# microsoft entra (blogs) — RSS Amplifier Recent posts from the 7 feeds in the RSS Amplifier directory that cover microsoft entra. Page: Feed: --- ## [Windows 11に新機能、アプリを「常に最大化して開く」が可能に？](https://news.mynavi.jp/techplus/article/20260822-4847265/) _2026-08-21 · マイナビニュース 企業IT 開発/エンジニア_ Windows 11に、アプリを常に最大化した状態で起動できる新機能が追加される可能性が浮上した。「最大化して開く」と呼ばれるアクセシビリティ機能で、前回終了時のウィンドウ状態にかかわらず、アプリを最大化して起動できるという。同機能はXユーザーの@phantomofearth氏により発見された。 ## [Windows 11、「印刷の管理」が新しく 長年使われた旧画面を刷新](https://news.mynavi.jp/techplus/article/20260821-4833642/) _2026-08-21 · マイナビニュース 企業IT 開発/エンジニア_ MicrosoftがWindows 11向けに開発している新しい「印刷の管理」をリリースプレビューチャネルに展開した。長年使われてきたMMC形式の管理コンソールをWinUIベースのモダンな画面へ刷新する一方、プリンタや印刷キュー、ドライバーなどを管理する従来の機能は維持している。正式リリースに向けた最終段階に入ったとみられる。 ## [PC向けメモリ価格が10倍に上昇、2027年供給分は完売か](https://news.mynavi.jp/techplus/article/20260821-4843888/) _2026-08-21 · マイナビニュース 企業IT 開発/エンジニア_ PC向けメモリの価格高騰が深刻化している。米国ではDDR5メモリの一部製品が過去最安値の約10倍に達し、主力製品も1年前から3～5倍に上昇した。背景にあるのが、AIデータセンターの急拡大に伴うDRAM需要だ。さらに主要メーカーの2027年の生産能力はすでに売約済みとも報じられており、供給不足が長期化する可能性がある。 ## [フルリモート至上主義の終焉 - 週3出社への回帰が市場価値と年収に与える意外な影響](https://news.mynavi.jp/techplus/article/20260821-4788310/) _2026-08-20 · マイナビニュース 企業IT 開発/エンジニア_ コロナ禍を機に普及したフルリモート勤務ですが、転職市場では出社回帰の動きが広がり、求人の傾向にも変化が表れています。フルリモートを続けながら市場価値を高めるには何が必要なのか、転職支援の現場から見える実態を解説します。 ## [GitHub大規模障害、原因は「負荷集中」と設定ミス Copilotにも影響](https://news.mynavi.jp/techplus/article/20260820-4842902/) _2026-08-20 · マイナビニュース 企業IT 開発/エンジニア_ GitHubが8月17日に発生した大規模障害について根本原因分析(RCA: Root Cause Analysis)を公開した。障害はデータセンターへのトラフィック集中を発端に、自動スケーリングの設定ミスやリトライ処理によって拡大。GitHub.comやActions、Copilotなど広範なサービスに影響し、完全復旧まで7時間47分を要した。 ## [Windows 11、Chromeなどのカメラ・マイクへのアクセスを個別に許可・拒否可能に](https://news.mynavi.jp/techplus/article/20260820-4842872/) _2026-08-20 · マイナビニュース 企業IT 開発/エンジニア_ Windows 11で、Google ChromeやDiscord、Steamなどのデスクトップアプリについて、カメラやマイクへのアクセスをアプリごとに制御できる新機能が確認された。これまでWin32アプリは一括でしか設定できなかったが、Windows 11ビルド26340.9212では個別設定が可能になっている。Windows Centralが8月19日（米国時間）に伝えた。 ## [MicrosoftがOfficeの名称を2～3年ごとに変更していた理由、元Windows部門長が明かす](https://news.mynavi.jp/techplus/article/20260820-4838714/) _2026-08-20 · マイナビニュース 企業IT 開発/エンジニア_ MicrosoftのWindows部門長を務めた経歴を持つSteven Sinofsky氏が、かつてOfficeの名称やアイコンが2～3年ごとに変更されていた理由をXで明かした。背景にあったのはデザインやマーケティング上の都合だけではなく、Officeの販売方式や企業との契約期間だったという。 ## [WSL2で十分？ それともネイティブLinux？ Docker・Python・AIで徹底比較](https://news.mynavi.jp/techplus/article/20260820-4750406/) _2026-08-20 · マイナビニュース 企業IT 開発/エンジニア_ WSL2は進化を続け、現在では一般的なPython・Web・AI開発なら十分にこなせる環境となった。一方、Windows側ファイルへの大量I/OやUSB機器、特殊なネットワーク構成、GPU機能の完全な利用では、依然としてネイティブLinuxに分がある。では、実際の開発ではどちらを選ぶべきなのか。Docker・Python・AIなど用途別に、性能差と使い勝手を比較する。 ## [Windows 11の「ドラッグトレイ」削除へ、ユーザーの声受けMicrosoftが決断](https://news.mynavi.jp/techplus/article/20260820-4839021/) _2026-08-19 · マイナビニュース 企業IT 開発/エンジニア_ Microsoftは8月17日（現地時間）、Windows 11のファイル共有機能「ドラッグトレイ」をWindows Insider Programの最新プレビュービルドから削除すると発表した。ユーザーから寄せられたフィードバックを受けた措置で、2025年に登場した比較的新しい機能が早くも見直されることになった。Microsoftはこの分野の改善を引き続き検討し、将来的に代替となる新たな共有機能を提供する可能性を示している。 ## [WSL版Ubuntuの利用者、デスクトップ版を上回る可能性](https://news.mynavi.jp/techplus/article/20260819-4838000/) _2026-08-19 · マイナビニュース 企業IT 開発/エンジニア_ Windows Latestは8月16日(現地時間)、Windows Subsystem for Linux(WSL)上でUbuntuを利用するユーザー数が、デスクトップPCにUbuntuを直接導入して利用するユーザー数を超える可能性を伝えた。これは、The Pragmatic EngineerがCanonicalの技術バイスプレジデント、Jon Seager氏に行ったインタビューで語られたもの。 Seager氏は、WSLのユーザー増加率がデスクトップ版の増加率を大幅に上回っており、数か月以内にユーザー数の入れ替わりが起きるとの予想を述べたという。 ## [Trade Bitcoin and Ethereum Today (Sponsored)](https://crawlproof.com/a/BGLJ9z5RF8X8) _2026-08-19 · **Sponsored**_ Buy, sell, and margin trade BTC and ETH with EUR, USD, CAD, GBP, or JPY. ## [Claude for Microsoft 365とCopilot、どちらを選ぶ？ Word・Excel・Teamsで違いを比較](https://news.mynavi.jp/techplus/article/20260819-4750050/) _2026-08-19 · マイナビニュース 企業IT 開発/エンジニア_ Claude for Microsoft 365とMicrosoft 365 Copilotは、どちらもMicrosoft 365を生成AIで支援するが、その強みはかなり異なる。