Microsoft 365 Security, Identity and Modern Workplace Blog

Windows LAPS: Rethinking Local Administrator Management

8 Oct 2026 15 min read

Operating Windows LAPS: Deployment Isn't the Finish Line

Read the full article.

Windows LAPS: Rethinking Local Administrator Management · Part 4

Cyber Security Windows 11 Windows Server Intune Windows 365 #Windows 11 #Windows Server #Zero Trust #Windows11 #Windows 365 #Security #Devices #Cyber Security

6 Oct 2026 14 min read

Windows LAPS on Windows Server: Same Technology, Different Design

Windows LAPS works across Windows clients and servers, but the architecture shouldn't simply be copied from Windows 11. A practical look at member servers, Active Directory, pas...

Windows LAPS: Rethinking Local Administrator Management · Part 3

Cyber Security Windows 11 Windows Server Intune Windows 365 #Windows 11 #Windows Server #Zero Trust #Windows11 #Windows 365 #Security #Devices #Cyber Security

5 Oct 2026 7 min read

Finding My Place: Reflections After Scottish Summit

An honest reflection on Scottish Summit: the joy of speaking, the discomfort of feeling on the outside, and how small gestures can help people feel welcome.

Community Personal Personal Development #Community #Inclusion #Public Speaking #Speaker Experience

4 Oct 2026 7 min read

I’m a Microsoft MVP. That Still Feels Strange to Say

On 1 October 2026, I found out I’d been awarded Microsoft MVP. The timing was special, but it also made me reflect on community, sharing what I know and what the award actually...

Community Personal Personal Development #Community #Microsoft #Microsoft MVP

4 Oct 2026 12 min read

Windows LAPS: Intune or Group Policy for Windows 11?

Windows LAPS can be configured through Intune or Group Policy, but what happens when both are present? A practical look at policy precedence, hybrid environments and choosing a...

Windows LAPS: Rethinking Local Administrator Management · Part 2

Cyber Security Windows 11 Windows Server Intune Windows 365 #Windows 11 #Windows Server #Zero Trust #Windows11 #Windows 365 #Security #Devices #Cyber Security

30 Sept 2026 12 min read

Windows LAPS on Windows 11: Designing Local Admin Properly

Windows LAPS can now create and manage its own local administrator account on Windows 11. But which account should you manage, and what about every other local admin?

Windows LAPS: Rethinking Local Administrator Management · Part 1

Cyber Security Windows 11 Windows Server Intune Windows 365 #Windows 11 #Windows Server #Zero Trust #Windows11 #Windows 365 #Security #Devices #Cyber Security

28 Sept 2026 13 min read

Your Conditional Access Policy Says Require MFA. What Does That Actually Mean?

What does “Require MFA” in Conditional Access actually guarantee? A practical look at MFA, Authentication Strength, phishing-resistant authentication, passkeys, synced passkeys...

Cyber Security Identity Microsoft Microsoft 365 Security Zero Trust #Conditional Access #Cyber Security #Identity and Access Management #Microsoft #Passkeys #Passwordless #Phishing-Resistant Authentication #Windows Hello for Business #Zero Trust

24 Sept 2026 10 min read Updated 28 Sept 2026

Windows LAPS: More Than Password Rotation

Windows LAPS is about more than rotating a local administrator password. In this introduction, I look at how Windows LAPS has evolved, the difference between the account, manage...

Windows LAPS: Rethinking Local Administrator Management

Cyber Security Windows 11 Windows Server Intune Windows 365 #Windows 11 #Windows Server #Zero Trust #Windows11 #Windows 365 #Security #Devices #Cyber Security

22 Sept 2026 17 min read

What I Learned Deploying Global Secure Access for Real

After ten posts exploring Microsoft Global Secure Access, it is time to step back from the configuration guides and architecture diagrams. These are the lessons I learned from d...

Microsoft Global Secure Access · Part 10

Cyber Security Global Secure Access Entra Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

22 Sept 2026 19 min read

Global Secure Access and Privileged Access: An Architecture I Want to Test

What could Microsoft Global Secure Access add to a privileged-access architecture? This article explores a conceptual design combining Entra Private Access, application segmenta...

