gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
Authentication Policy Silos
Reading Time: 4 minutesAuthentication Policy Silos and the Protected Users group contain admin credentials so a stolen Tier 0 login cant be cached or replayed. Here’s how to set up both.
Does Intune Monitor Your Activity?
Reading Time: 5 minutesDoes Intune monitor your activity? Here’s what Intune actually sees, what it never sees regardless of settings, and how that changes once Microsoft Purview or Defender is added.
Intune: Which License One Do You Actually Need?
Reading Time: 5 minutesConfused about which Intune license you need? Here’s what Plan 1, Plan 2, Suite, Education, Government, and device-only licenses actually cover, and when to use each.