Claudeは複数アプリをまたぐ資料作成や文書・データの詳細な処理に強く、CopilotはMicrosoft Graphを基盤とした社内情報の検索、Teams会議、業務エージェントに強い。h本稿では、用途別の選び方を解説する。 ## [Windows 11が遅いと感じたら？ Microsoftが「スタートアップアプリ」の停止方法を紹介](https://news.mynavi.jp/techplus/article/20260819-4834875/) _2026-08-18 · マイナビニュース 企業IT 開発/エンジニア_ MMicrosoftのサポートチームが、Windowsの不要なスタートアップアプリを停止する方法を紹介した。スタートアップアプリが増えると、Windowsの起動時間やシステムのパフォーマンスに影響することがある。PCの動作が重いと感じている場合に確認しておきたい設定の一つだ。 ## [Windows 11の右クリックメニューを旧式表示に戻す方法](https://news.mynavi.jp/techplus/article/20260818-4830356/) _2026-08-18 · マイナビニュース 企業IT 開発/エンジニア_ Neowinは8月16日(米国時間)、Windows 11のコンテキストメニューを旧式表示に変更する方法を解説した。Windows 11では外観の近代化が推進され、コンテキストメニューを刷新。切り取り、コピー、貼り付けなど常に表示されるアクションをボタン化して横並びにした。この大幅な操作性の変更に戸惑うユーザーは多く、従来の表示を希望する声がある。そこで今回、Neowinは簡単な作業で旧式表示を復活させる方法を解説した。 ## [LLMはなぜ嘘をつくのか？ ハルシネーションの仕組みを「補間」から読み解く](https://news.mynavi.jp/techplus/article/20260818-4780473/) _2026-08-18 · マイナビニュース 企業IT 開発/エンジニア_ LLMがハルシネーションを起こす仕組みを書籍『Pythonによるディープラーニングと生成AI・LLM』から解説。文脈を捉えるAttention、補間するデータベースのTransformer――賢さと誤りが同じ仕組みの表裏にある理由を読み解きます。 ## [Borrowing Windows Hello keys for authentication and persistence](https://dirkjanm.io/borrowing-windows-hello-keys/) _2026-08-05 · Dirk-jan Mollema · dirkjanm.io_ Most research into Windows Hello focuses on the mechanics in use when authenticating to the local device. As an Entra ID researcher, I’ve always been more interested in how these keys are used to authenticate to the cloud. I’ve given several talks on Windows Hello for Business (WHFB for short) and about the many implementation flaws discovered in the process, most of which were fixed by Microsoft.… ## [How to add granular amr claims to your SAML apps in Entra ID](https://janbakker.tech/how-to-add-granular-amr-claims-to-your-saml-apps-in-entra-id/) _2026-07-24 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: How to add granular amr claims to your SAML apps in Entra ID In my last post, I covered how Entra ID now automatically sends the amr and acr claims for Salesforce, so its phishing-resistant MFA check finally has something to check. That part is automatic, no config needed. Every other SAML app doesn t get that automatically. Per Microsoft s own optional… ## [Lock or sign-out when Yubikey is removed from the device](https://janbakker.tech/lock-or-sign-out-when-yubikey-is-removed-from-the-device/) _2026-07-21 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: Lock or sign-out when Yubikey is removed from the device I didn t know there was already a solution for this, and maybe you are looking for it too. I learned about this from the Blue Security Podcast. Meet: YubiKey Locker Yubico With YubiKey Locker, implement a protocol-agnostic security key removal policy that seamlessly integrates across various operating… ## [Writing Maester tests using AI – From idea to Pull Request](https://janbakker.tech/writing-maester-tests-using-ai-from-idea-to-pull-request/) _2026-07-21 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: Writing Maester tests using AI From idea to Pull Request I love Maester. No doubt about that. I ve made several contributions to this open-source project before, but it took me a lot of effort to learn how the underlying structure worked as a non-developer, and this challenge can be hard for a lot of Entra or Microsoft 365 admins out there. Lucky for those… ## [Admin control for SSO prompts in Windows; finally, an off switch!](https://janbakker.tech/admin-control-for-sso-prompts-in-windows-finally-an-off-switch/) _2026-07-16 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: Admin control for SSO prompts in Windows; finally, an off switch! If you ve been paying attention to the EEA sign-in changes over the past while, you ll