Microsoft Global Secure Access · Part 9

Cyber Security Global Secure Access Entra Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

21 Sept 2026 17 min read

Designing Entra Private Access Properly: Don't Rebuild Your VPN in the Cloud

Microsoft Entra Private Access can replace traditional VPN access, but simply publishing broad private networks through Quick Access risks recreating the same access model in a...

Microsoft Global Secure Access · Part 8

Cyber Security Global Secure Access Entra Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

16 Sept 2026 14 min read

Global Secure Access Alongside Your Existing Security Stack

Where Global Secure Access fits alongside Intune, Defender, Conditional Access and network controls, and how to separate useful overlap from policy duplication.

Microsoft Global Secure Access · Part 7

Cyber Security Global Secure Access Entra Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

11 Sept 2026 14 min read

Mac or Windows? I Use Both — And That's Kind of the Point

Mac or Windows? I use both. From Surface Laptop 7 and MacBook Pro performance to battery life, Intune, passkeys and WebAuthn, here's where each works best.

Intune Mac OS Microsoft Windows 11 Windows 365 #Intune #Mac OS #Microsoft #Windows 11 #Windows 365

9 Sept 2026 16 min read

Windows 365 Link Revisited: I Gave It Another Chance

Four months after audio redirection made me put the Windows 365 Link aside, I tested it again. YouTube, Spotify and Windows notifications now work.

Microsoft Microsoft 365 Security Windows 365 #Intune #Modern Work #Windows 365 #Windows 365 Link

Building Again: My Journey into Vibe Coding

4 Sept 2026 11 min read

What If Other People Could Use It?

Adding Clerk made sign-in easy. The real challenge was authorisation, tenant boundaries and keeping every SaaS customer's data securely separated.

Building Again: My Journey into Vibe Coding · Part 3

AI Automation Web Development Personal Development #Personal Development #Blogging

31 Aug 2026 23 min read

Migrating from a Traditional Secure Web Gateway to Global Secure Access

Migrating from a traditional Secure Web Gateway to Microsoft Global Secure Access is more than replacing one endpoint client with another. This article explores policy rationali...

Microsoft Global Secure Access · Part 6

Entra Global Secure Access Microsoft 365 Security Security Strategy Cyber Security Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

31 Aug 2026 15 min read

EWS Retirement: The Exchange Deadline You Cannot Keep Ignoring

EWS retirement is about far more than rewriting an application. The 1 October 2026 Exchange Online disablement phase is almost here, and April 2027 will arrive quickly. Have you...

EWS Exchange Exchange Online EXO Hybrid Microsoft Microsoft Graph #EWS #Exchange #Exchange Online #EXO #Microsoft #Microsoft 365

26 Aug 2026 15 min read

Entra Internet Access: Moving Web Security to the Identity Layer

Explore how Microsoft Entra Internet Access moves traditional Secure Web Gateway controls towards an identity-aware security model, combining web filtering, user and group polic...

Microsoft Global Secure Access · Part 5

Cyber Security Global Secure Access Entra Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

26 Aug 2026 10 min read

WebAuthn Redirection Comes to the Windows App on macOS

Microsoft has introduced in-session WebAuthn redirection in preview for the Windows App on macOS, addressing a major passkey and FIDO2 limitation for Windows 365 and Azure Virtu...

Azure Virtual Desktop Identity Passwordless Windows 365 #FIDO2 #Mac OS #Microsoft Entra #Passkeys #Privileged Access #WebAuthn #Windows 11

25 Aug 2026 12 min read

Global Secure Access on Mobile Devices

Explore how Microsoft Global Secure Access extends identity-aware access to managed iOS, iPadOS and Android devices using Entra Internet Access and Entra Private Access.

Microsoft Global Secure Access · Part 4

Cyber Security Global Secure Access Entra Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

24 Aug 2026 26 min read

Microsoft Global Secure Access on macOS: Extending Identity-Driven Access Beyond Windows

Explore how Microsoft Global Secure Access brings identity-driven Private Access, Internet Access and Microsoft traffic controls to managed macOS devices.

Microsoft Global Secure Access · Part 3

Cyber Security Global Secure Access Entra Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

21 Aug 2026 7 min read

I Just Need the App to Send an Email

What happens when “I just need the app to send an email” turns into a conversation about API keys, credentials, secrets and security? Part 2 of Building Again explores how a sim...

