Identity, permissions, data and governance checks before agents enter production Technical blog post | Microsoft 365 | Microsoft Entra | Copilot Studio AI agents are starting to appear everywhere in the Microsoft ecosystem. Microsoft 365 Copilot. Copilot Studio. SharePoint. Teams. Azure. Microsoft Foundry. Third-party platforms. Custom applications. And we’re quickly moving past agents that simply…
A practical first pass across identity, privileged access, collaboration, data protection and incident readiness ThatLazyAdmin | September 2026 If an identity was compromised today, what could an attacker actually do with it Start by understanding the tenant Getting access to a new Microsoft 365 tenant is always interesting. Sometimes I open Microsoft Entra and find…
Author: Shaun Hardneck — www.thatlazyadmin.com Most organisations believe they have a proper Joiner, Mover, Leaver (JML) process in place. In reality, many environments are still relying on manual onboarding emails, inconsistent approval chains, shared spreadsheets, and operational workarounds that have evolved over years without proper governance. At first glance, the process appears functional. New users…
Every IT team knows the struggle: a supplier needs SharePoint access, a consulting firm needs to join a Teams workspace, or a subsidiary wants to log into an internal app. What usually happens? Someone invites an external user as a guest, gives them access, and moves on. Fast forward a year — nobody remembers who…
Passwords alone are no longer enough. Phishing attacks, password reuse, and credential stuffing continue to plague organizations. Microsoft Entra ID (formerly Azure AD) supports strong phishing-resistant authentication methods, and one of the most practical options is using a FIDO2-compliant security key like YubiKey. In this guide, we’ll walk through how to set up YubiKey with…
Let’s be honest — we’ve all been there. One day, things are working fine. AD replication is happy, secure channels are intact, logons are snappy. The next? You’re staring at replication failures, secure channel trust issues, and those vague “RPC server is unavailable” errors that make you want to flip a table. So, I built…
Understanding Unsecure Domain Configurations in Microsoft 365 As we kick off 2025, it’s timek to revisit an often overlooked but critical aspect of Microsoft 365 security: unsecure domain configurations. In this post, we’ll dive into what these configurations are, the risks they pose, and how you can address them to fortify your environment. Let’s get…
Connecting Non-Azure AD Joined Devices to Azure Virtual Desktop (AVD): Adding RDP Properties for Seamless Access In a typical Azure Virtual Desktop (AVD) setup, Windows and non-Windows clients need specific configurations to connect successfully if they aren’t Azure AD joined to the same tenant as the AVD virtual machines. For Windows clients that aren’t joined…
Introducing Working Time Management in Microsoft Intune (Quiet Time): Prioritizing Employee Well-being in Shift-Based Roles The boundary between personal time and work hours has grown increasingly thin, especially with mobile access to work apps like Microsoft Teams. This is particularly challenging for shift-based employees in healthcare, retail, and logistics. With Microsoft Intune’s new Working Time…
Streamline Your Workflow with Windows 365 Boot: Direct Cloud PC Access on Startup Imagine starting your day by powering on your device and immediately being logged into your Cloud PC. No more lengthy logins or waiting for everything to sync. Windows 365 Boot makes this a reality by allowing users to skip the local machine…
Breaking Free from VPNs: How Entra Private Access is Revolutionizing Secure Remote Work “Never trust, always verify.” Let’s face it: remote work isn’t going anywhere. What started as a temporary solution has become the new normal for businesses around the world. But here’s the catch—while we’ve all adjusted to working from coffee shops, home offices,…
Unlock Secure and Effortless Authentication with Microsoft Entra ID Temporary Access Pass (TAP) In my continuous journey of exploring how Microsoft solutions enhance security, I’ve found that Microsoft Entra ID’s Temporary Access Pass (TAP) is a game-changer for simplifying authentication processes. TAP is designed to help users onboard, recover access, or transition to passwordless authentication…