know Microsoft started prompting users before reusing their Windows credentials to sign in to other Microsoft apps and services. Good for user choice, less great if you re an admin who just spent years… ## [Passkeys by default and retirement of Microsoft-provided SMS and voice authentication – A guide to stay calm](https://janbakker.tech/passkeys-by-default-and-retirement-of-microsoft-provided-sms-and-voice-authentication-a-guide-to-stay-calm/) _2026-07-14 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: Passkeys by default and retirement of Microsoft-provided SMS and voice authentication A guide to stay calm I don t have all the answers, but I promise to keep this post updated with all the details I find. Microsoft dropped a bomb by announcing it will stop funding phone-based MFA, such as SMS and voice, and that passkeys will become the new standard. For… ## [Play Both Sides Of The Lie (Sponsored)](https://crawlproof.com/a/rRpaYM6dMKSH) _2026-07-14 · **Sponsored**_ Two operatives, one manufactured war — uncover the Complete Truth after both campaigns. ## [KB – employeeLeaveDateTime show empty (null)](https://janbakker.tech/kb-employeeleavedatetime-show-empty-null/) _2026-07-06 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: KB employeeLeaveDateTime show empty (null) This is a knowledge base item. I hope it will help you someday. The issue When syncing the employeeLeaveDateTime attribute to Entra ID, the value shows null. In this example, I use Graph Explorer to check the value. The solution As also mentioned here, the issue is a lack of permissions. This attribute is sensitive… ## [Why Windows is the hardest passkey surface in 2026 and what Entra admins should expect](https://janbakker.tech/why-windows-is-the-hardest-passkey-surface-in-2026-and-what-entra-admins-should-expect/) _2026-07-06 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: Why Windows is the hardest passkey surface in 2026 and what Entra admins should expect Written by: Corbado If you have rolled out passkeys to a mixed device fleet, you might have probably noticed the following pattern. Some users log in smoothly and barely create a ticket (e.g. iPhone users), while others, like Windows users, do. Behind runs the same… ## [Entra ID SAML authnmethodsreferences (AMR) now supports phishing-resistant MFA](https://janbakker.tech/entra-id-saml-authnmethodsreferences-amr-now-supports-phishing-resistant-mfa/) _2026-06-26 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: Entra ID SAML authnmethodsreferences (AMR) now supports phishing-resistant MFA If you ve been following the Salesforce phishing-resistant MFA (PRMFA) requirement story, you know the clock has been ticking. Salesforce has been pushing organizations to enforce phishing-resistant MFA for Salesforce administrators. The tricky part? Until now, Microsoft Entra ID… ## [Bypassing Conditional Access policies that have a resource exclusion](https://dirkjanm.io/bypassing-conditional-access-with-resource-exclusion/) _2026-06-22 · Dirk-jan Mollema · dirkjanm.io_ There is a documented enforcement gap in Conditional Access policies that apply to “all resources” but have an exclusion for at least one resource. What is not documented, is that this gap is much larger than what one would expect, and that the documented mitigation doesn’t actually work. The good news if you are an Entra admin is that this is now considered legacy behaviour that Microsoft is… ## [T-Bone Map Drives – Fixed the problem with high load on DC](https://www.tbone.se/2026/06/17/t-bone-map-drives-fixed-the-problem-with-high-load-on-dc/) _2026-06-17 · Mr T-Bone · Mr T-Bone´s Blog_ I have received reports from multiple customers that observed a high load on Domain