Building Again: My Journey into Vibe Coding · Part 2

AI Automation Web Development Personal Development #Personal Development #Blogging

20 Aug 2026 7 min read

From Kempsoft to Vibe Coding

Nearly 30 years after creating Kempsoft, AI has brought me back to building software. This is how vibe coding became my new development companion.

Building Again: My Journey into Vibe Coding · Part 1

AI Automation Web Development Personal Development #Personal Development #Blogging

19 Aug 2026 26 min read

Replacing Traditional VPN Access with Microsoft Entra Private Access

Learn how Microsoft Entra Private Access replaces broad VPN connectivity with identity-driven, application-aware access to private resources.

Microsoft Global Secure Access · Part 2

Cyber Security Global Secure Access Entra Zero Trust Identity #Cyber Security #GSA #Entra ID #Zero Trust #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

18 Aug 2026 16 min read

Bringing Authentication Assurance Together

Bring Authentication Assurance together into a complete architecture, connecting Trust Levels, passkeys, FIDO2, Authentication Strengths, Conditional Access, TAP, privileged acc...

Authentication Assurance · Part 9

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

17 Aug 2026 13 min read

Building High-Assurance Administrative Accounts

Learn how to build high-assurance administrative identities by combining dedicated accounts, FIDO2 security keys, Authentication Strengths, Conditional Access, PAWs, PIM and sec...

Authentication Assurance · Part 8

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

13 Aug 2026 15 min read Updated 14 Aug 2026

Giving SaaS Applications a Fixed Egress IP with Microsoft Entra Private Access"

Use Microsoft Entra Private Access source IP anchoring to give IP-restricted SaaS applications a controlled and predictable public egress address.

Microsoft Global Secure Access · Part 1

Compliance & Governance Global Secure Access Microsoft Microsoft 365 Security Security Strategy Zero Trust Cyber Security Entra Identity #Cloud Security Strategy #Conditional Access #Cyber Security #Devices #dns #Entra ID #GSA #identity #Microsoft 365 #Windows11 #Zero Trust #ZTNA #Security Architecture #Security #Windows Hello for Business

13 Aug 2026 21 min read

Temporary Access Pass and Secure Onboarding

Explore how Temporary Access Pass can securely bootstrap and recover passwordless authentication, and why single-use, multi-use, duration and identity verification all matter wh...

Authentication Assurance · Part 7

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

13 Aug 2026 11 min read

Authentication Strengths in Microsoft Entra

Learn how Microsoft Entra Authentication Strengths and Conditional Access can turn Authentication Assurance from an architectural principle into an enforceable security control.

Authentication Assurance · Part 6

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

13 Aug 2026 11 min read

Choosing the Right Authentication for Each Trust Level

Learn how to align authentication methods with identity Trust Levels, from dedicated FIDO2 security keys for critical administrators to device-bound and synced passkeys where ap...

Authentication Assurance · Part 5

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

11 Aug 2026 6 min read

Not All Passkeys Provide the Same Level of Assurance

Discover why phishing-resistant authentication doesn't automatically provide the same level of operational assurance, and how different passkey implementations influence privile...

Authentication Assurance · Part 4

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

11 Aug 2026 4 min read

Understanding Modern Passkeys

Learn what passkeys are, how they work and the differences between platform, roaming, synced and device-bound passkeys in modern authentication.

Authentication Assurance · Part 3

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

11 Aug 2026 4 min read

The Evolution of Authentication

Discover how authentication has evolved from passwords to phishing-resistant passkeys, and why understanding that journey is key to designing modern identity security.

Authentication Assurance · Part 2

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

11 Aug 2026 4 min read

Why Authentication Assurance Matters

Why modern identity security is about more than enabling MFA. Learn why authentication assurance should increase alongside the value and impact of the identities you're protecting.

Authentication Assurance · Part 1

Cyber Security Microsoft Microsoft 365 Security Passwordless Privileged Access Privileged Identity Security Strategy Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Continuous Improvement #Cyber Security #FIDO2 #entra-id #Entra ID #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Zero Trust #Security

8 Aug 2026 3 min read

Authentication Assurance – Introduction

An introduction to Authentication Assurance and why modern identity security is about more than simply enabling MFA or going passwordless.

