The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Intune: Who Can Actually Enroll a Device
Reading Time: 5 minutesWho can actually enroll a device into Intune, how MDM user scope and enrollment restrictions control it, and when to use a Device Enrollment Manager account for kiosks.
Simple Room Resources: Setting Up Room Calendars in Exchange Online
Reading Time: 8 minutes If you are new to Microsoft 365 administration, simple room resources are one of the first things people will ask you to fix. Someone double-booked the big conference room. A meeting got auto-declined for no clear reason. The room shows up in…
GPOs with PowerShell
Reading Time: 5 minutes Every AD environment I’ve inherited has had the same problem. Hundreds of GPOs, half of them doing nothing, and nobody willing to delete any of them because nobody knows which ones are actually in use. So they sit there. They slow down…
