13. Microsoft Secure Score Across the Microsoft Security Stack
  14. MEM – Windows 10 Kiosk Troubleshooting Common Problems

November 2020

  1. MSIX – Batch Conversion of Your App-V 5 Packages
  2. Microsoft Endpoint DLP Lightning-Round
  3. Are Your IaaS Domain Controllers Secured in Azure?
  4. Demystifying Ransomware Attacks Against Microsoft Defender Solution
  5. MSIX – Using the Bulk Conversion Scripts
  6. MEM - Demystifying Edge Legacy and Edge Chromium Profiles
  7. Secrets from the Deep – The DNS Analytical Log – Part 2
  8. Azure SQL with Managed Service Identity Sandbox
  9. Making Azure Data Explorer Queries More Efficient – Part 2
  10. Secrets from the Deep – The DNS Analytical Log – Part 1
  11. Infrastructure + Security: Noteworthy News (October, 2020)
  12. Automating Continuous Optimization with the Azure Optimization Engine
  13. Domain Could Not Be Contacted…On SDN Virtual Network…It’s Not Your DNS
  14. Microsoft Endpoint Manager: Enable Endpoint Protection
  15. Why Is It So Ridiculously Slow To Remove My Query Resolution Policies!?
  16. Using Runbooks to Set Azure Alerts Status

October 2020

  1. Microsoft Defender for Identity - Azure ATP Daily Operation
  2. Azure File Share: Integrating DFS-N with AD DS Over SMB
  3. Configuring Delta Imports Using the MIM 2016 Microsoft Generic SQL Connector – Watermark Method
  4. Conditional Access Adoption
  5. Microsoft Defender for Endpoint Commonly Used Queries and Examples
  6. Maintain Your Microsoft Monitoring Agent Up To Date With Azure Automation
  7. MCM: Core Active Directory Internals
  8. How To Flush Microsoft Monitoring Agent Cache Using Azure Automation
  9. Dharma Ransomware: Recovery and Preventative Measures
  10. Microsoft Endpoint Manager – WIN 10 Auto Enrollment
  11. How to Automate a PKI Configuration for an Existing Azure VM in Microsoft Azure
  12. Making Log Analytics Queries More Efficient – Part 1
  13. The Case of a Compromised Exchange Online User
  14. Infrastructure + Security: Noteworthy News (September, 2020)
  15. Microsoft Defender for Endpoint - MD ATP Daily Operation – Part 2

September 2020

  1. Using SharePoint Online CSOM to Capture Versions of Document Sets
  2. Azure File Sync: Replacing Existing Server Endpoints
  3. How To Scale Apps On Kubernetes
  4. Manage USB Devices on Windows Hosts
  5. Azure File Sync: Integration with DFS Namespaces
  6. Microsoft Defender for Identity - Azure ATP Deployment and Troubleshooting
  7. Upload Custom Windows Hyper-V Image for Gen 2 VM in Azure
  8. Do I Have Weak Passwords In My Organization...?
  9. Troubleshooting Windows 10 Update for Business by Using Azure Update Compliance and Log Analytics
  10. Infrastructure + Security: Noteworthy News (August, 2020)
  11. Use a Custom Automation Account for Azure to Azure Site Recovery Mobility Service Updates
  12. Decrypting the Selection of Supported Kerberos Encryption Types
  13. Giving Specific Analysts Access to Specific Azure Sentinel Playbooks

August 2020

  1. Sharing Microsoft Sentinel Workbook Data with Someone Outside the SIEM
  2. Trying Out Autopilot Hybrid Join Over VPN In Your Azure Lab
  3. The Short and Sweet for Remote Work: Cached Passwords and Device Provisioning
  4. Microsoft Defender ATP: Remediate Apps Using MEM
  5. Gaining Trust in Your SCCM Console Monitoring
  6. Azure Policy Remediation with Deployment Scripts
  7. Quickly Setting Up a Sandbox with Azure SQL DB/MI and AAD Synchronization
  8. Understanding ConfigMgr Software Inventory Throttling
  9. Microsoft Defender ATP: Web Content Filtering
  10. ConfigMgr Performance Baseline the Easy Way
  11. Microsoft Defender for Endpoint Linux - Configuration and Operation Command List
  12. Risky Business in Azure AD…
  13. How the Microsoft Mission Critical Team Helped Secure AAD
  14. Microsoft Defender for Endpoint - MD ATP Daily Operation - Part 1
  15. Deploying Microsoft Defender for Endpoint on Linux Servers.