Authentication Assurance

Cyber Security Microsoft Microsoft 365 Security Zero Trust Passwordless Privileged Access Privileged Identity Security Strategy #Continuous Improvement #Entra ID #Microsoft #Microsoft 365 #Microsoft Entra #Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Cyber Security #FIDO2 #entra-id #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Security

6 Aug 2026 5 min read

Building a Modern Privileged Access Strategy

Learn how to build a modern privileged access strategy by combining Trust Levels, Privileged Access Workstations, phishing-resistant authentication, Conditional Access, PIM and...

Privileged Access Workstations · Part 8

Cyber Security Entra Microsoft 365 Security Privileged Access Privileged Identity Security Strategy Zero Trust #Cloud Security Strategy #Cyber Security #Endpoint Security #PAW #Privileged Access #Privileged Identity #Zero Trust

6 Aug 2026 5 min read

Operating and Maintaining a Privileged Access Workstation

Learn how to operate and maintain a Privileged Access Workstation by managing configuration drift, patching, compliance, monitoring and governance to preserve administrative ass...

Privileged Access Workstations · Part 7

Cyber Security Microsoft 365 Security Privileged Access Privileged Identity Zero Trust #Cloud Security Strategy #Continuous Improvement #Cyber Security #Endpoint Security #PAW #Privileged Access #Zero Trust

6 Aug 2026 5 min read

Hardening a Modern Privileged Access Workstation

Learn how to harden a modern Privileged Access Workstation using Microsoft Intune, Microsoft Defender, Conditional Access, PIM and Windows security features to build a trusted a...

Privileged Access Workstations · Part 6

Cyber Security Entra Microsoft 365 Security Privileged Access Privileged Identity Security Strategy Zero Trust #Cyber Security #Endpoint Security #Intune #Microsoft Entra #PAW #Privileged Access #Privileged Identity #Zero Trust

6 Aug 2026 5 min read

Choosing the Right Administrative Environment

Learn how to choose the right administrative environment by balancing risk, operational requirements and assurance when deploying Privileged Access Workstations.

Privileged Access Workstations · Part 5

Cyber Security Microsoft 365 Security Privileged Access Privileged Identity Zero Trust #Cloud Security Strategy #Cyber Security #Endpoint Security #PAW #Privileged Access #Security #Zero Trust

6 Aug 2026 6 min read

Virtual Privileged Access Workstations

Explore how Virtual Privileged Access Workstations (vPAWs) provide a secure and practical alternative to physical PAWs by balancing administrative assurance with operational fle...

Privileged Access Workstations · Part 4

Cyber Security Entra Intune Microsoft 365 Security Privileged Access Privileged Identity Zero Trust #Cloud Security Strategy #Cyber Security #PAW #Privileged Access #Privileged Identity #Zero Trust

6 Aug 2026 5 min read

Physical Privileged Access Workstations

Discover why dedicated physical Privileged Access Workstations remain the highest assurance option for protecting privileged identities and securing administrative environments.

Privileged Access Workstations · Part 3

Cyber Security Entra Microsoft 365 Security Privileged Access Privileged Identity Zero Trust #Cyber Security #Entra ID #Microsoft Entra #PAW #Privileged Access #Privileged Identity #Zero Trust

5 Aug 2026 5 min read

When Do You Need a Privileged Access Workstation?

Discover when a Privileged Access Workstation is justified, how to assess administrative risk, and why workstation assurance should reflect the level of trust placed in an ident...

Privileged Access Workstations · Part 2

Cyber Security Entra Privileged Access Privileged Identity Security Strategy Zero Trust #Cyber Security #Endpoint Security #PAW #Privileged Access #Privileged Identity #Security #Zero Trust

4 Aug 2026 7 min read

What is a Privileged Access Workstation

Discover what a Privileged Access Workstation (PAW) is, why it matters, and how it strengthens privileged identity security by protecting the administrative trust boundary.

Privileged Access Workstations · Part 1

Cyber Security Entra Microsoft 365 Security Privileged Access Privileged Identity Zero Trust #PAW #Privileged Access #Privileged Identity #Zero Trust

4 Aug 2026 4 min read

Privileged Access Workstations: Introduction

An introduction to Privileged Access Workstations (PAWs), why they matter, and how they fit into a modern privileged identity strategy using Microsoft Entra.

