The archive
Every field note, sorted by the system that tends to break it. Pick an area below, or jump straight to the latest.
34 notes · 5 areas
Conditions by area
Pick the system that's acting up.
Latest notes
RSS feed-
Taking Back Control: Windows LAPS and Local Admin Management via Intune
A simple, opinionated guide to deploying Windows LAPS to cloud-native devices and reclaiming control of the local Administrators group using Intune.
-
The Outlook Issue That Wasn't Outlook: A NetScaler LAS Licensing War Story
How an Outlook connectivity incident that looked like Exchange or TLS trouble turned out to be a NetScaler license drop after Citrix LAS migration.
-
Multi Admin Approval in Intune: Because One Admin Shouldn't Rule Them All
A practical guide to setting up Multi Admin Approval in Microsoft Intune — what it protects, how to configure it, how to harden it with Restricted Administrative Units, and why your future self will thank you for not letting a single compromised account nuke your tenant.
-
Autopilot Hybrid Entra Join via Entra Kerberos (Preview): The Fix We've Been Waiting For?
A complete guide to the new Entra Kerberos based Hybrid Join. Is it enough to save Hybrid Autopilot, or should we all just go Cloud Native?
-
The IT Admin's Guide to Horses: What Equines Can Teach Us About Enterprise Architecture
A lighthearted exploration of what horses and horsemanship can teach IT professionals about building resilient, scalable, and well-managed enterprise environments.
-
No VPN, No Internet: Building a Windows Firewall Kill Switch for FortiClient with Intune
How to prevent Windows 11 devices from accessing the internet when not connected to corporate VPN using Windows Firewall and Intune — and all the things that go wrong along the way.
-
Passkeys and the Personal Phone Problem – An MFA Update for 2026
An update on MFA in 2026: Microsoft's mandatory MFA enforcement, passkey types (synced vs device-bound), addressing personal phone resistance, and self-enrollment capabilities.
-
ConsentFix - The Quickfix
How to protect your tenant from the ConsentFix OAuth attack by pre-creating and locking down service principals for vulnerable Microsoft first-party apps using PowerShell.