Identity, permissions, data and governance checks before agents enter production Technical blog post | Microsoft 365 | Microsoft Entra | Copilot Studio AI agents are starting to appear everywhere in the Microsoft ecosystem. Microsoft 365 Copilot. Copilot Studio. SharePoint. Teams. Azure. Microsoft Foundry. Third-party platforms. Custom applications. And we’re quickly moving past agents that simply…
Finding Dangerous Permissions in Microsoft Entra IDTechnical blog post | Microsoft Entra ID | Workload identities When I start reviewing the security of a Microsoft Entra ID tenant, privileged users are normally one of the first things I look at. Who has Global Administrator? Who has Privileged Role Administrator? Are those assignments permanent? Is PIM…
A practical first pass across identity, privileged access, collaboration, data protection and incident readiness ThatLazyAdmin | September 2026 If an identity was compromised today, what could an attacker actually do with it Start by understanding the tenant Getting access to a new Microsoft 365 tenant is always interesting. Sometimes I open Microsoft Entra and find…
Every IT team knows the struggle: a supplier needs SharePoint access, a consulting firm needs to join a Teams workspace, or a subsidiary wants to log into an internal app. What usually happens? Someone invites an external user as a guest, gives them access, and moves on. Fast forward a year — nobody remembers who…
Passwords alone are no longer enough. Phishing attacks, password reuse, and credential stuffing continue to plague organizations. Microsoft Entra ID (formerly Azure AD) supports strong phishing-resistant authentication methods, and one of the most practical options is using a FIDO2-compliant security key like YubiKey. In this guide, we’ll walk through how to set up YubiKey with…
When you spin up a new Microsoft 365 tenant, Microsoft automatically gives you a default domain — usually something like thatlazyadmin.onmicrosoft.com. These MOERA (Microsoft Online Email Routing Address) domains are incredibly handy at the beginning. They let you test, create users, and send mail right away, even before you’ve bought a proper domain. But here’s…
Understanding Unsecure Domain Configurations in Microsoft 365 As we kick off 2025, it’s timek to revisit an often overlooked but critical aspect of Microsoft 365 security: unsecure domain configurations. In this post, we’ll dive into what these configurations are, the risks they pose, and how you can address them to fortify your environment. Let’s get…
Introducing Working Time Management in Microsoft Intune (Quiet Time): Prioritizing Employee Well-being in Shift-Based Roles The boundary between personal time and work hours has grown increasingly thin, especially with mobile access to work apps like Microsoft Teams. This is particularly challenging for shift-based employees in healthcare, retail, and logistics. With Microsoft Intune’s new Working Time…
Resolving Unexpected Windows 11 Multi-Session License Key Changes in Azure Virtual Desktop with PowerShell Automation I recently encountered a unique issue within my Azure Virtual Desktop (AVD) environment running Windows 11 Enterprise Multi-Session. This problem specifically arose in the EASTUS region, where the product key on some session hosts unexpectedly changed from Windows 11 Enterprise…
Streamline Your Workflow with Windows 365 Boot: Direct Cloud PC Access on Startup Imagine starting your day by powering on your device and immediately being logged into your Cloud PC. No more lengthy logins or waiting for everything to sync. Windows 365 Boot makes this a reality by allowing users to skip the local machine…
Breaking Free from VPNs: How Entra Private Access is Revolutionizing Secure Remote Work “Never trust, always verify.” Let’s face it: remote work isn’t going anywhere. What started as a temporary solution has become the new normal for businesses around the world. But here’s the catch—while we’ve all adjusted to working from coffee shops, home offices,…
Unlocking the Power of File Integrity Monitoring (FIM) with Microsoft Defender for Cloud and Microsoft Defender for Endpoint As part of Microsoft’s continuous efforts to enhance cloud security, the integration of File Integrity Monitoring (FIM) with Microsoft Defender for Endpoint (MDE) has entered public preview under Defender for Servers Plan 2. This September 2024 release…