Privileged Access Workstations

Cyber Security Entra Privileged Access Privileged Identity Security Strategy Zero Trust #Continuous Improvement #Cyber Security #Entra ID #Microsoft Entra #PAW #Zero Trust

4 Aug 2026 5 min read

Why Stepping Away From Your Desk Might Be the Most Productive Thing You Do

In a world of constant notifications, AI-assisted development and back-to-back meetings, sometimes the best thing you can do is close the laptop and step away.

Personal Development Well Being #Personal Development #Wellbing

29 Jul 2026 5 min read

From Tier 0 to Trust Levels: Rethinking Privileged Access for the Cloud Era

Traditional administrative tiering was built for an infrastructure-centric world. As organisations move to cloud-native identities, Zero Trust and passwordless authentication, t...

Cyber Security Entra Privileged Access Privileged Identity Security Strategy #Cyber Security #Enterprise IT #Entra ID #Microsoft Entra #Privileged Access #Privileged Identity

28 Jul 2026 7 min read

From a Blog Series to a Book – The Unexpected Journey of The Privileged Path

What started as a handful of blog posts became one of the biggest professional challenges I've ever undertaken. This is the story behind The Privileged Path—why I wrote it, what...

Privileged Identity #identity #Identity and Access Management #Privileged Access #Privileged Identity

28 Jul 2026 10 min read

Passkeys: The Hardest Part Nobody Talks About

Passkeys are transforming authentication, but the technology is not the hardest part. Learn why onboarding, bootstrapping, Temporary Access Passes (TAPs), Conditional Access and...

Entra Microsoft 365 Security Zero Trust #Authentication Strategy #Conditional Access #Entra ID #FIDO2 #identity #Identity and Access Management #Passkeys #Passwordless #Phishing-Resistant Authentication #Zero Trust

20 Jul 2026 6 min read

Behind the Build: The Story Behind My New Website

Discover the architecture behind my new website, from Cloudflare Pages and GitHub to a custom Markdown CMS, a refreshed brand, and the story of Atlas.

Web Development

20 Jul 2026 5 min read Updated 14 Aug 2026

Microsoft Global Secure Access: More Than Just a VPN Replacement?

Learn what Microsoft Global Secure Access is, how Private Access and Internet Access work, licensing requirements, and where GSA fits within a Zero Trust architecture

Microsoft Global Secure Access

Cyber Security Microsoft 365 Security VPN Zero Trust Global Secure Access Entra Identity #Cyber Security #Microsoft 365 #Microsoft Entra #VPN Configuration #Zero Trust #GSA #Entra ID #Conditional Access #ZTNA #Identity #Security Architecture #Security #Windows Hello for Business

1 Jun 2026 7 min read

Windows Hello for Business Is More Than a Login Method

Most organisations think their phishing-resistant authentication journey starts with passkeys. In reality, many have already deployed one of the most important phishing-resistan...

Consulting Cyber Security Entra Microsoft Microsoft 365 Security Zero Trust #Authentication Strategy #Entra ID #Identity and Access Management #Passkeys #Passwordless #Phishing-Resistant Authentication #Windows Hello for Business #Zero Trust

13 May 2026 21 min read

Windows 365 for Secure Work: The Device Experience Nobody Talks About

Introduction Windows 365 promises a simple idea: a consistent, secure Windows experience delivered from the cloud, accessible from almost anywhere. In practice, the quality of t...

Microsoft Microsoft 365 Security Security Strategy Windows 365 Zero Trust #Cloud PC #Conditional Access #Endpoint Security #FIDO2 #Microsoft #Modern Work #PAW #Passkeys #Windows 365 #Zero Trust

10 Apr 2026 2 min read

Microsoft 365 Tenant Audit – Sample Enterprise Report

Most Microsoft 365 tenants don’t lack tools, they lack visibility. This sample enterprise audit report shows how to uncover risk, simplify access, and gain a clear, structured v...

Consulting Cyber Security Entra Intune #Consulting #Identity & Access Management #Microsoft #Microsoft 365 #Reporting #Zero Trust

9 Apr 2026 2 min read

Welcome to Andy Kemp Consulting

Why I Started Andy Kemp Consulting After many years working across Microsoft 365, security, identity, and large‑scale change programmes, I reached a clear conclusion. The work I...

