What Is WIP? Windows Information Protection User Scope
Reading Time: 5 minutesWhat is WIP? Windows Information Protection, formerly Enterprise Data Protection, plus how the WIP user scope, protection modes, and platform matrix worked.
Android Enterprise Management Types, Without the Acronym Soup
Reading Time: 7 minutesAndroid Enterprise management types without the acronym soup: personally owned work profile (BYOD), COPE, fully managed (COBO), and dedicated (COSU), plus how each one enrolls.
Group Policy to Intune: Migrating Settings to the Settings Catalog
Reading Time: 5 minutesMoving from Group Policy to Intune? Use Group Policy analytics to import your GPOs, see whats supported, and migrate settings into the Intune Settings Catalog.
iOS/iPadOS Enrollment Methods in Intune, Bulk and Single
Reading Time: 6 minutesEvery iOS/iPadOS enrollment method in Intune, bulk and single, personal and corporate, with step by step setup, the supervised vs user affinity matrix, and gotchas.
AI and Docker: Let Claude Code Build Your LAMP Stack
Reading Time: 5 minutesHow AI and Docker work together: point Claude Code at an empty folder and have it build a LAMP stack with a basic HTML page, from compose file to running containers.
gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Intune Zero Touch Deployment
Reading Time: 4 minutesHow Intune zero touch deployment actually works, how Dell registers the hardware hash before shipping, and how to authorize drop shipping straight to a new hire.
Microsoft Entra Connect: A Simple Setup and Hardening Guide
Reading Time: 5 minutesA step-by-step setup guide for Microsoft Entra Connect, covering server hardening, directory user permissions, and writeback configuration.