MSSP9 min read
Onboard a Client into Intune Fast and Safely
The step-by-step method to bring a new client tenant into Intune with no lockouts or surprises.
Read articleBlog
Practical guides on Microsoft 365 security, Intune and compliance.
MSSP9 min read
Bill Compliance-as-a-Service to Your Clients
The pricing models to bill compliance-as-a-service in a recurring and profitable way.
Read articleSecurity9 min read
Microsoft 365 Business Premium: Is the Security Worth It?
What Business Premium adds on security, and whether the upgrade is worth its price for an SMB.
Read articleIntune9 min read
MDM vs MAM: The Difference and When to Use Each
MDM or MAM? The difference explained simply, with the use cases to choose well.
Read articlemacOS9 min read
Intune vs Jamf for Macs: A Fair Comparison
Intune or Jamf for your Macs? A factual comparison of each solution's strengths.
Read articleMigration9 min read
Intune vs GPO: Why and How to Migrate
GPO or Intune? A factual comparison and a method to migrate your devices without breaking things.
Read articleIntune8 min read
Securing Remote-Work Devices With Intune
Your remote-work devices are outside the walls. Here's how to keep them safe with Intune.
Read articleSecurity8 min read
Regain Control Over Shadow IT in Your SMB
Shadow IT exposes your data without your knowledge. Take back control, without holding your teams back.
Read articleSecurity8 min read
Ransomware in SMBs: Prevention on the Endpoints
Ransomware enters through an endpoint. Here are the concrete protections that block its path.
Read articleSecurity8 min read
Protecting Employees From Phishing
Awareness has limits. Here are the technical controls that protect even after the click.
Read articleSecurity8 min read
Company Laptop Stolen: What to Do Within the Hour
A stolen laptop is only a disaster if it isn't encrypted and managed. Here's the right reflex.
Read articleSecurity8 min read
Stolen Password: Protecting Your Business
A stolen password opens nothing when MFA and Conditional Access are in place.
Read articleCompliance8 min read
Data Breach: The 72-Hour GDPR Notification
72 hours to notify a data breach. Anticipate it, and cut the risk at the source.
Read articleSecurity8 min read
Compromised Microsoft 365 Account: How to Respond
Microsoft 365 account hacked? Every minute counts. Here are the moves that take back control.
Read articleCompliance8 min read
Track the CVEs Affecting Your Company's Software
A CVE only matters if the affected software runs in your org. Here's how to connect the two.
Read articleDeployment8 min read
Keep Your Apps Updated Automatically via Intune
No more manual updates, machine by machine. Here's how to automate app patching at scale.
Read articleIntune8 min read
Build Your Fleet's Software Inventory with Intune
You can only secure what you know. The software inventory is the foundation of any patch strategy.
Read articleGDPR8 min read
Health Data: Securing the Devices That Access It
Encryption, compliance, isolation: the endpoint measures to handle health data with confidence.
Read articleDeployment8 min read
Managing Third-Party App Patches Across the Fleet
Security's blind spot: unpatched third-party software. Here's how to fix it at scale.
Read articleCompliance8 min read
Detect the Vulnerable Apps Across Your Fleet
You can only fix what you can see. Here's how to spot the vulnerable apps on your fleet.
Read articleDeployment8 min read
Deploy and Update Chrome and Firefox via Intune
The browser is attackers' first target. Here's how to deploy it and keep it current at scale.
Read articleCompliance8 min read
Cyber Insurance: The Technical Requirements to Meet
What your cyber insurer actually checks, and how to tick every box without PowerShell.
Read articleMSSP8 min read
Answering a client security questionnaire quickly and well
Answer a security questionnaire quickly and credibly, backed by evidence.
Read articleCompliance8 min read
Compliance evidence: the dated coverage report
How to turn your security measures into dated, exportable compliance evidence.
Read articleIntune8 min read
An endpoint security policy template you can enforce
An endpoint security policy template and how to enforce it technically.
Read articleConditional Access8 min read
Phishing-resistant MFA: moving to FIDO2 passkeys
Why FIDO2 passkeys protect where SMS and OTP codes fail, and how to enforce them.
Read articleISO 270018 min read
ISO 27001 Annex A: from controls to concrete measures
Map ISO 27001 Annex A controls to concrete, verifiable Intune measures on your endpoints.
Read articleDORA8 min read
DORA: what IT resilience means for your endpoints
What DORA concretely implies for endpoint resilience and security.
Read articleConditional Access8 min read
Blocking IMAP, POP and basic SMTP: closing the MFA gap
How to shut down the legacy authentication that lets attacks through despite MFA.
Read articleMicrosoft 3658 min read
Preparing a Microsoft 365 security audit: the method
The areas to check and the evidence to gather before a Microsoft 365 audit.
Read articleConditional Access8 min read
Report-only mode: test Conditional Access safely
Test your Conditional Access rules under real conditions, without ever blocking anyone.
Read articleConditional Access9 min read
Protect admin accounts: compliant device plus MFA
Your admin accounts deserve hardened protection: strong MFA and a compliant device, required.
Read articleConditional Access9 min read
Require a compliant device to access Microsoft 365
Allow Microsoft 365 access only from healthy, compliant, managed devices.
Read articleIntune8 min read
Lost phone: full remote wipe or work-only wipe?
Wipe the whole device or only work data: which option to choose when a phone goes missing.
Read articleBYOD8 min read
BYOD and Microsoft 365: secure data, keep phones private
Protect work data on personal devices without monitoring your employees' private life.
