Passwordless Authentication, Part 2: Temporary Access Pass, Security Key enrollment & Windows-Sign in

In my previous blogpost I demonstrated a basic enrollment of Passwordless authentication into Azure AD with a FIDO2 Security Key. Generally speaking, common use cases for FIDO2 certified hardware keys are as follows: Strong AuthenticationSecuring Privileged AccountsPasswordless AuthenticationShared DevicesPersonal Security…

Attack Surface Reduction

In this blog post I will go through some of the different configuration options available for Attack Surface Reduction using Endpoint Manager (Intune), Defender for Endpoint and analyzing the rules locally using Powershell. Short introductionAttack Surface Reduction Rules in Windows…

ABM – Invalid Profile during enrollment (Default Enrollment Restriction)

I stumbled upon a pretty dazzling error the other day where the solution wasn't too obvious for me so I thought I would share my findings.Prerequisites which all were in place:- Apple Business Manager configured and Apple-devices where transmitted from…

Post a policy to Intune using Intune PowerShell SDK

In my last post regarding the MSGraph and the Intune PowerShell SDK I demonstrated how you installed the Intune PowerShell SDK and connected to the Graph Explorer to query information in your tenant of choice.Today I will demonstrate how you…