Fear the defaults - take control of your Entra ID configuration

For many organisations, moving to Microsoft 365 is a given these days. The lure of collaboration, simple(ish) licensing, and built in security checks all the boxes. Unfortunately just because it is in the cloud, and you have security features, doesn't mean they are enabled or enforced in an effective way.

Do you think the defaults is good enough? You already got all the security licenses right?

In this session we will take you through the top security related considerations when it comes to hardening default out of the box Entra ID environments. From applications, to groups, to conditional access, all of which can be used and leverage as a grounds of attack, so know understand the risks, and how to mitigate against them.

At the end of this session you will be forewarned and forearmed to deal with the fires within your tenant that you did not know were there.

Secure your Entra Identities in 2024

Security of your identities is crucial in the cloud. With Entra ID we have many options to make sure our identities can stay as secure as possible while at the same time we keep our users productive. Your identity is also what defines what and how you can access your resources in the cloud.

Learn how to protect both your standard users and all the privileged accounts in Entra ID.

Join in on a journey from password strategies, authentication methods, identity protection, privileged identity management, conditional access all the way over to a password-less world.

Securing your Entra IDentities

Security of your identities is crucial in the cloud. With Microsoft Entra we have many options and tools to make sure our identities can stay as secure as possible while at the same time we keep our users productive. Your identity is also what defines what and how you can access your resources in the cloud.

Learn how to protect both your standard users and all the privileged accounts in Azure AD. Join in on a journey from password strategies, authentication methods, identity protection, privileged identity management, conditional access all the way over to a password-less world.

User Lifecycle Governance in Azure AD

Most organizations now has 1 or many workloads in the Microsoft cloud, meaning users in Azure AD. When starting down this journey we see many struggle with having a good way of handling lifecycle of not only the users, but also what access these users get over time. Even when Hybrid and "all users" are managed on-premies, there are challenges like access to M365 Groups and Teams, Guests and External users and more.

In this session we will focus on challenges that applies both to cloud-native and hybrid environments including joiner and leaver scenarios, governance of external and guest users and how to use access reviews and access packages to help you be in control.

The Art of Log Collection - Navigating the Many Paths to Log Analytics

Collecting logs from Windows endpoints is a critical part of maintaining healthy and secure IT systems. However, there are many ways to collect logs, and choosing the right method can be a daunting task.

In this session, we will explore the different paths to get your data into log analytics, and provide guidance on when to use what.

We will cover Azure Monitor Agent, HTTP Data Collector API and Log ingestion API.

We will show how to Migrate from Data Collector API and custom fields-enabled tables to DCR-based custom log collection

We will also discuss best practices for log collection and manage log retention policies.

By the end of this session, attendees will have a comprehensive understanding of log collection techniques, and be equipped with the knowledge they need to choose the right path for their own log analytics journey.

Windows Hello for Business - The Consultant's Playbook on Cloud Kerberos Trust

This session is a deep dive into the world of Windows Hello for Business, focusing on the Cloud Kerberos Trust model. Tailored for those already familiar with the basics, we'll cover the advanced tips and tricks used by consultants in real-world scenarios. Learn from the experts how to effectively implement, troubleshoot, and debug this system at customer sites. Whether you're looking to refine your skills or tackle specific challenges, this session offers practical insights and hands-on strategies for mastering Windows Hello for Business.

Manage Authentication Methods like a Boss

In this session, we will explore the process of modernizing authentication methods in Azure AD, focusing on strategies and best practices for migrating away from the classic MFA and SSPR portals and going passwordless.

We will discuss the benefits of the new centralized management approach, such as improved security and simplified management, and how it can help organizations meet the changing needs of today's workforce.

Attendees will learn about key considerations for planning and executing a migration to the new Azure AD portal blade, including how to assess and prepare for the impact on users and IT staff.

We will also cover best practices for troubleshooting common issues and maintaining compliance during the transition.

This session will provide a detailed-level overview of the new converged management approach and will be a demonstration and talk about authentication strategies.

Intune Reporting – Kusto FTW

Using the built in monitor and reports in Intune is sufficient for some, but as with all reporting solutions, what is fine for you is not fine for others.

The desire for Microsoft to build a flexible reporting solution where your Intune data is available is often an ask, however, its already there, hidden in plain sight, and no we did not mean the CSV export button.

Enabling the diagnostic settings is the first part of making sure you can utilize the power of KQL, building your own customized reports in the form of a workbook. Think of KQL as SQL queries, Log Analytics as your SQL DB, and workbooks as SQL SSRS, but far better in terms of visualizations, and easy to share with your coworkers, management etc. Better still, KQL reports can be shared with others, making this a community reporting solution!

Join in for a session filled with powerful KQL queries, tips on visualizations, guidance on obtaining custom data, and practical examples of where you can make your Intune reports shine. Taking it one step beyond just reporting, we will also show you how to use the same data to do more with automations in Azure.

Session talking about how to get up and running with custom reporting for Intune with log analytics & KQL queries

Practical examples of how these are implemented with customers leverage these reports

Alerting? Azure Monitor also comes into play

Entra ID Lifecycle Workflows

Most organizations now has 1 or many workloads in the Microsoft cloud, meaning users in Entra ID. When starting down this journey we see many struggle with having a good way of handling lifecycle of not only the users, but also what access these users get over time. Even when Hybrid and "all users" are managed on-premies, there are challenges like access to M365 Groups and Teams, Guests and External users and more.

In this session we will focus on challenges that applies both to cloud-native and hybrid environments including joiner and leaver scenarios, governance of external and guest users and how to use access reviews and access packages to help you be in control.

Intune, Graph & Azure - Automation 101

Join me for a session that takes three separate components that admins use on a daily basis, these being Intune, Azure and Graph, and how to get these working together to help automate the mundane, or monitor on the abnormal.

You don’t need to be a scripting superhero, or graph geek, as they will step you through the types of automation that can be achieved.

At the end of this session, you’ll be full of what’s possible, and have insight into what consultants are implementing in the real world for customers who want to go beyond the built-in.

Beyond Passwords - Securing your identities in Microsoft 365

Security of your identities is crucial in the cloud. With Microsoft 365 we have many options and tools to make sure our identities can stay as secure as possible while at the same time we keep our users productive. Your identity is also what defines what and how you can access your resources in the cloud.

Learn how to protect both your standard users and all the privileged accounts in Azure AD. Join in on a journey from password strategies, identity protection, privileged identity management, conditional access all the way over to a password-less world.

Proactive Remediation Deep Dive

With Endpoint Analytics in Intune, we also got the awesome feature Proactive Remediations allowing you to perform compliance item/baseline type jobs across all Windows managed devices. In this session, we will not only look at the power of these features but also the underlying components, how to trace the running of the detection and remediation script, troubleshooting, and more.

Delivered at Northwest System Center User Group. Jan 15 2021