Kenneth van Surksum - MVP

🚀 New Conditional Access Baseline (v2025-10) is now live on GitHub! 👉 github.com/kennethvs/caba… It includes: ✅ JSON export of all CA policies 📄 PDF overview via Merill’s CA Documenter 🧰 Export tooling by Mikael Karlsson Based on my earlier Conditional Access Demystified whitepaper still updated regularly with the latest Microsoft Entra ID practices. Full post 👉 vansurksum.com/2025/10/18/con…

Registration for AppManagEvent 2026 recently opened! Join speakers like Brian Madden, @Timothymangan , @Samilaiho , @Paulacqure, @Mikael_nystrom @ronnipedersen @Jimmoyle , @Tim_Dk , @kennethvs , @pdaalmans and many more. We look forward to welcome you coming fall.

RT @MemSummit: Identity attacks continue to evolve, and so must our defenses. Session : What’s Next After You Mitigated AITM? Speakers ⭐️…

On February 5th, we’re excited to have @pdaalmans and @kennethvs take the stage at MC2MC Connect. Their session, “Essential Tips and Tricks for Today’s Workplace Admin,” is packed with actionable, real-world insights. 🎟️ connect.mc2mc.be #MC2MC #ConnectMC2MC2026

RT @wpninjasnl: 🚀 Speaker Announcement! Excited to welcome Ugur Koc, well-known community contributor and Senior Product Manager at glueckk…

@MihaPecnik That is unintentionally, let me fix that

@kennethvs Just going through this, considering it for a project. I see that CAU005 is missing, is that on purpose?

🚀 New Conditional Access Baseline (v2025-10) is now live on GitHub! 👉 github.com/kennethvs/caba… It includes: ✅ JSON export of all CA policies 📄 PDF overview via Merill’s CA Documenter 🧰 Export tooling by Mikael Karlsson Based on my earlier Conditional Access Demystified whitepaper still updated regularly with the latest Microsoft Entra ID practices. Full post 👉 vansurksum.com/2025/10/18/con…

RT @Mister_MDM: The Intune MDM Device Certificate and its renewal… Next year (around 03/04 of 2025) every single Intune MDM certificate wi…

Microsoft keeps rolling out new #Copilot features at lightning speed, great for innovation, but risky without #governance. In my new blog I share how to bring order to this fast-moving rollout in Microsoft 365 👇 vansurksum.com/2025/10/29/bri…

RT @Mister_MDM: Ever feel like Intune takes its time to apply a policy? That behavior isn’t something new…. it goes back to the original “…

Balancing Control & Convenience — Preventing Edge Password Sync on Unmanaged Devices 🖥️ How to secure Microsoft Edge with: ✔️ Conditional Access ✔️ Edge Management Service ✔️ Smart sign-in restrictions Learn how to block password sync safely 👉 vansurksum.com/2025/10/20/bal…

RT @12Knocksinna: .@Office365 #Entra and #Microsoft365 are formed from many apps. A recent update exposes additional Microsoft 1st party ap…

RT @Mister_MDM: Ever wondered what those S 1 12 1 entries in your Administrators group actually represent With the new AADSidToNameV2Suppo…

When “Block All” in Conditional Access blocks too much… 🔒 Until recently, guest users couldn’t change their MFA methods when you blocked all cloud apps. The My Sign-ins app is now selectable in Conditional Access 🎉 Finally possible: ✅ Limit guests to M365 resources ✅ Keep self-service (MFA, profile) working 🧩 Read how to configure it: vansurksum.com/2025/10/12/con… #EntraID #ConditionalAccess #Microsoft365 #Intune

@wpninjasummit is kicking off soon. All paths lead to Baden.

@Mister_MDM 🙈

Heads up!! Quality Updates During OOBE is been pulled back (again) Microsoft announced it. The Enrollment Status Page finally got a new toggle to enforce updates (or prevent) after Autopilot. I traced how it runs in Autopilot. Now the rollout is again paused. The ESP toggle stays. The Update screen??? That is gone! #Intune #MSIntune #WindowsAutopilot #Windows11 #Windows call4cloud.nl/windows-autopi…

@Mister_MDM 🙈

🚨 KB5065848: The ZDP Update That broke Autopilot and Broke the BitLocker Policies! First, BitLocker policies started failing silently. The event logs showed “applied,” but devices didn't accept the 256-bit encryption. Then, Windows Autopilot devices were stuck on the

RT @identitysummit: 🛡️ Identity #Security at its Best🛡️ Our #IdentitySecurity Track dives deep into the challenges & innovations shaping s…

RT @identitysummit: 🧠 Deep Dive into Identity Management 🧠 Our #IdentityManagement Track brings together top experts to explore the future…

RT @appmanagevent: Join @Kennethvs & @ErikLoef at AppManagEvent on Oct 11 for “Fighting Adversary in the Middle” — a deep dive into de…

When productivity meets flexibility, security must keep up. In this session, Kenneth van Surksum shows how to protect your data in Microsoft 365 and other SaaS apps, without blocking collaboration. Real-world experience, demos, and practical strategies to secure your workplace.