Authentication Policy Silos
Reading Time: 4 minutesAuthentication Policy Silos and the Protected Users group contain admin credentials so a stolen Tier 0 login cant be cached or replayed. Here’s how to set up both.
Intune: Who Can Actually Enroll a Device
Reading Time: 5 minutesWho can actually enroll a device into Intune, how MDM user scope and enrollment restrictions control it, and when to use a Device Enrollment Manager account for kiosks.
Simple Room Resources: Setting Up Room Calendars in Exchange Online
Reading Time: 8 minutes If you are new to Microsoft 365 administration, simple room resources are one of the first things people will ask you to fix. Someone double-booked the big conference room. A meeting got auto-declined for no clear reason. The room shows up in…
GPOs with PowerShell
Reading Time: 5 minutes Every AD environment I’ve inherited has had the same problem. Hundreds of GPOs, half of them doing nothing, and nobody willing to delete any of them because nobody knows which ones are actually in use. So they sit there. They slow down…
