Practical guides forarchitects
Enterprise M365 architecture, endpoint management, security baselines, and infrastructure automation. Deep dives with companion code you can use today.
23+
Articles
49
Topics
M365
Focus
Free
Always
The Global Admin You Did Not Hire
A ConnectWise app added itself to Global Administrator. Why a people-first review misses vendor service principals and Entra agent identities too.
The Global Admin You Did Not Hire
Enrolment Is the New Perimeter
Attackers win the account when a credential is registered, and Microsoft's enrolment schedule gives them the pretext. Gate it before 1 February 2027.
Enrolment Is the New Perimeter
Session, Not Sign-In: What MFA Leaves Unchecked
MFA and Conditional Access decide at sign-in; the token lives for hours or days. What CAE, token protection and revocation cover, and what they miss.
Session, Not Sign-In: What MFA Leaves Unchecked
Entra Connect Sync: Why Auto-Upgraded Servers Fail in April
Entra Connect Sync fails on 7 April 2027 unless it runs 2.6.84.0 or later with application-based authentication. Auto-upgrade does not set it.
Entra Connect Sync: Why Auto-Upgraded Servers Fail in April
Entra Passkey Migration: The Default Problem
On 1 September 2026 Entra put SMS and voice users into a passkey profile with attestation off. What it costs you, and the runbook change it forces.
Entra Passkey Migration: The Default Problem
More Articles
View allGet the next one by email
Long, specific write-ups on M365 architecture and security, worked out against real tenants rather than summarised from documentation. Sent rarely, and only when it is worth your time.