Intune Cloud PKI: Certificates Without a Certificate Server
Reading Time: 5 minutesIntune Cloud PKI issues device certificates for Wi-Fi and VPN without on-premises servers. Pick a model, build the CAs, and deploy SCEP profiles.
gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Intune Zero Touch Deployment
Reading Time: 4 minutesHow Intune zero touch deployment actually works, how Dell registers the hardware hash before shipping, and how to authorize drop shipping straight to a new hire.
