Microsoft Cloud & Infrastructure Blog
This is my blog section. In my blog posts at this website I will dive into Microsoft Cloud solutions, basic Infrastructure and some other guides and topics. Here all new blog posts will be showed categorized in years with my newest post up top.
From the left, you can find all my post categories ordered in folders which can be expanded. On the right you can find the various tags and categories and on any blog page you can find the Table of Contents.
Automatically clean up inactive Entra ID devices using Azure Automation
Over time, Microsoft Entra ID environments often become filled with old and inactive devices. Cleaning up these devices manually takes time and is easy to forget. By using Azure Automation, we can fully automate this process and remove devices that have been inactive for more than...
What is MTA-STS and how to use it to protect your email flow
In this post I will be configuring MTA-STS for better email security alongside the theoretical explaination including different hosting options you can use.
Encrypt your Microsoft 365 emails with S/MIME
A great way to encrypt your Microsoft 365 outbound emails using a similar technique as SSL is to use S/MIME. In this guide I will show you how to get certificates and configure S/MIME for your mailboxes.
10 scripts for Ubuntu MDM with Microsoft Intune
In this post I will share 10 simple scripts for basic device administration tasks on Ubuntu endpoints.
Important action: Configure additional authentication for Bitlocker leaks
For years, Bitlocker was a relatively secure protocol to encrypt your hard drives of your computer. However,recent multiple reports surfaced around attacks targeting BitLocker protected devices. Techniques like YellowKey and GreatXML focus on extracting BitLocker secrets from memory or abusing the boot process when devices are...
Adding Ubuntu endpoints to Microsoft Intune
In this post, I will be installing an Ubuntu Desktop instance and join it to Microsoft Intune to leverage Device Management on Ubuntu devices including some extra steps for proper device management.
Disable Teams Premium Trial Button
If you see an “Unlock Teams Premium” button in Microsoft Teams, you’ll probably also have users who click it right away and start a trial. For most orgs, that’s not the experience you want. In this post, I’ll show you two ways to remove that button,...
What is TLS-RPT and how to configure
In this post I will explain TLS-RPT which is an email security reporting mechanism that gives you reports about TLS encryption problems for incoming email to your domain. In this guide, I will explain what TLS-RPT is, how it works and how you can configure it...
Use Session Shadowing with Azure Virtual Desktop
We can use Session Shadowing to help a user by taking over their Azure Virtual Desktop session without the use of 3rd party software. However, this is disabled by default for security reasons, but in this post I will show you how to configure Session Shadowing...
Fixing CVE-2026-41089 on Windows Server
Microsoft released security updates for multiple Windows Server versions to address CVE-2026-41089. This vulnerability is rated as important and affects all supported Windows Server versions, including ESU editions of Windows Server 2012 and 2012 R2. This vulnerability affects the Windows Netlogon service, a core component used...