How to Document a New Environment with OneNote
Reading Time: 5 minutesHow to document a new environment in OneNote: the sections you need, linking out to your password manager instead of storing secrets, and using a SharePoint site for shared hosting and files.
Intune Wipe vs Fresh Start vs Retire
Reading Time: 5 minutesIntune wipe vs Fresh Start vs Retire vs Autopilot Reset, what each one actually does, and whether wipe removes BitLocker or Autopilot registration.
What Is WIP? Windows Information Protection User Scope
Reading Time: 5 minutesWhat is WIP? Windows Information Protection, formerly Enterprise Data Protection, plus how the WIP user scope, protection modes, and platform matrix worked.
Android Enterprise Management Types, Without the Acronym Soup
Reading Time: 7 minutesAndroid Enterprise management types without the acronym soup: personally owned work profile (BYOD), COPE, fully managed (COBO), and dedicated (COSU), plus how each one enrolls.
Group Policy to Intune: Migrating Settings to the Settings Catalog
Reading Time: 5 minutesMoving from Group Policy to Intune? Use Group Policy analytics to import your GPOs, see whats supported, and migrate settings into the Intune Settings Catalog.
iOS/iPadOS Enrollment Methods in Intune, Bulk and Single
Reading Time: 6 minutesEvery iOS/iPadOS enrollment method in Intune, bulk and single, personal and corporate, with step by step setup, the supervised vs user affinity matrix, and gotchas.
AI and Docker: Let Claude Code Build Your LAMP Stack
Reading Time: 5 minutesHow AI and Docker work together: point Claude Code at an empty folder and have it build a LAMP stack with a basic HTML page, from compose file to running containers.
gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.