Tags

Since 1994, Microsoft has been involved in device management: first with SMS, which later became SCCM, and then in 2011, with the advent of mobile devices, the Mobile Device Management service called Intune was created, which has grown… and grown… And today, it has become a suite! Let’s clarify the various pieces of technology we can find within this suite with Maura Perra, Technical Specialist in Cloud Endpoint for Microsoft!

Here we are with a new episode of “A Coffee with…”! Today’s protagonist is Elisa Pirrone, CSA Security for Microsoft Italy. Together with her, we will talk about disabling legacy protocols, creating conditional access policies, best practices, and why Windows Hello for Business is an MFA! Here are some additional links for further information: Common Conditional Access policy: Block legacy authentication Windows Hello for Business Overview How Windows Hello for Business works in Windows Devices Don’t forget to subscribe to our other channels as well:

Today’s episode is a true injection of caffeine and valuable resources: Valeria Sava talks to us about ADFS and how to retire it by migrating applications to Azure AD. Are you interested? Yes? Then after watching the video, don’t miss this workshop in Italian dedicated to this very topic! Valeria and I extensively discussed it while enjoying our coffee. Here are all the details! 🗓️ March 28, 2023 ➡️ Microsoft Workshops: How to successfully migrate away from AD FS to Azure AD

“How can we leverage a public cloud while maintaining a proper security posture?” Today, we ask this question (while sipping a cup of coffee) to Francesco Molfese (MVP), who has a clear understanding of how to maintain the right level of security both in the cloud and on-premises. Here are some additional links for further reading: Francesco’s blog Defender for Cloud Don’t forget to follow us on our social channels as well:

Since 1994, Microsoft has been involved in device management: first with SMS, which later became SCCM, and then in 2011, with the advent of mobile devices, the Mobile Device Management service called Intune was created, which has grown… and grown… And today, it has become a suite! Let’s clarify the various pieces of technology we can find within this suite with Maura Perra, Technical Specialist in Cloud Endpoint for Microsoft!

Here we are with a new episode of “A Coffee with…”! Today’s protagonist is Elisa Pirrone, CSA Security for Microsoft Italy. Together with her, we will talk about disabling legacy protocols, creating conditional access policies, best practices, and why Windows Hello for Business is an MFA! Here are some additional links for further information: Common Conditional Access policy: Block legacy authentication Windows Hello for Business Overview How Windows Hello for Business works in Windows Devices Don’t forget to subscribe to our other channels as well:

“How can we leverage a public cloud while maintaining a proper security posture?” Today, we ask this question (while sipping a cup of coffee) to Francesco Molfese (MVP), who has a clear understanding of how to maintain the right level of security both in the cloud and on-premises. Here are some additional links for further reading: Francesco’s blog Defender for Cloud Don’t forget to follow us on our social channels as well:

Since 1994, Microsoft has been involved in device management: first with SMS, which later became SCCM, and then in 2011, with the advent of mobile devices, the Mobile Device Management service called Intune was created, which has grown… and grown… And today, it has become a suite! Let’s clarify the various pieces of technology we can find within this suite with Maura Perra, Technical Specialist in Cloud Endpoint for Microsoft!

I have tried the new Windows LAPS (Local Administrator Password Solution) with direct support for Azure AD. If you have Windows 11 machines (which natively support it), it is really simple and fast to implement. Here are some useful information: 📌 No licensing requirement, available from Azure AD Free and above 📌 Supported operating systems: Windows 11 22H2 - April 11, 2023 Update Windows 11 21H2 - April 11, 2023 Update Windows 10 20H2, 21H2, and 22H2 - April 11, 2023 Update Windows Server 2022 - April 11, 2023 Update Windows Server 2019 - April 11, 2023 Update In the video, besides configuring the Intune profile to re-enable the built-in local Administrator, I also tested a slightly more specific scenario by renaming the Administrator.

On March 22, 2023, the Microsys event “Tech Bits: Modern Endpoint Management” took place, and now the video of the event is available! Together with the legendary Paolo Bodini, we presented the 10 key elements to consider for modern management of corporate and personal devices. Enjoy watching! Riccardo

Why Windows Hello for Business is the Multi-Factor Authentication for Windows login and how to configure it via Intune in Azure AD Kerberos Cloud Trust mode, through the Settings Catalog. Below is the documentation I refer to in the video: 📄 Windows Hello for Business Overview 📄 How Windows Hello for Business works in Windows Devices 📄 Windows Hello for Business and Authentication 📄 Cloud Kerberos trust deployment 📄 Enable passwordless security key sign-in to on-premises resources by using Azure AD Have you implemented Windows Hello for Business?

