Browse all posts, filter by category or tag, and choose your preferred reading layout.
Traditional administrative tiering was built for an infrastructure-centric world. As organisations move to cloud-native identities, Zero Trust and passwordless authentication, t...
What started as a handful of blog posts became one of the biggest professional challenges I've ever undertaken. This is the story behind The Privileged Path—why I wrote it, what...
Passkeys are transforming authentication, but the technology is not the hardest part. Learn why onboarding, bootstrapping, Temporary Access Passes (TAPs), Conditional Access and...
Passkeys are rapidly becoming the preferred authentication method across Microsoft 365 and beyond, but not all passkeys are created equal. From synced passkeys in Apple Password...
Discover the architecture behind my new website, from Cloudflare Pages and GitHub to a custom Markdown CMS, a refreshed brand, and the story of Atlas.
Learn what Microsoft Global Secure Access is, how Private Access and Internet Access work, licensing requirements, and where GSA fits within a Zero Trust architecture
Most organisations think their phishing-resistant authentication journey starts with passkeys. In reality, many have already deployed one of the most important phishing-resistan...
Introduction Windows 365 promises a simple idea: a consistent, secure Windows experience delivered from the cloud, accessible from almost anywhere. In practice, the quality of t...
Most Microsoft 365 tenants don’t lack tools, they lack visibility. This sample enterprise audit report shows how to uncover risk, simplify access, and gain a clear, structured v...
Why I Started Andy Kemp Consulting After many years working across Microsoft 365, security, identity, and large‑scale change programmes, I reached a clear conclusion. The work I...
Introduction For years I have been frustrated by how most WordPress themes claim to be lightweight or developer friendly but still require a small universe of plugins just to de...
Introduction In this Zero Trust blog series, we’ve already explored how Identity, Devices, and Applications form the foundation of a modern security strategy. Each pillar plays...
Introduction In the first two posts of this Zero Trust series, we established that identity is the new perimeter and devices are the frontline of defence. By verifying every use...
Introduction In the first post of this series, we explored how identity has become the new perimeter in a world where users, apps, and data are no longer confined to…
Welcome to the first deep dive in my Zero Trust blog series. If you’ve read the series introduction, you’ll know that Zero Trust isn’t a single product or a quick…
Introduction Over the past few years, I’ve seen a growing interest in Zero Trust but also a lot of confusion. Many still view it as a product you can buy…
Introduction In a previous post, I walked through the step-by-step process of setting up a LAMP stack and deploying WordPress on Ubuntu. While that approach is great for learnin...
Introduction If you’re anything like me, you’ve probably joined a video call only to realise your lighting isn’t quite right. I use an Elgato Key Light Air, and I wa...
Introduction Like many home users, my broadband connection comes with a dynamically assigned public IP address. This means that my IP can change at any time sometimes witho...
Introduction Setting up a Site-to-Site VPN is a powerful way to securely link two remote networks—such as a home lab and a cloud environment—so they behave as if they’...
Introduction Azure Virtual Desktop (AVD) is Microsoft’s comprehensive Desktop-as-a-Service platform, enabling secure remote access to Windows desktops and apps from virtual...
Introduction A while back I wrote a post about my experience with getting my Microsoft Surface Laptop 7th Edition working with a clean install of Windows 11, you can see…
Using Microsoft Cloud PKI With Always On VPN Introduction I have been playing around with Always On VPN recently. Using it with Domain, Hybrid and Entra Joined devices. As you&#...
This is part 5 of my Always On VPN series You can review the pervious posts if required: Introduction So we now have everything in place for Always On VPN….
This is part 4 of my Always On VPN series You can review the pervious posts if required: Introduction The infrastructure you have in its current state is great if…
This is part 3 of my Always On VPN series You can review the pervious posts if required: Introduction Now we have the certificates available the next step is to…
This is part 2 of my Always On VPN series You can review the pervious posts if required: Introduction Certificates are at the heart of Always On VPN as this…
This is part 1 of my Always On VPN series You can review the pervious posts if required: Introduction Always on VPN is a technology thats been around for some…
Introduction I recently with picked up a Microsoft Surface Laptop with Copilot. I wanted to go throguh my frustrations with it to get a clean install of Windows 11 on…
Introduction You may have seen from some of my posts on here and also on my YouTube channel I have been doing a lot about Windows 365 and AVD. You…
So this is part 4 of my multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction In this part I’ll go…
So this is the 3rd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction Welcome to the 3rd…
So this is the 2nd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW. Part One was the high…
I have decided to create this as a multi part post to hopefully make it easier to understand. Introduction So Following on from my last post I thought I’d share…
Introduction Following on from my previous post I have been asked why I use a PAW for my own tenant, and or why not just use a conditional access policy…
I’m trying to “lead by example” (I use that term loosely), when it comes to privileged access. A bit of background For a long time my regular Microsoft 365 acc...
Introduction I’ve been working with a customer recently assisting with sorting out their privileged access and assisting them with their adoption of PIM (Privileged Identi...
Introduction There are many ways to establish a VPN between my UDM and Azure andI’ve tried them all, but, for the best result I would still recommend using an Azure…
I had a question recently asking about what would be the best solution as a local SMTP relay after ditching the local Exchange Management Server after going purely cloud identit...
So, you are backing up your Ubuntu Server but what happens when you have a failure? or you delete something from the server? How do you go about recovering it?…
I was recently asked if there was a quick way to create 180 plus Security Groups in Microsoft Entra. I used to do a lot of PowerShell Scripting but not…
Once you have your server up and running you’ll probably want to sort out backing it up on a regular basis. If you’re running your server in Azure, sure you…
So, now your site is up and running you’ll want to get a few things installed on it as a base. for me I like to enable things like Multifactor…
I’ve used various hosting services over the years including hosted Wordpress, which has been good, but it can sometimes work out costly and also you do not have full acces...