Practical guides forarchitects
Enterprise M365 architecture, endpoint management, security baselines, and infrastructure automation. Deep dives with companion code you can use today.
20+
Articles
49
Topics
M365
Focus
Free
Always
Entra Connect Sync: Why Auto-Upgraded Servers Fail in April
Entra Connect Sync fails on 7 April 2027 unless it runs 2.6.84.0 or later with application-based authentication. Auto-upgrade does not set it.
Entra Connect Sync: Why Auto-Upgraded Servers Fail in April
Entra Passkey Migration: The Default Problem
On 1 September 2026 Entra put SMS and voice users into a passkey profile with attestation off. What it costs you, and the runbook change it forces.
Entra Passkey Migration: The Default Problem
Entra ID Directory Enumeration: The Attack Map
A default member in Entra ID can enumerate the whole directory: every user, group, service principal and role assignment. The controls that narrow it.
Entra ID Directory Enumeration: The Attack Map
Giving Claude a Second Brain
How I gave Claude persistent memory in Postgres: an MCP server with per-project isolation enforced by database roles, not application code.
Giving Claude a Second Brain
M365 Add-On Costs: Evaluation Framework
Control M365 add-on costs: a five-question framework for Intune Suite, Entra ID Governance, Copilot, and Purview, plus a PowerShell audit script.
M365 Add-On Costs: Evaluation Framework
More Articles
View allGet the next one by email
Long, specific write-ups on M365 architecture and security, worked out against real tenants rather than summarised from documentation. Sent rarely, and only when it is worth your time.