July 2020

  1. Turn Off "Automatically Dismiss Lock Screen When Face is Recognized" At Scale
  2. Augmenting Azure Advisor Cost Recommendations for Automated Continuous Optimization – Part 3
  3. Azure Sentinel: Ensuring Internet-blocked Azure VMs Can Still Connect
  4. Customer Offerings: Modern Workplace Threat Protection
  5. Using Azure AD App and Certificate with Office 365 CLI in Azure DevOps for SPFx
  6. Infrastructure + Security: Noteworthy News (July, 2020)
  7. Why is Update Installation Failing: Eliminating the Usual Suspects
  8. Backup Compression, TDE, and MaxTransferSize
  9. Microsoft Endpoint Manager: Create & Audit an ASR Policy
  10. Customer Offerings: Power BI Assessment
  11. ClaimsXRay in AzureAD with Directory Extension
  12. Customer Offerings: An Introduction to Power BI Related Offerings
  13. Customer Offerings: WorkshopPLUS Azure Security Best Practices
  14. Getting Started with Testing Infrastructure Code

June 2020

  1. Protect and Secure Cloud-based Applications using Azure MFA
  2. Are You Ready for Cloud Only?
  3. Endpoint Configuration Manager - Site Server High Availability
  4. Microsoft Endpoint Manager - Creating a MDAV Policy
  5. Add Customized Images for Video in Teams and the Added Security
  6. Tagging Azure Resources with a Creator
  7. Azure Kubernetes Service Cluster Capacity Planning
  8. Infrastructure + Security: Noteworthy News (June, 2020)
  9. Network Policy in Kubernetes using Calico
  10. Configure Selective Password Synchronization With AADConnect
  11. Configuration Manager Phased Deployments with PowerShell
  12. “Why are my users not prompted for MFA as expected?”
  13. Azure Log Analytics - Data Retention By Type in Real Life
  14. Domain Time Synchronization in the Age of Working from Home
  15. How-to: Password-less FIDO2 Security Key Sign-in to Windows 10 HAADJ Devices
  16. Quick Start with Azure Resources Graph and Python API

May 2020

  1. Infrastructure + Security: Noteworthy News (May, 2020)
  2. One of the Ways of Planning Certificate Authority Lifecycle
  3. Mastering Configuration Manager Patch Compliance Reporting
  4. Updating Configuration Manager in Offline Mode with the Service Connection Tool
  5. Preventing Leaked Azure Secrets in GitHub!
  6. Tracking the Source of ADFS Account Lockouts
  7. A Journey to Holistic Cloud Protection with the Microsoft 365 Security Stack Pt 6 - M365 Integration
  8. Augmenting Azure Advisor Cost Recommendations for Automated Continuous Optimization – Part 1
  9. Installing SQL 2016 for Configuration Manager in a PubSec Environment
  10. Orchestration Groups with Microsoft Endpoint Configuration Manager
  11. Infrastructure + Security: Noteworthy News (April, 2020)

April 2020

  1. Windows 10 Multilanguage Deployment with MEMCM
  2. Infrastructure + Security: Noteworthy News (March, 2020)
  3. A Journey to Holistic Cloud Protection with the Microsoft 365 Security Stack Part 5 - Data
  4. Using Azure Update Management to Automate On-Premises Server Patching
  5. Secure Channel/Expired Machine Account Password Concerns – Revisited
  6. Getting Started with Logging Using EFK on Kubernetes
  7. Using Azure Automation with Multiple Tenants
  8. Use Power Automate to Extend Microsoft Endpoint Configuration Manager Application Approvals
  9. Getting Reports from Long Running Performance Monitor Data Collector Sets
  10. A Journey to Holistic Cloud Protection with the Microsoft 365 Security Stack Part 4 - Apps
  11. Auto Startup and Shutdown of Azure VMs Using Azure Automation
  12. How to Build an Azure Automation Lab
  13. Create a SQL FCI with a Tertiary AG Replica
  14. Mastering Configuration Manager Bandwidth limitations for VPN connected Clients

March 2020

  1. A Journey to Holistic Cloud Protection with the Microsoft 365 Security Stack Part 3 - Devices
  2. Customer Offerings: .NET Performance Tuning and Optimization
  3. Use Intune MAM to Control Office Mobile Apps and Office 365 Content
  4. Azure DSC for Zero Trust Windows 10 Devices Managed by Intune
  5. IIS Best Practices
  6. Configuring the MIM 2016 Microsoft Generic SQL Connector for Oracle Date Time Values
  7. SCCM: Housekeeping Collections
  8. Use SQL Server 2019 PolyBase to Virtualize a Sybase IQ Database
  9. Exporting Resultant Set of Policy (RSoP) data using PowerShell
  10. Can't connect to Windows Share - Error code: 0x80070035. The network path was not found.