Here we are with a new episode of “A Coffee with…”! Today’s protagonist is Elisa Pirrone, CSA Security for Microsoft Italy. Together with her, we will talk about disabling legacy protocols, creating conditional access policies, best practices, and why Windows Hello for Business is an MFA! Here are some additional links for further information: Common Conditional Access policy: Block legacy authentication Windows Hello for Business Overview How Windows Hello for Business works in Windows Devices Don’t forget to subscribe to our other channels as well:

A few days ago, I came across a very interesting article from the Intune Customer Success Team. The article discusses how to configure BitLocker through the Intune Settings Catalog. This piqued my curiosity because, considering the Settings Catalog, there are now three different ways to deploy BitLocker from Intune. I wanted to understand the advantages of using the Settings Catalog compared to the already available methods. Here’s my experience! ⚠️ As mentioned in the video: the settings you see were done for purely educational and illustrative purposes.

Today’s episode is a true injection of caffeine and valuable resources: Valeria Sava talks to us about ADFS and how to retire it by migrating applications to Azure AD. Are you interested? Yes? Then after watching the video, don’t miss this workshop in Italian dedicated to this very topic! Valeria and I extensively discussed it while enjoying our coffee. Here are all the details! 🗓️ March 28, 2023 ➡️ Microsoft Workshops: How to successfully migrate away from AD FS to Azure AD

It took me a while to make this video, but finally, here I am: Azure Virtual Desktop Single Sign-On to Azure AD. One of the main “criticisms” always directed at AVD is the double authentication, which many consider a hassle. With Single Sign-On, the process becomes smoother, and the required authentications decrease. Could I have just shown you the simple SSO? Clearly NO, so I even included a FIDO2 security key in it!

On March 8, 2023, a joint event was held between the Microsoft Intune Italian Users Group and the Microsoft Security Italian Users Group: the video of the sessions is now available. Together with the legendary Michele Sensalari, we talked about certificate-based authentication on Azure AD. Marco Moioli and Davide Salsi, on the other hand, delved into how to use the MAM (Mobile Application Management) features of Intune to provide security in BYOD scenarios, and Davide also demonstrated the new Microsoft Tunnel for Mobile.

“How can we leverage a public cloud while maintaining a proper security posture?” Today, we ask this question (while sipping a cup of coffee) to Francesco Molfese (MVP), who has a clear understanding of how to maintain the right level of security both in the cloud and on-premises. Here are some additional links for further reading: Francesco’s blog Defender for Cloud Don’t forget to follow us on our social channels as well:

Intune Organizational Messages are coming to Intune (GA as of 31/5)! Organizing a communication campaign towards users for urgent updates or the release of new configurations that impact the user experience will now be easier. Here are the key licensing and requirements details. 📌 Licenses Microsoft 365 E3 Microsoft 365 E5 Windows 10/11 Enterprise E3 with Microsoft Intune Plan 1 Windows 10/11 Enterprise E5 with Microsoft Intune Plan 1 📌 Operating Systems

IT specialists, hello everyone! In this video, we will see the tools that Azure AD and Intune provide us with to manage local group membership. Video You can find the entire video below, or you can continue reading the article. Article After playing with the new Windows LAPS in my previous video, I was reviewing the list of local administrators on my lab machine, and since the machine is registered in Azure AD Join, the Azure AD user who joined it has become an administrator.

On March 22, 2023, the Microsys event “Tech Bits: Modern Endpoint Management” took place, and now the video of the event is available! Together with the legendary Paolo Bodini, we presented the 10 key elements to consider for modern management of corporate and personal devices. Enjoy watching! Riccardo

A few days ago, I came across a very interesting article from the Intune Customer Success Team. The article discusses how to configure BitLocker through the Intune Settings Catalog. This piqued my curiosity because, considering the Settings Catalog, there are now three different ways to deploy BitLocker from Intune. I wanted to understand the advantages of using the Settings Catalog compared to the already available methods. Here’s my experience! ⚠️ As mentioned in the video: the settings you see were done for purely educational and illustrative purposes.

This news was from the end of January, but amidst the chaos of activities and news, I can finally share it now: native management of macOS updates in Intune! Prior to this functionality, managing updates for Macs enrolled in Intune was not very straightforward: scripts, third-party solutions, or user self-service management were required. With this new set of features, it will be possible to natively manage the following types of updates from the Intune interface:

On March 8, 2023, a joint event was held between the Microsoft Intune Italian Users Group and the Microsoft Security Italian Users Group: the video of the sessions is now available. Together with the legendary Michele Sensalari, we talked about certificate-based authentication on Azure AD. Marco Moioli and Davide Salsi, on the other hand, delved into how to use the MAM (Mobile Application Management) features of Intune to provide security in BYOD scenarios, and Davide also demonstrated the new Microsoft Tunnel for Mobile.