Controllers. So I needed to enhance the scripts to be lighter on the Domain Controllers. I also needed to find... The post T-Bone Map Drives – Fixed the problem with high load on DC appeared first on Mr T-Bone´s Blog . ## [Modern Drive and Printer Mapping for Cloud-Native Windows with Intune and PowerShell](https://www.tbone.se/2026/06/05/modern-drive-and-printer-mapping-for-cloud-native-windows-with-intune-and-powershell/) _2026-06-05 · Mr T-Bone · Mr T-Bone´s Blog_ Moving to Cloud-native Windows devices solves a lot of old problems, but it also removes some of the assumptions that classic IT automations relied on. Traditional logon scripts, Group Policy-driven mappings, and on-premises management... The post Modern Drive and Printer Mapping for Cloud-Native Windows with Intune and PowerShell appeared first on Mr T-Bone´s Blog . ## [Domainless SAML federation in Microsoft Entra External ID](https://janbakker.tech/domainless-saml-federation-in-microsoft-entra-external-id/) _2026-05-19 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: Domainless SAML federation in Microsoft Entra External ID If you ve ever set up direct federation with a SAML Identity Provider in Microsoft Entra External ID, you ll know the pain. You configure everything correctly, invite a guest user, and then they hit a cryptic error at sign-in: AADSTS5000819: SAML Assertion is invalid. Email address claim is missing or… ## [Use Device Code Flow to register a passkey in Microsoft Authenticator App](https://janbakker.tech/use-device-code-flow-to-register-a-passkey-in-microsoft-authenticator-app/) _2026-05-13 · Jan Bakker · JanBakker.tech_ Check out this article via web browser: Use Device Code Flow to register a passkey in Microsoft Authenticator App The other day, I was doing some research in my lab, and had to register a new passkey a couple of times. At some point, I stumbled upon the device code flow in the Microsoft Authenticator app. I was aware of this flow, but I suddenly realized how easy it is to create a new Read More… ## [Wrap any PowerShell script to Add Remove Programs](https://www.tbone.se/2026/04/30/wrap-any-powershell-script-to-add-remove-programs/) _2026-04-30 · Mr T-Bone · Mr T-Bone´s Blog_ What if your PowerShell script behaved like a real application?I have just updated my old wrapper so that it lets you package any PowerShell script (plus companion files) so it shows up in Settings... The post Wrap any PowerShell script to Add Remove Programs appeared first on Mr T-Bone´s Blog . ## [Microsoft News: Key Announcements from FabCon 2026](https://www.sharepointeurope.com/microsoft-news-key-announcements-from-fabcon-2026/) _2026-03-30 · Alex · ESPC Conference, 2026_ This March, Microsoft hosted the Microsoft Fabric Community Conference 2026 in Atlanta, bringing together over 8,000 attendees from the global data and analytics community. At the event, Microsoft shared several updates relating to Microsoft Fabric, with the FabCon 2026 announcements reinforcing the company’s continued focus on building a unified data platform for the AI era. ... READ MORE The… ## [Install Manifest V3 Extension (Sponsored)](https://crawlproof.com/a/O8JCIOJ4MJAf) _2026-03-30 · **Sponsored**_ Get this Manifest V3 extension from the official TronBrowser Store listing. ## [Cloud Apps support for APPX and MSIX applications (Windows 365 Frontline)](https://www.tbone.se/2026/03/29/cloud-apps-support-for-appx-and-msix-applications-windows-365-frontline/) _2026-03-29 · Mr T-Bone · Mr T-Bone´s Blog_ If you tested Windows 365 Cloud Apps early on, you probably had the same reaction I did, the concept is great to stream just the app but then reality hits. A lot of Microsoft’s newer apps... The post Cloud Apps support