A while back Microsoft introduced the ability to use Third party Mobile Device Management compliance data for Intune and Azure AD device compliance and therefore Azure AD Conditional Access. Obviously the recommendation is to use Intune for Mobile Device Management, but there might be scenarios where that is not possible Read more…
After couple of weeks spring version of Microsoft Ignite is in the calendar and a lot of new announcements (at least I believe so). In the beginning of this week I noticed a new Authentication method in Azure AD Portal called Temporary Access Pass. On Monday there wasn’t any documentation Read more…
I had a session about protecting all your cloud applications with Azure AD and Cloud App Security from unmanaged devices in Nordic Virtual Summit 2021 on 10.2.2021. I wrote this article to carry out pretty much the same content than that session. Centralized identity There are many reasons to centralize Read more…
Traditionally desktop or app virtualization specialists have been creating a standardized golden image for the virtualization environment. It has been a normal way and almost no one has challenged it. BUT NOW! Welcome to my world. One day me and my colleagues thought, why on earth we are creating the Read more…
I assume you are familiar with Android Enterprise so I wont waste space explaining it. The reason why many organizations are moving to Android Enterprise is because Google has deprecated the previous Android Device Admin mobile device management mode. Contents of this post include: Android Enterprise Management modes Work Profile Read more…
What is Azure AD Privileged Identity Management? I’m not going into the basics of PIM but you can read it from Microsoft Docs. I strongly recommend to spend the extra budget and effort and deploy PIM which requires Azure AD Premium P2 license. In general PIM helps you to gain Read more…
Executive summary: Do you lock your datacenter with old and poorly protected keys eg. Abloy Classic? Yup, me neither. You need to start enforcing multifactor authentication for privileged actions and/or accounts. Like yesterday. The Problem Protecting admin interfaces is crucial as we know that if someone gets to stand next Read more…
eSIM (embedded SIM) also known as an eUICC (embedded universal integrated circuit card) is a modern – next generation programmable SIM-card for cellular mobile networks. eSIM chips have been available in several smart watches and mobile devices for couple of years, but Apple and Google have restricted the programming of Read more…
After several customer implementations I wanted to discuss about Microsoft Intune MDM automatic enrollment methods and their small caveats related to Multi-Factor Authentication (MFA). We all know the importance of MFA in today’s cloud security and using it with Intune enrollments is a really nice security addition in the process. Read more…
About six months ago I started a blog post series where I was supposed to write also about Zero-touch enrollment. I wrote then two posts about Mobile device Automatic Enrollment: Mobile Device Automatic Enrollment 1/3 – DEP Mobile Device Automatic Enrollment 2/3 – KME My plan was also write from Read more…