Introduction Now we are in 2026, it’s easy to forget that some of the most important security features on modern Windows devices have been quietly protecting us for well over a decade. Secure Boot is one of those technologies. Introduced alongside Windows 8 nearly 15 years ago (yes, that´s right!).
This week Microsoft is kicking off 2026 strong with a much-anticipated feature releasing into preview: Tenant Configuration Management (TCM) APIs. Traditionally administrators have to make configuration changes either in the portals one at a time or in through Graph API using, for example, PowerShell. However, what if another administrator comes
Many customers using Microsoft Teams request teams restricted to internal members, without guest account access. Teams’ behavior is very often controlled by SharePoint or Microsoft 365 Group settings and a typical team user may not know anything about these settings. We recommend building your own app or automation to ensure
Microsoft Entra ID Privileged Identity Management (PIM) for Groups allows organizations to control and audit elevated group memberships through just-in-time access. Managing elevated permissions in Microsoft Entra ID can sometimes be tricky, especially when it comes to Privileged Identity Management (PIM) for Groups. While the Entra portal allows users to
Introduction If you need to find specific emails in a Microsoft 365 mailbox and export their contents for investigation, compliance, or troubleshooting, this PowerShell script can help. It leverages Microsoft Graph to search messages by their InternetMessageID and saves each one as a text file for easy read. Created this
Many customers using Microsoft Teams request teams restricted to internal members, without guest account access. Teams’ behavior is very often controlled by SharePoint or Microsoft 365 Group settings and a typical team user may not know anything about these settings. We recommend building your own app or automation to ensure
During our Microsoft 365 Governance workshops with customers, a common question is how to handle inactive teams. Our primary recommendation is to implement automated processes for archiving inactive teams, team owners can also archive a team themselves. The team’s conversations and files will be set to read-only and remain searchable.
Back in September Microsoft has recently teaset App Management Policies in Microsoft Entra ID UI, which let you set tenant-wide restrictions on how applications and service principals can be configured from the UI – for example restricting certificate lifetimes, blocking new passwords/secrets, enforcing valid URI formats, etc. (as it looks like for now
You can email a Teams channel using its email address. Once set up, anyone in the team can reply. To see a channel email, you must select use the option Get email address on the channel itself. You may use this email address as the recipient address in Outlook. Any
When you select Share on a file in Teams, it is actually shared in SharePoint. The default options selected can be changed, and when we run our Microsoft 365 Governance workshops this is often a required action for a lot of customers. By default SharePoint will show these option when
A frequently discussed topic during our Microsoft 365 governance workshops is the appropriate retention period for chat messages within Teams. Some customers prefer that chat messages are deleted after a predefined period rather than being retained for an extended time. In this post, we will examine how to efficiently delete
As explained in Part one, a common Microsoft 365 Governance workshop question is how to use the Sync to OneDrive and Add shortcut to OneDrive features, both found under the Files tab in Teams channels. We recommend using only Add shortcut to OneDrive and disabling Sync. However, here we’ll also
A common inquiry that arises during our Microsoft 365 Governance workshop concerns the use of the Sync to OneDrive feature in Teams and the Add shortcut to OneDrive option. Both functionalities are accessible from the Files tab within a Teams channel. We normally recommend using Add shortcut to OneDrive instead
We are starting to see the Unlock Teams Premium prompt, on more tenants, and at the same time we are now also starting to get the question on our Microsoft 365 Governance workshops. Teams Premium is not the only license that users can do self-service/trials set up and purchase on.
While I was writing part 1, I kept digging into more details on the GPO deployment method and figured that it deserves a post by itself. Here I’ll cover some pitfalls I’ve run into and things to make life easier such as logging the deployments and having a workbook to
In my previous blogposts I’ve shown some of Azure Arc’s features, and interesting capabilities. All super cool ways to securely interact with your machines, regardless of where they are hosted. However, so far, I’ve glanced over a problem: How do you get started with onboarding machines? In Part 1 of
In this deep dive into yet another Azure Arc extension, let’s see how we can get Entra ID logins to work with Linux SSH over Azure Arc! Azure Arc blog overview: 1. Modern Server Management with Azure Arc – Remote Management Pt.1 (SSH/RDP)2. Modern Server Management with Azure Arc –
In part 1 of this series, I covered how to configure basic SSH on an Azure Arc-enabled server that allowed us to connect to any machine from anywhere in the world without needing a VPN or exposing that machine to the internet. Azure Arc blog overview: 1. Modern Server Management
In 2022 we wrote a post about SharePoint and OneDrive integration with Microsoft Entra B2B. As of 2025, the information in this post remains relevant for tenants created before June 2023; tenants provisioned after that date have Entra B2B integration enabled by default. Now, only one command is needed instead
What is Azure Arc Azure Arc is a Microsoft service that extends your Azure management and governance capabilities to your resources outside of Azure, and this can include on-premises servers, virtual machines, and other cloud environments. With Azure Arc, you can centrally manage, secure, and automate workloads across hybrid and
On updated tenants, external file sharing is now enabled in both 1:1 and group chats. MC1102790 Roadmap ID 492625 When this feature is not enabled you will not see an attach file option when chatting with an external user. To share a file, you must first share the file from
In this first Azure Arc Remote Management focused blogpost, let’s cover the OpenSSH extension and how it can be used to get a remote PowerShell connection over SSH and even a Remote Desktop Session, all without any direct network connectivity. The best part: It costs absolutely nothing! Join me in
In this post, we’ll look at suppressing single sign-on (SSO) consent prompts for Azure Virtual Desktop (AVD) and Windows 365. These consent prompts can be very disruptive as they interrupt the smooth sign-in flow. I first came across the option to suppress SSO consent prompts while testing Windows 365 Link
With the release of DCSv3, I was excited to give it a try at-scale but since it hasn’t been integrated into Azure Machine Configuration (yet…) I figured I’d try a different approach to deploying and testing it. A lesser-known feature of Azure and Arc machines are Run Commands. Typically used
Managing server configurations in hybrid or on-premises environments can be challenging, with outdated tools and manual processes leading to errors and inefficiencies. This post explores how to simplify configuration management with Desired State Configuration (DSC) and Azure Automanage Machine Configuration. Ever noticed this Machine Configuration option under VMs and wondered
Modern Workplace consultant and a Microsoft MVP in Windows and Devices.
Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.
Cloud & security specialist with focus on Microsoft backend products and cloud technologies.
Cloud & security specialist with focus on Microsoft 365.
Cloud & Security Specialist, with a passion for all things Cybersecurity
Cloud and infrastructure security specialist with background in networking.
Infrastructure architect with focus on design, implementation, migration and consolidation.
Infrastructure consultant with focus on cloud solutions in Office365 and Azure.
Modern workplace and infrastructure architect with a focus on Microsoft 365 and security.
