Blog
This is my blog section. Here all new blog posts will be showed in reverse-chronological order. Just a fancy way to say newest-top.
At the left, you can view the categories, and on the right you can find the tags and Table of contents.
The art of Dynamic Groups in Microsoft Entra
Thursday, August 13, 2026 in Microsoft Entra
Categories:
8 minute read
Dynamic Groups are really great for automating certain things. They are basically like groups like we know them for several years but they always required some sort of manual action or assignment. Dynamic Groups will help us eliminating this. I will …
Entra ID Authentication on Azure Windows VM
Thursday, July 30, 2026 in Microsoft Azure
Categories:
7 minute read
Prerequisites Before starting, ensure the following requirements are met: The AADLoginForWindows VM extension is installed The required users have an applicable role for VM login A System Assigned Managed Identity is enabled A RDP whitelist is …
Session Shadowing with Entra ID on Azure Virtual Desktop
Thursday, July 23, 2026 in Azure Virtual Desktop
Categories:
7 minute read
We can use Session Shadowing to help a user by taking over their Azure Virtual Desktop session without the use of third-party software. This is disabled by default for security reasons, but in this post, I will show you how to configure Session …
Microsoft Defender External Attack Surface Management (EASM)
Sunday, July 19, 2026 in Microsoft Defender XDR
Categories:
5 minute read
What is Defender External Attack Surface Management (EASM)? Microsoft Defender External Attack Surface Management (EASM) is a separate Defender solution which can be used to defend and monitor some of your external attack surfaces, like: Websites IP …
Cross-Tenant Message Recall in Exchange Online
Thursday, July 16, 2026 in Microsoft 365
Categories:
4 minute read
How the message recall feature works We have all been there. A email is sent and you forgot to add the attachment or the wrong recipient. Exchange Online already has the feature recall messages inside your own tenant but now the cross tenant recall …
Getting started with Terraform
Thursday, July 09, 2026 in Microsoft Azure
Categories:
9 minute read
Terraform described Terraform is a framework built by Hashicorp that lets you manage cloud infrastructure for Azure and Amazon Web Services using text files only. This does it by talking with the Azure Resource Manager API, the underlying system that …
Configuring Intune Enrollment DNS records: Nonsense or required?
Thursday, July 02, 2026 in Microsoft Intune
Categories:
4 minute read
When you configure Microsoft Intune and/or custom domains in Microsoft 365, one of the recommendations you will often see is to create DNS CNAME records like: enterpriseenrollment.contoso.com enterpriseregistration.contoso.com A lot of us IT guys …
Automatically clean up inactive Entra ID devices using Azure Automation
Thursday, July 02, 2026 in Microsoft Azure
Categories:
9 minute read
Requirements An Azure subscription PowerShell 7 installed Microsoft Graph PowerShell module installed Basic knowledge of PowerShell Basic knowledge of Microsoft Graph Around 30 minutes of your time Azure Automation vs. Logic Apps Azure Automation …
What is MTA-STS and how to use it to protect your email flow
Sunday, June 28, 2026 in Email security
Categories:
15 minute read
Requirements Around 30 minutes of your time Access to your domains’ DNS hosting to create DNS records An Azure Subscription if you want to publish your policy with a Static Web App A Github account if you use this option An Azure Subscription …
Encrypt your Microsoft 365 emails with S/MIME
Thursday, June 25, 2026 in Microsoft 365
Categories:
12 minute read
S/MIME explained S/MIME means Secure / Multipurpose Internet Mail Extensions. It’s an email security standard defined by the Internet Engineering Task Force which allows you to encrypt your email messages and attachments sent. In simple terms: It …