Matt White

@Thomas_Live That's a shame. We have process to setup our privileged accounts and was hoping to automate the link in MDI for the two to better track risks

@mattywhi As far as I can see, there’s only the automatic match by strong identifier or the option to create manual links.

[New blog post] Linking Privileged Accounts to Identities in #MicrosoftDefender: Benefits and Use Cases In this article, I cover the key benefits and integration scenarios - focusing on #MicrosoftEntra workforce and privileged accounts. cloud-architekt.net/linking-privil…

@GNRailUK Is this why no Cambridge services are leaving Kings cross at the moment?

🚧 Network Rail are carrying out planned engineering works tonight on parts of the network to maintain and improve the railway. ℹ Details on works taking place & services affected 👇 greatnorthernrail.com/travel-informa…

@ConfigMgrDogs Any plans for this on desktop OS?

MAM for Windows 365 and Azure Virtual Desktop: Now in preview, Microsoft Intune Mobile Application Management (MAM) can provide numerous benefits for iOS/iPad OS and Android clients. Have you ever wondered if you could allow users to… bit.ly/3zS3ekf #Windows #Windows365

For those who need it - with Windows 11 24H2, regedit now has an option to limit your search to a specific subtree 😊

As part of the Azure MFA enforcement rollout, emergency accounts will now need to be registered for MFA. You should typically avoid using MFA methods that have dependencies on other services, such as the Azure MFA service or your mobile carrier. This leaves the following as the three most resilient MFA options: ✅ Certificate-based authentication ✅ Windows Hello for Business ✅ FIDO2 security keys These three methods' only dependency is the core Entra authentication service, which is the same as password authentication that relies on the Entra auth service. Now, when it comes to your emergency access account, the most likely option is to use FIDO2 security keys. Here's why. Windows Hello for Business (WHfB) for emergency access Windows Hello for Business is not a viable option for emergency access accounts. It requires a device that must be frequently updated, constantly connected to the internet for the PRT to be renewed, and there are also the costs and operational overhead associated with the device. Certificate-based authentication for emergency access If you haven't deployed certificate-based authentication, you'll need to set it up and ensure that you use self-signed keys to avoid dependencies on external PKI/CRL infrastructure. Not to mention a smart card and card reader or some other hardware for storing the certificates. FIDO2 security keys for emergency access This essentially leaves FIDO2 security keys, which are simple to enable in Entra ID, require very low or no maintenance, take up little space, can be stored securely, and can be purchased for $25 retail. PS: I've intentionally not included device-bound passkeys in Authenticator as they are currently in public preview, and you most likely don’t want to use them for your emergency access account yet. ------------- Liked this post? Bookmark this and feel free to follow me for more tips on Microsoft Security and Microsoft Entra. Remember to click the bell icon on my Twitter profile. This way Twitter will show you all my posts in your feed so you don't miss anything. Please like, repost to share with others. Thanks!

We are hiring some brand new senior roles to support the digital services we provide across the MoJ 📲⚖️ 📌 Senior Technical Architect 📌 Senior Problem Analyst 📌 Senior Business Relationship Manager Explore all vacancies over on our careers site ⬇️

During our recent all-staff Summit, our teams had the chance to hear from Kiran, Jodie, & Alex, all part of the @MoJGovUK Lived Experience Panel. The group shared their journeys through the justice system & ways we can make a difference for those interacting with it today. ⚖️

I'm #recruiting for a new #TechArch to come and work with me at @Justice_Digital to help shape and structure our unstructured data services. Good knowledge of #SharePoint and #Microsoft365 required. Want to know more - jobtrain.co.uk/justicedigital…

@IntuneSuppTeam Thanks. I know intune is enabled in business premium. But the apps for enterprise product is different to apps for business. Are there gaps in the baseline that would error /not apply in those scenarios

@mattywhi The security baseline can be applied to Microsoft Business Premium licenses, as Intune is included in Business Premium (msft.it/6014cLcEC) and Intune is one prerequisite to deploy security baselines (msft.it/6015cLcEh). Hope this helps! ^MR

.@IntuneSuppTeam can the Microsoft 365 apps fit enterprise security baseline be applied to a Business Premium licensed tenant/user?

@gunsnrosesgirl3 .@MrNigelNg what would Uncle Roger think

Massive wok style machine for cooking large scale 📹 mogumogu_tood twitter.com/tradingMaxiSL/…

@Microsoft365DSC Given the rebrand from AzureAD to EntraID do you see those AAD resources changing any time soon?

We are in preparation of next weeks Breaking Change release. Therefore we are not releasing a new version this week. Check-out all breaking changes (still subject to change until release): microsoft365dsc.com/blog/april-202…

And just like that - We. Are. Live. There will be many more videos to come - please like & subscribe..🙏 @wefixkits?si=ibCZXrQvb_PKrRt2" target="_blank" rel="nofollow noopener">youtube.com/@wefixkits?si=…

Updated my Retrieve Intune Primary user and logon history per device script (Added the serial number to the report) #PowerShell #Intune #Report powershellisfun.com/2023/09/07/ret…

[BLOG] Configure Azure file shares for Entra joined Windows devices and hybrid identities Your devices are Entra joined, but still a file share is needed? Read this blog post and move those shares to the cloud 👇 #MsIntune #Windows #ModernWorkplace inthecloud247.com/configure-azur…

@DocCrom Extended edition I hope

@TerribleMaps @NedStratUCOVI

The North-South divide illustrated by Waitrose

@DocCrom If I had known you were in town would have come find you for a 🍻... Next time