Export & Import Intune policies and configuration using Graph API
Intune or Microsoft Endpoint Manager is to tool for Mobile Device Management (MDM) or Mobile Application Management (MAM). Device management was mostly focussed on devices like iOS and Android where...
View ArticleExport & Import Conditional Access policies and configuration using Graph API
Conditional access is the tool to enforce organizational policies. Access to resource is granted using if-then statements. You can for example enforce multi-factor authentication from untrusted...
View ArticleExport & Import Office 365 and Azure configuration
In two weeks I’ll be starting at a new company as an Information Security specialist. In order to prepare for this new endeavor I’ll be updating my developer tenant for testing purposes. All best...
View ArticleProvision a Team in Microsoft Teams using Power Apps and Power Automate
It’s best practice from a security point of view to disable users from creating security groups or Microsoft 365 groups. Users can create security groups in Azure portals, API or PowerShell by default....
View ArticleBuilding simple parent/child relationship grid in Azure Sentinel Workbook
There are many different visualizations in Azure Workbooks. A grid can be just a plain grid, or a grid with a parent/child relationship, or grouped by values in columns. This post will show you how to...
View ArticlePrivileged access groups in Azure Privileged Identity Management
It was already possible to use Privileged Identity Management (PIM) to manage, control and monitor administrator roles in your organization. PIM provides time-based and approval-based role activation....
View ArticleFirst contact safety tip in Defender for Office 365
Microsoft added the first contact safety tip in Defender for Office 365. This safety tip is shown when recipients first receive an email from a sender or do not often receive email from a sender....
View ArticleEnable Tamper Protection with Defender for Endpoint
Tamper protection protects you from unwanted changes to Microsoft Defender Antivirus. Bad actors normally want to disable the firewall or antivirus in order to install additional malware. Disabling...
View ArticleWeb content filtering with Defender for Endpoint
Content filters are used almost in every organization. The function of a content filter is to block websites or files. These sites or files may be malicious or it’s in the company policy to restrict...
View ArticleManage apps with Defender for Endpoint and Microsoft Cloud App Security
It’s easy to manage apps when you have a clear perimeter. There is only one option to access the internet and that’s through the company firewall. Now, with people working from home and bring your own...
View ArticleThe user name or password is incorrect during Intune Autopilot enrollment
A month ago we encountered an issue for new devices enrolled using Intune AutoPilot. Users were able to authenticate during the Windows 10 installation steps but they receive the message “The user name...
View ArticleFacebook advertising scam! Tips and tricks to recognize fake and fraudulent...
Nowadays it is very easy to buy/purchase a domain, create a website using a template and start selling products. I have noticed a lot of advertisements on Facebook and Youtube that tried to sell...
View ArticleAccess denied while updating Microsoft Teams on RELEASES file
We have a couple of customers who experienced issues where Microsoft Teams wasn’t updating. Microsoft provides a nice doc for Troubleshooting Microsoft Teams installation and update issues on Windows...
View ArticleTesting the FEITIAN K27 FIDO Key with Office 365 and other
Portiva asked FEITIAN if they would like to send a trial set of FIDO keys to test and to validate its usability with Windows 10 and mobile devices. Wikipedia states FIDO (“Fast IDentity Online”)...
View ArticleAzure Information Protection Scanner error – No profiles found
We encountered a simple error which doesn’t have a lot of information on the internet. In this scenario we installed the Azure Information Protection Unified Label scanner. This scanner was installed...
View ArticleCAA20004 AADSTS90072: User account from identity provider does not exist in...
We had two cases where we encountered the error code CAA20004 with the message “AADSS90072: User account from identity provider does not exist in tenant and cannot access the application in that...
View ArticleGuest account issue: We cannot create a self-service Azure AD account for you
With Office 365 you can enable B2B by adding guest accounts to your Azure Active Directory. Guest accounts will receive an email asking them to accept the invitation to access applications in your...
View ArticleSecurity in Office 365 and Azure
Most organizations have moved to Office 365 or a different cloud provider. The protection of identities and data should be their number one priority as credential leaks are for example easier to abuse...
View ArticleAdministration tasks and monitoring in Office 365
Administration tasks consist mostly of incidents, (non)standard changes and monitoring where this blog focusses on monitoring in Office 365. An administrator should proactively monitor the Office 365...
View ArticleRestrict users from installing Office add-ins
We recently had the question to restrict users from installing Office add-ins. Users were able to install third party add-ins in for example the Outlook client or in Office Web Access. We thought we...
View Article