for APPX and MSIX applications (Windows 365 Frontline) appeared first on Mr T-Bone´s Blog . ## [My NPU was mostly idle until I realized I could use it for real work by building an app myself](https://www.tbone.se/2026/03/27/my-npu-was-mostly-idle-until-i-realized-i-could-use-it-for-real-work-by-building-an-app-myself/) _2026-03-27 · Mr T-Bone · Mr T-Bone´s Blog_ I attended MVP summit this week and was challenged to checkout a blog on Vibe coding for the MPU. My Intel-based Surface Laptop 7 has a separate chip called an NPU (Neural Processing Unit). Think of it as a small “AI... The post My NPU was mostly idle until I realized I could use it for real work by building an app myself appeared first on Mr T-Bone´s Blog . ## [Microsoft 365 E7 : From BPOS to Frontier Suite](https://www.sharepointeurope.com/microsoft-365-e7-from-bpos-to-frontier-suite/) _2026-03-20 · sean@sharepointeurope.com · ESPC Conference, 2026_ From BPOS to E7: A Short Journey I started working with SharePoint back in 2007, and over the last decade and a half I’ve worked as an enterprise architect and cloud governance specialist in the UK, watching Microsoft’s collaboration and productivity stack evolve from on‑prem farms and BPOS to Office 365, Microsoft 365 E3/E5 and ... READ MORE The post Microsoft 365 E7 : From BPOS to Frontier Suite… ## [I picked a Surface Laptop 7 for sustainability. Then I decided to fact check myself.](https://www.tbone.se/2026/03/18/i-picked-a-surface-laptop-7-for-sustainability-then-i-decided-to-fact-check-myself/) _2026-03-18 · Mr T-Bone · Mr T-Bone´s Blog_ I was polishing a session on Intune device management and I realized I´d been recommending the Surface Laptops to customers as a sustainable choice mostly from muscle memory and good vibes. That bugged me.... The post I picked a Surface Laptop 7 for sustainability. Then I decided to fact check myself. appeared first on Mr T-Bone´s Blog . ## [SharePoint’s New FAQ Web Part: Powered by Copilot](https://www.sharepointeurope.com/sharepoints-new-faq-web-part-powered-by-copilot/) _2026-03-18 · sean@sharepointeurope.com · ESPC Conference, 2026_ There’s a new SharePoint web part, and it’s really exciting – the FAQ web part. This little gem is part of Microsoft 365 Copilot, and let me tell you, it’s going to save you so much time when it comes to creating frequently asked questions for your sites. It actually creates them FOR you! This is ... READ MORE The post SharePoint’s New FAQ Web Part: Powered by Copilot appeared first on ESPC… ## [Retirement of SharePoint One-Time Passcode (SPO OTP) and transition to Microsoft Entra B2B](https://www.sharepointeurope.com/retirement-of-sharepoint-one-time-passcode-spo-otp-and-transition-to-microsoft-entra-b2b/) _2026-03-18 · sean@sharepointeurope.com · ESPC Conference, 2026_ Summary SharePoint One-Time Passcode (SPO OTP) authentication will retire by August 31, 2026, transitioning external sharing and authentication in OneDrive and SharePoint to Microsoft Entra B2B starting May 2026. External users must have Entra B2B guest accounts for access, enabling consistent governance and Conditional Access across Microsoft 365. Introduction We are retiring SharePoint One‑Time… ## [Updates to AI-generated Audio Briefings in Viva Connections and SharePoint](https://www.sharepointeurope.com/relearning-the-basics-getting-comfortable-with-the-new-sharepoint-document-libraries-dupupdates-to-ai-generated-audio-briefings-in-viva-connections-and-sharepoint/) _2026-03-18 · sean@sharepointeurope.com · ESPC Conference, 2026_ Microsoft has enhanced AI-generated audio briefings in Viva Connections and SharePoint. This update brings broader language support to the Viva Connections news reader and introduces AI-generated