Practical guides forarchitects
Enterprise M365 architecture, endpoint management, security baselines, and infrastructure automation. Deep dives with companion code you can use today.
18+
Articles
46
Topics
M365
Focus
Free
Always
Entra ID Directory Enumeration: The Attack Map
A default member in Entra ID can enumerate the whole directory: every user, group, service principal and role assignment. The controls that narrow it.
Entra ID Directory Enumeration: The Attack Map
Giving Claude a Second Brain
How I gave Claude persistent memory in Postgres: an MCP server with per-project isolation enforced by database roles, not application code.
Giving Claude a Second Brain
M365 Add-On Costs: Evaluation Framework
Control M365 add-on costs: a five-question framework for Intune Suite, Entra ID Governance, Copilot, and Purview, plus a PowerShell audit script.
M365 Add-On Costs: Evaluation Framework
M365 Solution Architect: What the Role Does
What an M365 Solution Architect actually does: standards ownership, security architecture, licensing strategy, and delivery oversight. Beyond diagrams.
M365 Solution Architect: What the Role Does
Intune Security Baselines vs CIS Benchmarks
Compare Intune security baselines against CIS benchmarks with a PowerShell export-and-diff workflow: ASR deployment and deviation tracking included.
Intune Security Baselines vs CIS Benchmarks
More Articles
View allGet the next one by email
Long, specific write-ups on M365 architecture and security, worked out against real tenants rather than summarised from documentation. Sent rarely, and only when it is worth your time.