Autopilot Device Preparation vs Classic Autopilot and Pre-Provisioning
Reading Time: 5 minutesAutopilot device preparation vs classic Autopilot: what changed, how to set up the new version, how pre-provisioning works, and how to troubleshoot both.
gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Intune Zero Touch Deployment
Reading Time: 4 minutesHow Intune zero touch deployment actually works, how Dell registers the hardware hash before shipping, and how to authorize drop shipping straight to a new hire.