audio summaries for SharePoint site pages and news posts. Timeline The rollout should be completed for users with a Microsoft 365 Copilot license. Government tenants are excluded from this rollout. What… ## [Relearning the Basics: Getting Comfortable With the New SharePoint Document Libraries](https://www.sharepointeurope.com/relearning-the-basics-getting-comfortable-with-the-new-sharepoint-document-libraries/) _2026-03-18 · sean@sharepointeurope.com · ESPC Conference, 2026_ Microsoft has been rolling out a refreshed look for SharePoint Document Libraries, aligning them more closely with the new OneDrive experience. Visually, it’s clean, modern, and unquestionably consistent with Microsoft’s current design language. Functionally… well, things have moved. A lot. If you’ve been following my Pulse updates, you already know I’m not exactly the biggest ... READ MORE The… ## [Give your data an expiration data: Why smarter sharing is HERE](https://www.sharepointeurope.com/give-your-data-an-expiration-data-why-smarter-sharing-is-here/) _2026-03-18 · sean@sharepointeurope.com · ESPC Conference, 2026_ We’ve all been there: you’re finishing a project, you hit “Share,” and you send a link to “People in my organization.” It feels efficient in the moment, but have you ever thought about that link six months later? Or two years down the line? In our fast-paced digital workspaces, we often leave “digital doors” wide ... READ MORE The post Give your data an expiration data: Why smarter sharing is HERE… ## [Share your Expertise with the Microsoft 365 and AI Community](https://www.sharepointeurope.com/share-your-expertise-with-the-microsoft-365-and-ai-community/) _2026-03-10 · Ella Murphy · ESPC Conference, 2026_ Have you got expertise to share on Microsoft 365 and AI? Then we want to hear from you. Submit to speak at ESPC, Europe’s premium Microsoft 365 and AI conference taking place in Amsterdam Nov 30 – Dec 3 2026. We are seeking submissions covering SharePoint, Copilot, Microsoft 365, AI, Security, Governance, Case Studies and ... READ MORE The post Share your Expertise with the Microsoft 365 and AI… ## [Microsoft News: A Reimagined SharePoint Experience Is on the Way](https://www.sharepointeurope.com/microsoft-news-a-reimagined-sharepoint-experience-is-on-the-way/) _2026-02-24 · Alex · ESPC Conference, 2026_ As we move further into 2026, Microsoft continues to build on the momentum from last year’s announcements. A key development this February is the latest SharePoint 2026 update, which introduces a reimagined SharePoint experience and signals continued investment in collaboration, content management and knowledge sharing across Microsoft 365. SharePoint has long been a central part ... READ MORE The… ## [The Unexpected Enrollment: How Personal Windows Home Devices Slipped into Intune and How You Can Finally Block Them](https://www.tbone.se/2026/02/20/the-unexpected-enrollment-how-personal-windows-home-devices-slipped-into-intune-and-how-you-can-finally-block-them/) _2026-02-20 · Mr T-Bone · Mr T-Bone´s Blog_ Introduction For years, IT administrators have relied on Microsoft Intune’s enrollment restrictions to keep personal Windows devices, especially those running Windows Home editions, out of their managed environments. Yet, despite careful configuration, many organizations... The post The Unexpected Enrollment: How Personal Windows Home Devices Slipped into Intune and How You Can Finally Block Them… ## [ESPC26 Programme Team: Meet Rik Hepworth](https://www.sharepointeurope.com/espc26-programme-team-meet-rik-hepworth/) _2026-02-18 · Ella Murphy · ESPC Conference, 2026_ For ESPC26, we’re happy to welcome Rik Hepworth to the Programme Team. Rik is an MVP (Azure & Developer