Intune Organizational Messages are coming to Intune (GA as of 31/5)! Organizing a communication campaign towards users for urgent updates or the release of new configurations that impact the user experience will now be easier. Here are the key licensing and requirements details. 📌 Licenses Microsoft 365 E3 Microsoft 365 E5 Windows 10/11 Enterprise E3 with Microsoft Intune Plan 1 Windows 10/11 Enterprise E5 with Microsoft Intune Plan 1 📌 Operating Systems

This news was from the end of January, but amidst the chaos of activities and news, I can finally share it now: native management of macOS updates in Intune! Prior to this functionality, managing updates for Macs enrolled in Intune was not very straightforward: scripts, third-party solutions, or user self-service management were required. With this new set of features, it will be possible to natively manage the following types of updates from the Intune interface:

Intune Organizational Messages are coming to Intune (GA as of 31/5)! Organizing a communication campaign towards users for urgent updates or the release of new configurations that impact the user experience will now be easier. Here are the key licensing and requirements details. 📌 Licenses Microsoft 365 E3 Microsoft 365 E5 Windows 10/11 Enterprise E3 with Microsoft Intune Plan 1 Windows 10/11 Enterprise E5 with Microsoft Intune Plan 1 📌 Operating Systems

Intune Organizational Messages are coming to Intune (GA as of 31/5)! Organizing a communication campaign towards users for urgent updates or the release of new configurations that impact the user experience will now be easier. Here are the key licensing and requirements details. 📌 Licenses Microsoft 365 E3 Microsoft 365 E5 Windows 10/11 Enterprise E3 with Microsoft Intune Plan 1 Windows 10/11 Enterprise E5 with Microsoft Intune Plan 1 📌 Operating Systems

I have tried the new Windows LAPS (Local Administrator Password Solution) with direct support for Azure AD. If you have Windows 11 machines (which natively support it), it is really simple and fast to implement. Here are some useful information: 📌 No licensing requirement, available from Azure AD Free and above 📌 Supported operating systems: Windows 11 22H2 - April 11, 2023 Update Windows 11 21H2 - April 11, 2023 Update Windows 10 20H2, 21H2, and 22H2 - April 11, 2023 Update Windows Server 2022 - April 11, 2023 Update Windows Server 2019 - April 11, 2023 Update In the video, besides configuring the Intune profile to re-enable the built-in local Administrator, I also tested a slightly more specific scenario by renaming the Administrator.

IT specialists, hello everyone! In this video, we will see the tools that Azure AD and Intune provide us with to manage local group membership. Video You can find the entire video below, or you can continue reading the article. Article After playing with the new Windows LAPS in my previous video, I was reviewing the list of local administrators on my lab machine, and since the machine is registered in Azure AD Join, the Azure AD user who joined it has become an administrator.

IT specialists, hello everyone! In this video, we will see the tools that Azure AD and Intune provide us with to manage local group membership. Video You can find the entire video below, or you can continue reading the article. Article After playing with the new Windows LAPS in my previous video, I was reviewing the list of local administrators on my lab machine, and since the machine is registered in Azure AD Join, the Azure AD user who joined it has become an administrator.

Friday resource! If you’re tinkering with Local Groups Membership policies in Intune and (like me) have cursed a bit while converting group/role ObjectIDs to SIDs and vice versa, here’s a website that does it online instantly and conveniently. 🔹 ObjectId ➡️ SID 🔹 SID ➡️ ObjectId I’d love to tag the author of this wonderful utility (Erik Engberg) here, but from what I’ve seen, they’re not on LinkedIn. If I’m mistaken and someone knows their exact profile, please let me know so I can give them proper thanks.

I have tried the new Windows LAPS (Local Administrator Password Solution) with direct support for Azure AD. If you have Windows 11 machines (which natively support it), it is really simple and fast to implement. Here are some useful information: 📌 No licensing requirement, available from Azure AD Free and above 📌 Supported operating systems: Windows 11 22H2 - April 11, 2023 Update Windows 11 21H2 - April 11, 2023 Update Windows 10 20H2, 21H2, and 22H2 - April 11, 2023 Update Windows Server 2022 - April 11, 2023 Update Windows Server 2019 - April 11, 2023 Update In the video, besides configuring the Intune profile to re-enable the built-in local Administrator, I also tested a slightly more specific scenario by renaming the Administrator.

