Authentication Policy Silos
Reading Time: 4 minutesAuthentication Policy Silos and the Protected Users group contain admin credentials so a stolen Tier 0 login cant be cached or replayed. Here’s how to set up both.
Entra ID source anchor attribute
Reading Time: 5 minutes So, here I am looking down at a project to create a new domain and migrate users. Normally this isn’t a bad process. You clone the user on the other domain and have them sign in. Use a tool like Profwiz or ADMT (assuming it works). Then I…
Intune Detection Rules
Reading Time: 5 minutes The other day, I was showing a friend how to set up Intune deployments. Then it hit me: I have unique scripts for script detections and things like that here on therandomadmin.com. However, I haven’t really gone through the detection rules for…
What is Azure AD DS
Reading Time: 7 minutes The VPN tunnel was solid. We had split-tunnel traffic, per-user group policies, and MFA layered on Azure AD sign-ins. Nothing fancy, just a Meraki firewall and a bunch of cloud-native users on laptops. Then someone asked for Wi-Fi to…