February 2020

  1. VM Checkpoints Names in the Hyper-V Manager Window...
  2. Infrastructure + Security: Noteworthy News (February, 2020)
  3. A Journey to Holistic Cloud Protection with the Microsoft 365 Security Stack Part 2 - Identity
  4. Building the Totally Network Isolated Root Certification Authority
  5. Announcement: Azure Security Center CSV Reports Are Now GA
  6. Be Aware, Azure Security Center CSV Reports is Now Generally Available!
  7. Initially Isolate Tier 0 Assets with Group Policy to Start Administrative Tiering
  8. App-V Publishing Fails If You Apply UserConfig Files
  9. Modern Content Distribution: Microsoft Endpoint Manager and Connected Cache
  10. Script to send Email alerts on Expiring certificates for Important Certificate Templates
  11. How to Change the Performance Collection Duration for On-Demand Assessments
  12. The VM xxx cannot be migrated to Host xxx due to incompatibility issues….
  13. Enable Vulnerability Assessment Check in Azure Security Center (ASC)
  14. How to use Group Managed Service Accounts (gMSA) in Azure Automation Hybrid Worker
  15. A Journey to Holistic Cloud Protection with the Microsoft 365 Security Stack - Part 1 - Overview

January 2020

  1. Preparing to Deploy Extended Security Updates
  2. Converting ETL Files to PCAP Files
  3. Sample Code: End-to-End Certificate Transparency requests on ADCS CA
  4. How will Certificate Transparency affect existing Active Directory Certificate Services environments?
  5. [CrossPost ] HTTPS Inspection and your PKI
  6. How to write an NDES policy module
  7. [CrossPost] Implementing SHA-2 in Active Directory Certificate Services
  8. Setting up NDES using a Group Managed Service Account (gMSA)
  9. Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 3: Key Attestation
  10. Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 2: Virtual Smart Cards
  11. Setting up TPM protected certificates using a Microsoft Certificate Authority - Part 1: Microsoft Platform Crypto Provider
  12. Windows Server 2012 R2/IIS8.5 - Automatic Rebind of Renewed Certificates
  13. Constraints: what they are and how they’re used
  14. A novel method in IE11 for dealing with fraudulent digital certificates
  15. Upgrade Certification Authority to SHA256
  16. Renew Web Server (SSL) Certificates Automatically
  17. Windows PowerShell CRL Copy v2 posted to the gallery
  18. PKI Library (PKI Documentation and Reference Library Updated)
  19. Windows Server 2012 Active Directory Certificate Services System State Backup and Restore
  20. Certutil and Certreq
  21. Query for Advanced CA Configuration Options
  22. Viewing Expired Certificate Revocation List (CRL)
  23. Certificate for WinRT devices and non-domain member devices
  24. Group Protected PFX
  25. Blocking RSA keys less than 1024 bits (part 3)
  26. Blocking RSA Keys less than 1024 bits (part 2)
  27. How to determine if a smart card was used for logon
  28. RSA keys under 1024 bits are blocked
  29. Announcing the automated updater of untrustworthy certificates and keys
  30. Request File Can’t be Located during CA Certificate Renewal
  31. Visual Basic for Applications and SHA2
  32. Best Practice for Configuring Certificate Template Cryptography
  33. Network Device Enrollment Service (NDES) now on the TechNet Wiki
  34. Offline CA articles posted to the TechNet Wiki
  35. HSPD-12 Logical Access Authentication and 2008 Active Directory Domains on Download Center
  36. Connecting iPads to an Enterprise Wireless 802.1x Network Using Certificates and Network Device Enrollment Services (NDES)
  37. Decommissioning an Old Certification Authority without affecting Previously Issued Certificates and then Switching Operations to a New One
  38. EFS Certificates may be recovered as CNG certificates when CAPI CSP is required
  39. Windows PowerShell script for Setting up a CA on Windows Server 2008 and Windows Server 2008 R2
  40. Key Recovery vs Data Recovery Differences
  41. How to decommission a Windows enterprise certification authority and how to remove all related objects
  42. Does Enterprise PKI (PKIVIEW) support OCSP?
  43. Updated requirements for a Windows Server 2008 R2 domain controller certificate from a 3rd party CA
  44. Windows 8 Developer Preview and AD CS / PKI: Cannot Get a Certificate from Web
  45. Internet Explorer 9 and Certificate Enrollment using Certificate Authority Web Enrollment
  46. Active Directory Certificate Services Frequently Asked Questions - needs your help!
  47. AD CS Content Updates
  48. Important Security Update for Windows Server: Active Directory Certificate Services Web Enrollment!
  49. Implementing LDAPS (LDAP over SSL)
  50. Deployment of the new Federal Common Policy CA Root Certificate
  51. CA manager approval required for certificate re-enrollment
  52. Quick Check on ADCS Health Using Enterprise PKI Tool (PKIVIEW)
  53. Verifying The SSL Certificate Expiration with a tool
  54. Common Questions about SHA2 and Windows
  55. SHA2 and Windows
  56. Active Directory Certificate Services Monitoring Management Pack
