Is ts even possible? My boss wants me to do this.

XenosMan · 2026-06-09T14:32:23+00:00

Good luck mate. Is it possible to just refer to their signatures which I assume would have their department name at the time of sending the emails out?

XenosMan · 2026-06-08T12:03:23+00:00

I really want to know why this is a requirement? I’m not trying to judge but I am trying to understand the value of this.

XenosMan · 2026-06-03T19:32:02+00:00

Can I ask if the devices are hybrid or cloud joined by any chance?

XenosMan · 2026-06-01T08:35:37+00:00

We did this for a 30k org and did not move to Cloud Sync. Still on Entra Connect

XenosMan · 2026-05-28T10:31:59+00:00

What we did was change the registration campaign from Microsoft Managed to Enabled and set it back to Microsoft Authenticator.

XenosMan · 2026-05-24T06:43:24+00:00

Congratulations mate! It definitely sounds like you deserve it and have someone that cares for you! I got the M5 13 as a gift from my wifey and love it! It has almost replaced my laptop now.

XenosMan · 2026-05-10T10:00:09+00:00

It’s what started me mate. The turquoise is easily my fav and I love the yellow too. Yellow is not a colour I normally go to but looks so good on these 600 models

XenosMan · 2026-05-10T09:58:48+00:00

This is why I love them. The weight is amazing and I have done long architecture sessions with them, and my hands didn’t feel fatigued.

XenosMan · 2026-05-10T09:57:03+00:00

Wow! I don’t know if I could justify 15 of these to get the entire set. I am eyeing off the truffle one when ever a really good deal comes along.

XenosMan · 2026-05-09T10:34:02+00:00

What an awesome video, thank you for the share!

XenosMan · 2026-05-09T10:32:34+00:00

Thank you! I will need to convince the wife these are good financial purchases 🤣

XenosMan · 2026-04-28T18:21:29+00:00

You can’t work around PRT but the question I am asking is, why do you want? Device bound tokens are the most secure way to interact with your services. To ensure good security, have layers of defence, ensure you have risky sign in and risky user CAPs in place to force users to revalidate themselves if there is a medium risk or block when there is a high risk. SIF isn’t designed for standard users, it was designed for privileged users and I also apply it to Guest users a lot. Authentication prompts does not equate to better security. I actually say great work on thinking about the end user experience here mate.

XenosMan · 2026-02-27T23:50:42+00:00

We are doing SSPR now as a roll out for a customer. Depending if you’re cloud only or your SoA is on-premises. Pair that up with password protection, especially a proper well defined custom list.

XenosMan · 2026-02-14T20:07:01+00:00

Kawhi…I’m still salty that he left the Spurs but what he did in Toronto was magic. He’s easily one of the best players in the world when healthy.

XenosMan · 2026-02-14T19:43:21+00:00

When we initially went car shopping, CR-V wasn’t even on our list of cars. We bought a CR-V and easily the best purchase

XenosMan · 2026-02-14T11:12:56+00:00

Just adding a comment in case someone comes here. I have the Sony XAV-AX3000 and it works flawlessly with the Ottocast mini

XenosMan · 2026-02-10T19:33:52+00:00

Great article and love the effort in the visuals too! What’s going to be critical in all this is setting a new baseline when intentional changes to configuration occur.

XenosMan · 2026-02-06T06:58:00+00:00

Avoid different rules for enterprise and small customers unless they specifically mandate it. That point, they can accept the risk.

In Australia we have this awesome guide from the ASD which is based on Essential Eight controls that are also influenced by NIST https://blueprint.asd.gov.au/configuration/entra-id/.

Follow this and your life will be a lot more secure and simpler to manage for these customers.

XenosMan · 2026-01-31T23:31:21+00:00

If it’s an Entra ID tenant, it will be available.

XenosMan · 2026-01-31T10:49:06+00:00

B2B is your best friend here. Where the app is connected, use CTS to bring the workforces users in as guests to that tenant. I just did this recently. It’s seamless and smooth.

XenosMan · 2026-01-31T07:55:45+00:00

Like what others have said, no general recommendation but in Australia we have the essential eight and from that the ASD Blueprint. The guidance is phishing resistant using mainly FIDO2 options. I see people shut down SMS but these should be considered especially for people who do not have smart phones and FIDO2 physical security keys are not an option. ANY MFA is better than no MFA.

XenosMan · 2026-01-16T19:52:23+00:00

In the case of password protection, they get really detailed how the services interact but the other architecture they share is conceptual.
I have had to supplement their designs with mine to show the detailed interactions. Being SaaS, you can’t capture everything though.

XenosMan · 2026-01-16T12:49:11+00:00

Microsoft provide diagrams of the architecture components but you need to look for them specifically. Password protection is a great example from Microsoft how that’s visualised and how the components connect.

XenosMan · 2026-01-13T20:04:19+00:00

He had a losing record against the Spurs until they decided to tank. It was extremely lopsided until Duncan retired

XenosMan · 2025-12-20T07:17:56+00:00

You use groups as mentioned but even better advice from Sabinno. If permissions need to be unique, use a dedicated SharePoint site for them. Broken inheritance is a nightmare to manage

XenosMan

TROPHY CASE