Read articleConditional Access9 min read
Block Sign-ins from Risky Countries
Block sign-in attempts coming from countries where your business has no activity.
Read articleBYOD9 min read
Block copy-paste from work to personal apps on mobile
Stop work data from leaving Outlook or Teams for personal apps on mobile devices.
Read articleConditional Access9 min read
Microsoft 365 Conditional Access: the plain-language guide
Finally understand Conditional Access: conditions, grant controls and report-only mode, explained simply.
Read articleMobility8 min read
Enterprise iPhone Restrictions with Intune
Harden enrolled iPhones: passcode, auto-lock and controlled sensitive features.
Read articlemacOS8 min read
Block iCloud, AirDrop and Caching on Managed Macs
Prevent work-data leaks on Macs by disabling iCloud, AirDrop and content caching.
Read articleMobility9 min read
Protect Mobile Data with MAM, No MDM Needed
Protect your work apps on mobile with MAM, without enrolling the personal phone.
Read articleMobility9 min read
Android Work Profile with Intune
Separate work and personal on Android with an encrypted, walled-off work container.
Read articlemacOS8 min read
Gatekeeper and SIP: a macOS Compliance Baseline
Make Gatekeeper and SIP a continuously verified macOS compliance baseline.
Read articlemacOS9 min read
Deploy a .pkg App to Macs with Intune
Deploy a .pkg app to your Macs via Intune with bundleId detection.
Read articlemacOS9 min read
Deploy Defender for Endpoint on macOS
Protect your Macs with Defender for Endpoint: real-time and cloud protection via Intune.
Read articleCompliance8 min read
Mobile Compliance in Intune for iOS and Android
Block jailbreak, outdated OS and missing encryption, and feed Conditional Access.
Read articleSecurity8 min read
Windows ASR rules: block macros and ransomware
Defender's ASR rules shut the doors attackers prefer, deployed cleanly through Intune.
Read articleSecurity8 min read
Configure the Windows firewall with Intune
A consistent host firewall across the fleet: inbound blocked, three profiles, deployed by Intune.
Read articlemacOS8 min read
macOS firewall via Intune: stealth mode, Gatekeeper
Application firewall, stealth mode and Gatekeeper: harden macOS uniformly through Intune.
Read articlemacOS8 min read
Force macOS software updates with Intune
Enforce critical macOS updates as soon as they ship and prove your patch cadence.
Read articlemacOS8 min read
Enroll Macs in Intune: ADE or BYOD
Two paths to manage Macs in Intune: automated enrollment or Company Portal.
Read articleEncryption8 min read
FileVault on Mac via Intune with recovery key
Encrypt your Macs with FileVault and escrow the recovery key to Intune, with no lockout risk.
Read articleSecurity8 min read
Disable local admin accounts on Windows
Neutralise inherited privileged accounts and enforce least privilege through Intune.
Read articleEncryption8 min read
Encrypt USB drives with BitLocker To Go
Encrypt USB sticks and external drives via Intune so a loss never becomes a leak.
Read articleSecurity9 min read
Windows LAPS with Intune: Secure the Local Admin
A unique local admin password per PC, rotated and recoverable from Entra ID.
Read articleIntune8 min read
Windows Autopilot: Provision a PC Without Touching It
Zero-touch for Windows PCs: how Autopilot changes the way a new machine is delivered.
Read articleSecurity8 min read
Windows Password Policy with Intune
Length, complexity, auto-lock and lockout: a password baseline applied across the whole fleet.
Read articleIntune8 min read
Enrolling Windows PCs into Intune
The enrollment paths for Windows PCs in Intune, and how to pick the right one.
Read articleSecurity8 min read
Deploying Defender Antivirus with Intune
Configure and manage Microsoft Defender Antivirus from Intune, no PowerShell.
Read articleIntune8 min read
Setting Up Microsoft Intune for the First Time
The Intune onboarding path, from tenant to first policies, with no step skipped.
Read articleSecurity8 min read
Blocking USB Drives on Windows with Intune
Block or restrict USB drives on Windows without breaking the peripherals you need.
Read articleIntune8 min read
Windows Update Rings with Intune
Drive Windows updates in rings, with enforced deadlines and controlled reboots.
Read articleGDPR9 min read
GDPR and endpoints: the measures regulators expect
Turn GDPR Article 32 into concrete measures on your devices.
Read articlemacOS9 min read
Manage a fleet of Macs in the enterprise with Intune
The baseline for managing enterprise Macs, without being an Apple expert.
Read articleDeployment8 min read
Deploy a Windows application with Intune without winget
Deploy the real installer, not a winget command, across the fleet.
Read articleConditional Access8 min read
Break-glass account: exclude it from Conditional Access
The safety net you need before enabling Conditional Access.
Read articleConditional Access8 min read
Make MFA mandatory on Microsoft 365 without lockouts
Roll out MFA safely, with an anti-lockout safety net.
Read articleEncryption8 min read
Enable BitLocker on every Windows PC remotely
Encrypt the whole Windows fleet and secure recovery keys, remotely.
Read articleMSSP9 min read
MSSP: manage Intune security for many clients
Industrialize Microsoft 365 security across a client portfolio.
Read articleCompliance9 min read
NIS2 for SMBs: the technical checklist for endpoints
What NIS2 requires on endpoints, and how to prove it with Intune.
Read articleIntune9 min read
Secure Microsoft 365 without a consultant: the full guide
Intune's essential protections, explained and deployable in a few clicks — no jargon.
Read article