  57. Microsoft Certificate Server virtualization policy
  58. Backing up Windows Server 2008 ADCS CA Keys
  59. Firewall Rules for Active Directory Certificate Services
  60. Design Considerations before Building a Two Tier PKI Infrastructure
  61. Certificate Path Validation in Bridge CA and Cross-Certification Environments
  62. Powershell CRL Copy
  63. How to Request a Certificate With a Custom Subject Alternative Name
  64. Disaster Recovery Procedures for Active Directory Certificate Services (ADCS)
  65. Windows Server 2008 R2 AD CS Migration Guide
  66. Whitepaper “HSPD-12 Logical Access Authentication and Active Directory Domains”
  67. Windows CA Performance Numbers
  68. Clustered Certification Authority maintenance tasks
  69. Server 2008 R2 ADCS Migration Guide Beta
  70. AD Schema Requirements for Windows PKI features
  71. How Certificates Are Created
  72. Certificate Revocation Checking Whitepaper
  73. Certificate Validation on Windows XP with Entrust SSP Issued HSPD-12 Certificates
  74. BranchCache Deployment Guide for Windows Server 2008 R2 and Windows 7
  75. Introducing Certificate Template API
  76. Using VBScript to install CA on WS2008R2 server core
  77. Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]
  78. Certificate Enrollment Web Services Whitepaper
  79. How to get request statistics by template in PowerShell
  80. Active Directory Certificate Services Features by SKU
  81. Cross-forest certificate enrollment white paper update
  82. Creating self-signed certificates with a script
  83. Populate Subject Name for Offline Templates on Renew
  84. Updated Network Device Enrollment Service (aka SCEP) white paper
  85. Extended Validation support for websites using internal certificates
  86. CA Performace testing
  87. AD CS Installation is Crashing on x64 Platform
  88. Understanding Key Archival
  89. How to create a web server SSL certificate manually
  90. Morello on PKI
  91. What is a strong key protection in Windows?
  92. PKI Enhancements in Windows 7 and Windows Server 2008 R2
  93. CA performance
  94. PKI at TechEd 2009 in LA
  95. How to configure the Windows Server 2008 CA Web Enrollment Proxy
  96. Suite B PKI in Windows Server 2008 and Windows Server 2008R2
  97. Certificate distribution and the Microsoft Terminal Services Client
  98. Certificate Services setup failed with the following error: Element not found. 0x80070490
  99. Cross-forest Certificate Enrollment with Windows Server 2008 R2 Beta
  100. How to decommission a Windows enterprise certification authority and how to remove all related objects from Windows Server 2003
  101. New Windows Biometric Framework and Driver Model
  102. Outlook S/MIME certificate selection
  103. Defining the friendly name certificate property
  104. Suppressing certificate attributes in a CA certificate request
  105. Creating offline certificate requests through the user-interface on Windows Vista or Windows Server 2008
  106. Disposition values for certutil –view –restrict (and some creative samples)
  107. You cannot add V2 or V3 templates after an inplace upgrade was performed on a Windows Server 2008 enterprise CA
  108. How EffectiveDate (thisupdate), NextUpdate and NextCRLPublish are calculated
  109. New whitepapers about Windows Server 2008 Certificate Services
  110. How to determine all certificates that will expire within 30 days
  111. How to avoid Delta CRL download errors on Windows Server 2008 with IIS7
  112. Update: Import the Root CA Certificate and CRL into an Intermediate CA from a Batch File
  113. How to set up a CA with a CNG (ECC) certificate
  114. Manually importing keys into a smart card
  115. How to decode Windows errors
  116. How to refresh the CRL cache on Windows Vista
  117. How to re-install the default certificate templates?
  118. Marking private keys as non-exportable with certutil -importpfx
  119. Credential Roaming Hot Fix Available
  120. The missing EDIT button in the CA properties extensions tab
  121. A simple way to set the certutil -config option
  122. Manually publishing a CA certificate or CRL into a LDAP store
  123. How to find out the max size of certificate attributes
  124. How to manually set the archive flag for certifictes
  125. How to download the most current CA certificate from a certificate web enrollment station
  126. How to use Certificate Services Web enrollment pages together with Windows Vista
  127. How to exclude the certificate template name from certificates to be issued
  128. Configuring and Troubleshooting Certificate Services Client–Credential Roaming
  129. The EASY way of CRL troubleshooting in Windows Vista
  130. A file distribution point must follow the UNC syntax
  131. Basic CRL checking with certutil
  132. Infrastructure + Security: Noteworthy News (January, 2020)
  133. Customer Offerings: Onboarding Accelerator - Office 365 Security and Compliance
  134. Configure Ansible to use a Managed Identity with Azure Dynamic Inventory
  135. How To Install Log Analytics Gateway Using Load Balancers In Azure

← 2018–2019