Today’s episode is a true injection of caffeine and valuable resources: Valeria Sava talks to us about ADFS and how to retire it by migrating applications to Azure AD. Are you interested? Yes? Then after watching the video, don’t miss this workshop in Italian dedicated to this very topic! Valeria and I extensively discussed it while enjoying our coffee. Here are all the details! 🗓️ March 28, 2023 ➡️ Microsoft Workshops: How to successfully migrate away from AD FS to Azure AD

It took me a while to make this video, but finally, here I am: Azure Virtual Desktop Single Sign-On to Azure AD. One of the main “criticisms” always directed at AVD is the double authentication, which many consider a hassle. With Single Sign-On, the process becomes smoother, and the required authentications decrease. Could I have just shown you the simple SSO? Clearly NO, so I even included a FIDO2 security key in it!

On March 8, 2023, a joint event was held between the Microsoft Intune Italian Users Group and the Microsoft Security Italian Users Group: the video of the sessions is now available. Together with the legendary Michele Sensalari, we talked about certificate-based authentication on Azure AD. Marco Moioli and Davide Salsi, on the other hand, delved into how to use the MAM (Mobile Application Management) features of Intune to provide security in BYOD scenarios, and Davide also demonstrated the new Microsoft Tunnel for Mobile.

If you’re interested, I’m starting from scratch on Twitter with a brand new profile. There, I’ll be primarily writing in English. Why? Several reasons: To get used to using English more frequently: I read a lot of content in this language every day, but I go through (too) long periods without writing or speaking it. Because in the Microsoft sphere on Twitter, there are truly unmissable profiles and content, and the MVP community there is very active.

If you’re interested, I’m starting from scratch on Twitter with a brand new profile. There, I’ll be primarily writing in English. Why? Several reasons: To get used to using English more frequently: I read a lot of content in this language every day, but I go through (too) long periods without writing or speaking it. Because in the Microsoft sphere on Twitter, there are truly unmissable profiles and content, and the MVP community there is very active.

I have tried the new Windows LAPS (Local Administrator Password Solution) with direct support for Azure AD. If you have Windows 11 machines (which natively support it), it is really simple and fast to implement. Here are some useful information: 📌 No licensing requirement, available from Azure AD Free and above 📌 Supported operating systems: Windows 11 22H2 - April 11, 2023 Update Windows 11 21H2 - April 11, 2023 Update Windows 10 20H2, 21H2, and 22H2 - April 11, 2023 Update Windows Server 2022 - April 11, 2023 Update Windows Server 2019 - April 11, 2023 Update In the video, besides configuring the Intune profile to re-enable the built-in local Administrator, I also tested a slightly more specific scenario by renaming the Administrator.

On March 22, 2023, the Microsys event “Tech Bits: Modern Endpoint Management” took place, and now the video of the event is available! Together with the legendary Paolo Bodini, we presented the 10 key elements to consider for modern management of corporate and personal devices. Enjoy watching! Riccardo

How many times have you been asked to record a meeting because “you never know” or because “I want to review it later”? 🙋🏻‍♂️ Well, 99% of the recordings in Microsoft Teams are never viewed within 60 days after the meeting. It’s a waste of space and, potentially, a security issue if the recording contains sensitive information that is consciously or inadvertently shared. Finally, the ability to set an expiration date for recorded videos has been introduced!

On March 22, 2023, the Microsys event “Tech Bits: Modern Endpoint Management” took place, and now the video of the event is available! Together with the legendary Paolo Bodini, we presented the 10 key elements to consider for modern management of corporate and personal devices. Enjoy watching! Riccardo

Why Windows Hello for Business is the Multi-Factor Authentication for Windows login and how to configure it via Intune in Azure AD Kerberos Cloud Trust mode, through the Settings Catalog. Below is the documentation I refer to in the video: 📄 Windows Hello for Business Overview 📄 How Windows Hello for Business works in Windows Devices 📄 Windows Hello for Business and Authentication 📄 Cloud Kerberos trust deployment 📄 Enable passwordless security key sign-in to on-premises resources by using Azure AD Have you implemented Windows Hello for Business?