Consulting #Cloud Architecture #Consulting #Enterprise IT #Microsoft 365 #Security #identity

15 Jan 2026 8 min read Updated 1 Feb 2026

Introducing TechPress All-In-One

Introduction For years I have been frustrated by how most WordPress themes claim to be lightweight or developer friendly but still require a small universe of plugins just to de...

Self-Hosting Selfhosting Ubuntu Web Development #Development #Ubuntu #self-hosting

8 Dec 2025 12 min read Updated 6 Jan 2026

Data – The Fourth Pillar of Zero Trust

Introduction In this Zero Trust blog series, we’ve already explored how Identity, Devices, and Applications form the foundation of a modern security strategy. Each pillar plays...

Compliance & Governance Cyber Security Data Protection Entra Information Protection Microsoft Microsoft 365 Security Security Strategy Zero Trust #Compliance #Continuous Improvement #DLP (Data Loss Prevention) #Data Security #Encryption #Insider Risk #Microsoft #Microsoft Purview #Sensitivity Labels #Shadow IT #Zero Trust

21 Nov 2025 15 min read Updated 6 Jan 2026

Applications – The Third Pillar of Zero Trust

Introduction In the first two posts of this Zero Trust series, we established that identity is the new perimeter and devices are the frontline of defence. By verifying every user…

Cyber Security Entra Microsoft Privileged Access Privileged Identity Zero Trust #Conditional Access #Entra ID #Microsoft #Zero Trust

12 Nov 2025 20 min read Updated 6 Jan 2026

Devices – The Second Pillar of Zero Trust

Introduction In the first post of this series, we explored how identity has become the new perimeter in a world where users, apps, and data are no longer confined to…

Cyber Security Entra Intune Microsoft Privileged Access Zero Trust #App Protection Policies #BYOD #Conditional Access #Devices #EDR #Intune #Zero Trust

31 Oct 2025 12 min read Updated 6 Jan 2026

Identity: The New Perimeter in Zero Trust

Welcome to the first deep dive in my Zero Trust blog series. If you’ve read the series introduction, you’ll know that Zero Trust isn’t a single product or a quick…

Azure Cyber Security Entra Microsoft Passwordless Privileged Access Privileged Identity Zero Trust #Entra ID #Microsoft #Privileged Access #Privileged Identity #Zero Trust

21 Oct 2025 14 min read Updated 6 Jan 2026

Zero Trust Blog Series: A Microsoft-Centric Approach

Introduction Over the past few years, I’ve seen a growing interest in Zero Trust but also a lot of confusion. Many still view it as a product you can buy…

Azure Cyber Security Entra Microsoft Zero Trust #Cloud Security Strategy #Cyber Security #Microsoft #Zero Trust

13 Aug 2025 12 min read Updated 1 Feb 2026

Self-Hosted WordPress Made Simple

Introduction In a previous post, I walked through the step-by-step process of setting up a LAMP stack and deploying WordPress on Ubuntu. While that approach is great for learnin...

GitHub Scripting Self-Hosting Ubuntu Virtual Web Development WordPress #Apache #Blogging #Hosting #LAMP #Ubuntu #Virtual #Wordpress #automation

11 Aug 2025 6 min read

Automate Your Elgato Key Light Air with Microsoft Teams Presence

Introduction If you’re anything like me, you’ve probably joined a video call only to realise your lighting isn’t quite right. I use an Elgato Key Light Air, and I wanted…

Automation Azure Entra Mac OS Microsoft Graph Python Scripting Ubuntu #Azure #Elgato Keylight Air #Entra ID #Microsoft Graph #Scripting #Ubuntu #linux #python

15 Jul 2025 10 min read Updated 17 Jul 2025

Secure Dynamic DNS Updates to Azure with AzureDNSSync

Introduction Like many home users, my broadband connection comes with a dynamically assigned public IP address. This means that my IP can change at any time sometimes without no...

Automation Azure GitHub Networking Scripting Ubuntu #Ubuntu #azure-automation #azure-dns #certificate-authentication #cron #dns-management #dynamic-dns #entra-id #home-networking #linux #python #self-hosting

12 Jul 2025 20 min read

OpenVPN Site-to-Site setup

Introduction Setting up a Site-to-Site VPN is a powerful way to securely link two remote networks—such as a home lab and a cloud environment—so they behave as if they’re on the...

