Practical guides forarchitects
Enterprise M365 architecture, endpoint management, security baselines, and infrastructure automation. Deep dives with companion code you can use today.
22+
Articles
49
Topics
M365
Focus
Free
Always
Enrolment Is the New Perimeter
Attackers win the account when a credential is registered, and Microsoft's enrolment schedule gives them the pretext. Gate it before 1 February 2027.
Enrolment Is the New Perimeter
Session, Not Sign-In: What MFA Leaves Unchecked
MFA and Conditional Access decide at sign-in; the token lives for hours or days. What CAE, token protection and revocation cover, and what they miss.
Session, Not Sign-In: What MFA Leaves Unchecked
Entra Connect Sync: Why Auto-Upgraded Servers Fail in April
Entra Connect Sync fails on 7 April 2027 unless it runs 2.6.84.0 or later with application-based authentication. Auto-upgrade does not set it.
Entra Connect Sync: Why Auto-Upgraded Servers Fail in April
Entra Passkey Migration: The Default Problem
On 1 September 2026 Entra put SMS and voice users into a passkey profile with attestation off. What it costs you, and the runbook change it forces.
Entra Passkey Migration: The Default Problem
Entra ID Directory Enumeration: The Attack Map
A default member in Entra ID can enumerate the whole directory: every user, group, service principal and role assignment. The controls that narrow it.
Entra ID Directory Enumeration: The Attack Map
More Articles
View allGet the next one by email
Long, specific write-ups on M365 architecture and security, worked out against real tenants rather than summarised from documentation. Sent rarely, and only when it is worth your time.