Spring means Global Azure, and I am delighted to announce that I will be a speaker at Global Azure 2023 in Turin, taking place on Saturday, May 13, 2023! However, I won’t be alone on stage: joining me will be Pietro Visentin, Head of Security at Moresi! By the way, I recommend checking out his blog Azvise, which is full of useful and interesting content. For all the details about the agenda, it will take a few more days, so staytuned and don’t miss the event updates that you can find here:

Spring means Global Azure, and I am delighted to announce that I will be a speaker at Global Azure 2023 in Turin, taking place on Saturday, May 13, 2023! However, I won’t be alone on stage: joining me will be Pietro Visentin, Head of Security at Moresi! By the way, I recommend checking out his blog Azvise, which is full of useful and interesting content. For all the details about the agenda, it will take a few more days, so staytuned and don’t miss the event updates that you can find here:

Spring means Global Azure, and I am delighted to announce that I will be a speaker at Global Azure 2023 in Turin, taking place on Saturday, May 13, 2023! However, I won’t be alone on stage: joining me will be Pietro Visentin, Head of Security at Moresi! By the way, I recommend checking out his blog Azvise, which is full of useful and interesting content. For all the details about the agenda, it will take a few more days, so staytuned and don’t miss the event updates that you can find here:

I have plans to introduce a different type of video, in addition to the usual tutorials, in the future. Yesterday, I tested the “vlog setup” for the first time. First impressions: excellent image quality (I had no doubts with this Sony camera), the grip is great and doubles as a remote control, and the Falcam quick release is very convenient. Things to assess: audio quality, as I’m using the built-in microphone, and stabilization.

A few days ago, I came across a very interesting article from the Intune Customer Success Team. The article discusses how to configure BitLocker through the Intune Settings Catalog. This piqued my curiosity because, considering the Settings Catalog, there are now three different ways to deploy BitLocker from Intune. I wanted to understand the advantages of using the Settings Catalog compared to the already available methods. Here’s my experience! ⚠️ As mentioned in the video: the settings you see were done for purely educational and illustrative purposes.

This news was from the end of January, but amidst the chaos of activities and news, I can finally share it now: native management of macOS updates in Intune! Prior to this functionality, managing updates for Macs enrolled in Intune was not very straightforward: scripts, third-party solutions, or user self-service management were required. With this new set of features, it will be possible to natively manage the following types of updates from the Intune interface:

Today’s episode is a true injection of caffeine and valuable resources: Valeria Sava talks to us about ADFS and how to retire it by migrating applications to Azure AD. Are you interested? Yes? Then after watching the video, don’t miss this workshop in Italian dedicated to this very topic! Valeria and I extensively discussed it while enjoying our coffee. Here are all the details! 🗓️ March 28, 2023 ➡️ Microsoft Workshops: How to successfully migrate away from AD FS to Azure AD

It took me a while to make this video, but finally, here I am: Azure Virtual Desktop Single Sign-On to Azure AD. One of the main “criticisms” always directed at AVD is the double authentication, which many consider a hassle. With Single Sign-On, the process becomes smoother, and the required authentications decrease. Could I have just shown you the simple SSO? Clearly NO, so I even included a FIDO2 security key in it!

On March 8, 2023, a joint event was held between the Microsoft Intune Italian Users Group and the Microsoft Security Italian Users Group: the video of the sessions is now available. Together with the legendary Michele Sensalari, we talked about certificate-based authentication on Azure AD. Marco Moioli and Davide Salsi, on the other hand, delved into how to use the MAM (Mobile Application Management) features of Intune to provide security in BYOD scenarios, and Davide also demonstrated the new Microsoft Tunnel for Mobile.

Shrinking the disk size of a VM in Azure to save on storage costs? With a little bit of tinkering and some PowerShell magic, it can be done. Today, I’m stepping a bit outside the usual topics I cover. 😉 A few days ago, I was looking at the consumption of my lab subscription and noticed that the disk costs were eating up a good chunk of my (limited) monthly budget.

Shrinking the disk size of a VM in Azure to save on storage costs? With a little bit of tinkering and some PowerShell magic, it can be done. Today, I’m stepping a bit outside the usual topics I cover. 😉 A few days ago, I was looking at the consumption of my lab subscription and noticed that the disk costs were eating up a good chunk of my (limited) monthly budget.

Shrinking the disk size of a VM in Azure to save on storage costs? With a little bit of tinkering and some PowerShell magic, it can be done. Today, I’m stepping a bit outside the usual topics I cover. 😉 A few days ago, I was looking at the consumption of my lab subscription and noticed that the disk costs were eating up a good chunk of my (limited) monthly budget.

How many times have you been asked to record a meeting because “you never know” or because “I want to review it later”? 🙋🏻‍♂️ Well, 99% of the recordings in Microsoft Teams are never viewed within 60 days after the meeting. It’s a waste of space and, potentially, a security issue if the recording contains sensitive information that is consciously or inadvertently shared. Finally, the ability to set an expiration date for recorded videos has been introduced!