Azure Networking Ubuntu VPN #Azure #Easy-RSA #Firewall #Home Lab #Hybrid Cloud #IPSec Alternative #Linux Networking #Networking #OpenVPN #Routing #Self-Hosted VPN #Site-to-Site VPN #Ubuntu #VPN Configuration

8 Jun 2025 9 min read

Deploying Azure Virtual Desktop – A Modular, Automated Approach

Introduction Azure Virtual Desktop (AVD) is Microsoft’s comprehensive Desktop-as-a-Service platform, enabling secure remote access to Windows desktops and apps from virtually an...

Automation Azure Azure Virtual Desktop Entra Infrastructure as Code Intune Microsoft Microsoft Graph PowerShell Scripting Virtual #AVD #Azure #Conditional Access #Entra ID #Microsoft #Microsoft Graph #PowerShell #Virtual #automation #azure-ad #bicep #dns #enterprise #fslogix #hybrid-join #identity #infrastructure-as-code #rbac #remote-desktop #storage

30 May 2025 7 min read

Windows Image Prep Tool for Microsoft Surface Laptop 7th Edition

Introduction A while back I wrote a post about my experience with getting my Microsoft Surface Laptop 7th Edition working with a clean install of Windows 11, you can see…

AI Copilot GitHub Microsoft PowerShell Scripting Windows 11 #GitHub #Microsoft #PowerShell #Windows11

9 May 2025 5 min read

Using Cloud PKI with Always On VPN

Using Microsoft Cloud PKI With Always On VPN Introduction I have been playing around with Always On VPN recently. Using it with Domain, Hybrid and Entra Joined devices. As you…

Intune Microsoft Uncategorized Windows 11 #Entra ID #Intune #Microsoft #Windows 11

6 May 2025 4 min read

Always On VPN Entra Join – Part 5 Deploy Always On VPN for Entra Joined Devices

This is part 5 of my Always On VPN series You can review the pervious posts if required: Introduction So we now have everything in place for Always On VPN….

Microsoft Networking #Microsoft

6 May 2025 9 min read

Always On VPN Entra Join – Part 4 Configure Always On VPN for Entra Joined Devices

This is part 4 of my Always On VPN series You can review the pervious posts if required: Introduction The infrastructure you have in its current state is great if…

Microsoft Networking #Microsoft

6 May 2025 11 min read

Always On VPN Entra Join – Part 3 Core Always On VPN Infrastructure

This is part 3 of my Always On VPN series You can review the pervious posts if required: Introduction Now we have the certificates available the next step is to…

Microsoft Networking #Microsoft

6 May 2025 8 min read

Always On VPN Entra Join – Part 2 Certificate Templates

This is part 2 of my Always On VPN series You can review the pervious posts if required: Introduction Certificates are at the heart of Always On VPN as this…

Microsoft Networking #Microsoft

6 May 2025 4 min read

Always On VPN Entra Join – Part 1 Whats needed

This is part 1 of my Always On VPN series You can review the pervious posts if required: Introduction Always on VPN is a technology thats been around for some…

Entra Microsoft Networking #Microsoft

15 Apr 2025 6 min read

Microsoft Surface Laptop 7th Edition

Introduction I recently with picked up a Microsoft Surface Laptop with Copilot. I wanted to go throguh my frustrations with it to get a clean install of Windows 11 on…

Microsoft Uncategorized #Microsoft

4 Apr 2025 7 min read

Mac OS connecting to Windows 365 and AVD

Introduction You may have seen from some of my posts on here and also on my YouTube channel I have been doing a lot about Windows 365 and AVD. You…

Azure Virtual Desktop Mac OS Microsoft Passwordless Virtual Windows 365 Windows App #Azure Virtual Desktop #Conditional Access #Mac OS #Microsoft #Passwordless #Virtual #Windows 365

23 Mar 2025 6 min read

Virtual PAW – Part 4 – Completing the basic setup

So this is part 4 of my multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction In this part I’ll go…

Azure Azure Virtual Desktop Entra Microsoft Microsoft Graph PowerShell Privileged Access Privileged Identity Scripting Uncategorized Virtual #Azure #Entra ID #Hosting #Microsoft #Microsoft Graph #PowerShell #Privileged Access #Privileged Identity #Virtual

27 Feb 2025 7 min read

Virtual PAW – Part 3 – Deploying the session hosts

So this is the 3rd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction Welcome to the 3rd…