Technologies) and RD since many years and has spoken at ESPC before in Copenhagen and Amsterdam; and if you’ve ever worked in SharePoint and Azure circles, chances are you’ve crossed paths. He brings a rare mix ... READ MORE The post ESPC26 Programme Team: Meet Rik Hepworth appeared first on… ## [Update Secure Boot Certificate by using Intune Remediation – Take 2](https://www.tbone.se/2026/02/06/update-secure-boot-certificate-by-using-intune-remediation-take-2/) _2026-02-06 · Mr T-Bone · Mr T-Bone´s Blog_ I have had some time to test my scripts and method described in the old blog Update Secure Boot Certificate by using Intune RemediationAnd found a lot of small issues with my previous scripts.... The post Update Secure Boot Certificate by using Intune Remediation – Take 2 appeared first on Mr T-Bone´s Blog . ## [Snyk is shutting down the securityheaders.com API](https://joetiedeman.uk/2026/01/22/snyk-is-shutting-down-the-securityheaders-com-api/) _2026-01-22 · Joe Tiedeman · Joe Tiedeman_ For many in the web security community, securityheaders.com has been a familiar and trusted tool for years. Originally created by Scott Helme, it helped raise the baseline for HTTP security headers across the web, not through flashy reports, but by making the right things visible and measurable. Over time, the project evolved: In April 2025, \[ \] ## [Start working with Security Baseline Mode: Don´t be scared!](https://www.tbone.se/2026/01/13/start-working-with-security-baseline-mode-dont-be-scared/) _2026-01-13 · Mr T-Bone · Mr T-Bone´s Blog_ When I first heard about Security Baseline Mode, I assumed it was a one‑time setting: flip the switch once and all future recommendations would roll in automatically. Simple, right? But as I started working... The post Start working with Security Baseline Mode: Don´t be scared! appeared first on Mr T-Bone´s Blog . ## [Update Secure Boot Certificate by using Intune Remediation](https://www.tbone.se/2026/01/09/update-secure-boot-certificate-by-using-intune-remediation/) _2026-01-09 · Mr T-Bone · Mr T-Bone´s Blog_ Blog post has a new update here Update Secure Boot Certificate by using Intune Remediation – Take 2 – Mr T-Bone´s Blog If you manage Windows devices, there’s a “quiet” platform change you really... The post Update Secure Boot Certificate by using Intune Remediation appeared first on Mr T-Bone´s Blog . ## [Zone Files: The Only Authoritative Source and Why They’re Still Hard](https://joetiedeman.uk/2026/01/02/zone-files-the-only-authoritative-source-and-why-theyre-still-hard/) _2026-01-02 · Joe Tiedeman · Joe Tiedeman_ When people talk about “total domain coverage”, they’re often talking past one another. Some mean registration. Some mean DNS resolution. Some mean recent activity. These are related, but they are not the same thing. A zone file is the registry’s authoritative publication. It shows which domains are delegated in DNS under a top-level domain (TLD) \[ \] ## [Why You Should Enable Apple’s Stolen Device Protection Today](https://joetiedeman.uk/2025/10/03/why-you-should-enable-apples-stolen-device-protection-today/) _2025-10-03 · Joe Tiedeman · Joe Tiedeman_ Smartphones have become far more than communication devices they’re the keys to our digital lives. Banking apps, email, photos, passwords, health data, even the ability to unlock your front door or car all of it may be accessible through your iPhone. That makes losing it to theft or opportunistic “shoulder surfing” more dangerous \[ \] ## [One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens](https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/) _2025-09-17 · Dirk-jan Mollema · dirkjanm.io_ While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant. The vulnerability…