Andy Kemp Consulting
Insights

Blog

Browse all posts, filter by category or tag, and choose your preferred reading layout.

Not sure where to begin? Open the Start Here guide
Atlas reading a tablet while seated on books with a coffee

Showing 1-12 of 92 posts.

Windows LAPS: Rethinking Local Administrator Management
Free account needed to save — takes 30 seconds.

15 min read Updated 14 Oct 2026

Operating Windows LAPS: Deployment Isn't the Finish Line

Operate Windows LAPS: privileged retrieval, auditing, post-authentication rotation, event-log monitoring and governance of other local administrator accounts.
Windows LAPS: Rethinking Local Administrator Management · Part 4
Cyber Security #Windows 11 #Windows Server
Windows LAPS: Rethinking Local Administrator Management
Free account needed to save — takes 30 seconds.

14 min read

Windows LAPS on Windows Server: Same Technology, Different Design

Windows LAPS works across Windows clients and servers, but the architecture shouldn't simply be copied from Windows 11. A practical look at member servers, Active Directory, pas...
Windows LAPS: Rethinking Local Administrator Management · Part 3
Cyber Security #Windows 11 #Windows Server
Windows LAPS: Rethinking Local Administrator Management
Free account needed to save — takes 30 seconds.

12 min read

Windows LAPS: Intune or Group Policy for Windows 11?

Windows LAPS can be configured through Intune or Group Policy, but what happens when both are present? A practical look at policy precedence, hybrid environments and choosing a...
Windows LAPS: Rethinking Local Administrator Management · Part 2
Cyber Security #Windows 11 #Windows Server
Windows LAPS: Rethinking Local Administrator Management
Free account needed to save — takes 30 seconds.

12 min read

Windows LAPS on Windows 11: Designing Local Admin Properly

Windows LAPS can now create and manage its own local administrator account on Windows 11. But which account should you manage, and what about every other local admin?
Windows LAPS: Rethinking Local Administrator Management · Part 1
Cyber Security #Windows 11 #Windows Server
Your Conditional Access Policy Says Require MFA. What Does That Actually Mean?
Free account needed to save — takes 30 seconds.

13 min read

Your Conditional Access Policy Says Require MFA. What Does That Actually Mean?

What does “Require MFA” in Conditional Access actually guarantee? A practical look at MFA, Authentication Strength, phishing-resistant authentication, passkeys, synced passkeys...
Cyber Security #Conditional Access #Cyber Security