Azure Azure Virtual Desktop Entra Microsoft PowerShell Privileged Access Privileged Identity Scripting Virtual #Azure #Entra ID #Microsoft #PowerShell #Privileged Access #Privileged Identity #Virtual

18 Feb 2025 6 min read

Virtual PAW – Part 2 – Core Components

So this is the 2nd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW. Part One was the high…

Azure Azure Virtual Desktop Microsoft Privileged Access Privileged Identity Scripting Uncategorized Virtual #Azure #Microsoft #Privileged Access #Privileged Identity #Virtual

14 Feb 2025 7 min read Updated 18 Feb 2025

Virtual PAW – Part 1 – A high level overview

I have decided to create this as a multi part post to hopefully make it easier to understand. Introduction So Following on from my last post I thought I’d share…

Azure Azure Virtual Desktop Entra Microsoft Privileged Access Privileged Identity Scripting Uncategorized Virtual #Azure #Azure Virtual Desktop #Entra ID #Microsoft #Privileged Access #Privileged Identity #Virtual

5 Feb 2025 6 min read

Why use a PAW?

Introduction Following on from my previous post I have been asked why I use a PAW for my own tenant, and or why not just use a conditional access policy…

Azure Azure Virtual Desktop Entra Microsoft Microsoft Graph Privileged Access Virtual #Entra ID #Microsoft #Privileged Access #Privileged Identity #Virtual

15 Jan 2025 3 min read

Securing my privileged access with AVD

I’m trying to “lead by example” (I use that term loosely), when it comes to privileged access. A bit of background For a long time my regular Microsoft 365 account…

Azure Azure Virtual Desktop Entra Microsoft Privileged Access Privileged Identity Virtual #AVD #Azure #Entra ID #Microsoft #Privileged Access #Privileged Identity #Virtual

2 Jul 2024 7 min read

Privileged Identity Management and Access Tiers

Introduction I’ve been working with a customer recently assisting with sorting out their privileged access and assisting them with their adoption of PIM (Privileged Identity Man...

Entra Microsoft Privileged Access Privileged Identity #Microsoft #Microsoft Entra #Privileged Access #Privileged Identity

9 Jun 2024 11 min read Updated 10 Jun 2024

Cost effective IPSec Site to Site VPN with Azure and UDM

Introduction There are many ways to establish a VPN between my UDM and Azure andI’ve tried them all, but, for the best result I would still recommend using an Azure…

Azure Microsoft Networking Ubuntu Virtual #Azure #Microsoft #Networking #Ubuntu #Virtual

31 May 2024 5 min read

Creating a local SMTP relay using Postfix and SendGrid

I had a question recently asking about what would be the best solution as a local SMTP relay after ditching the local Exchange Management Server after going purely cloud identit...

Ubuntu #Ubuntu

27 May 2024 5 min read Updated 10 Jun 2024

Recovering your self hosted WordPress sites on Ubuntu

So, you are backing up your Ubuntu Server but what happens when you have a failure? or you delete something from the server? How do you go about recovering it?…

Ubuntu #Ubuntu

24 May 2024 3 min read

Creating Multiple Security Groups in Microsoft Entra

I was recently asked if there was a quick way to create 180 plus Security Groups in Microsoft Entra. I used to do a lot of PowerShell Scripting but not…

Microsoft Microsoft Graph PowerShell Scripting #Entra ID #Microsoft #Microsoft Graph #PowerShell #Scripting

23 May 2024 3 min read Updated 24 May 2024

Backing up your Ubuntu web server and database

Once you have your server up and running you’ll probably want to sort out backing it up on a regular basis. If you’re running your server in Azure, sure you…

Ubuntu #Hosting #Ubuntu

23 May 2024 1 min read Updated 24 May 2024

Recommended updates to your self hosted WordPress

So, now your site is up and running you’ll want to get a few things installed on it as a base. for me I like to enable things like Multifactor…

Ubuntu #Hosting #Ubuntu

23 May 2024 3 min read

Self hosting WordPress on Ubuntu 22.04.4

I’ve used various hosting services over the years including hosted Wordpress, which has been good, but it can sometimes work out costly and also you do not have full access…

Ubuntu Virtual #Hosting #Ubuntu #Virtual