Category: Cyber Security

Windows LAPS: Rethinking Local Administrator Management · Part 3

6 Oct 2026 14 min read

Windows LAPS on Windows Server: Same Technology, Different Design

Windows LAPS works across Windows clients and servers, but the architecture shouldn't simply be copied from Windows 11. A practical look at member servers, Active Directory, pas...

Windows LAPS: Rethinking Local Administrator Management · Part 2

4 Oct 2026 12 min read

Windows LAPS: Intune or Group Policy for Windows 11?

Windows LAPS can be configured through Intune or Group Policy, but what happens when both are present? A practical look at policy precedence, hybrid environments and choosing a...

Windows LAPS: Rethinking Local Administrator Management · Part 1

30 Sept 2026 12 min read

Windows LAPS on Windows 11: Designing Local Admin Properly

Windows LAPS can now create and manage its own local administrator account on Windows 11. But which account should you manage, and what about every other local admin?

Cyber Security #Conditional Access #Cyber Security

28 Sept 2026 13 min read

Your Conditional Access Policy Says Require MFA. What Does That Actually Mean?

What does “Require MFA” in Conditional Access actually guarantee? A practical look at MFA, Authentication Strength, phishing-resistant authentication, passkeys, synced passkeys...

24 Sept 2026 10 min read Updated 28 Sept 2026

Windows LAPS: More Than Password Rotation

Windows LAPS is about more than rotating a local administrator password. In this introduction, I look at how Windows LAPS has evolved, the difference between the account, manage...

Windows LAPS: Rethinking Local Administrator Management

Microsoft Global Secure Access · Part 10

22 Sept 2026 17 min read

What I Learned Deploying Global Secure Access for Real

After ten posts exploring Microsoft Global Secure Access, it is time to step back from the configuration guides and architecture diagrams. These are the lessons I learned from d...

Microsoft Global Secure Access · Part 9

22 Sept 2026 19 min read

Global Secure Access and Privileged Access: An Architecture I Want to Test

What could Microsoft Global Secure Access add to a privileged-access architecture? This article explores a conceptual design combining Entra Private Access, application segmenta...

Microsoft Global Secure Access · Part 8

21 Sept 2026 17 min read

Designing Entra Private Access Properly: Don't Rebuild Your VPN in the Cloud

Microsoft Entra Private Access can replace traditional VPN access, but simply publishing broad private networks through Quick Access risks recreating the same access model in a...

Microsoft Global Secure Access · Part 7

16 Sept 2026 14 min read

Global Secure Access Alongside Your Existing Security Stack

Where Global Secure Access fits alongside Intune, Defender, Conditional Access and network controls, and how to separate useful overlap from policy duplication.

Microsoft Global Secure Access · Part 6

31 Aug 2026 23 min read

Migrating from a Traditional Secure Web Gateway to Global Secure Access

Migrating from a traditional Secure Web Gateway to Microsoft Global Secure Access is more than replacing one endpoint client with another. This article explores policy rationali...

Entra #Cyber Security #GSA

26 Aug 2026 15 min read

Entra Internet Access: Moving Web Security to the Identity Layer

Explore how Microsoft Entra Internet Access moves traditional Secure Web Gateway controls towards an identity-aware security model, combining web filtering, user and group polic...

Microsoft Global Secure Access · Part 5

Microsoft Global Secure Access · Part 4

25 Aug 2026 12 min read

Global Secure Access on Mobile Devices

Explore how Microsoft Global Secure Access extends identity-aware access to managed iOS, iPadOS and Android devices using Entra Internet Access and Entra Private Access.

Microsoft Global Secure Access · Part 3

24 Aug 2026 26 min read

Microsoft Global Secure Access on macOS: Extending Identity-Driven Access Beyond Windows

Explore how Microsoft Global Secure Access brings identity-driven Private Access, Internet Access and Microsoft traffic controls to managed macOS devices.

Microsoft Global Secure Access · Part 2

19 Aug 2026 26 min read

Replacing Traditional VPN Access with Microsoft Entra Private Access

Learn how Microsoft Entra Private Access replaces broad VPN connectivity with identity-driven, application-aware access to private resources.

Authentication Assurance · Part 9

18 Aug 2026 16 min read

Bringing Authentication Assurance Together

Bring Authentication Assurance together into a complete architecture, connecting Trust Levels, passkeys, FIDO2, Authentication Strengths, Conditional Access, TAP, privileged acc...

Authentication Assurance · Part 8

17 Aug 2026 13 min read

Building High-Assurance Administrative Accounts

Learn how to build high-assurance administrative identities by combining dedicated accounts, FIDO2 security keys, Authentication Strengths, Conditional Access, PAWs, PIM and sec...

13 Aug 2026 15 min read Updated 14 Aug 2026

Giving SaaS Applications a Fixed Egress IP with Microsoft Entra Private Access"

Use Microsoft Entra Private Access source IP anchoring to give IP-restricted SaaS applications a controlled and predictable public egress address.

Microsoft Global Secure Access · Part 1

Compliance & Governance #Cloud Security Strategy #Conditional Access

13 Aug 2026 21 min read

Temporary Access Pass and Secure Onboarding

Explore how Temporary Access Pass can securely bootstrap and recover passwordless authentication, and why single-use, multi-use, duration and identity verification all matter wh...

Authentication Assurance · Part 7

Authentication Assurance · Part 6

13 Aug 2026 11 min read

Authentication Strengths in Microsoft Entra

Learn how Microsoft Entra Authentication Strengths and Conditional Access can turn Authentication Assurance from an architectural principle into an enforceable security control.

Authentication Assurance · Part 5

13 Aug 2026 11 min read

Choosing the Right Authentication for Each Trust Level

Learn how to align authentication methods with identity Trust Levels, from dedicated FIDO2 security keys for critical administrators to device-bound and synced passkeys where ap...

Authentication Assurance · Part 4

11 Aug 2026 6 min read

Not All Passkeys Provide the Same Level of Assurance

Discover why phishing-resistant authentication doesn't automatically provide the same level of operational assurance, and how different passkey implementations influence privile...

Authentication Assurance · Part 3

11 Aug 2026 4 min read

Understanding Modern Passkeys

Learn what passkeys are, how they work and the differences between platform, roaming, synced and device-bound passkeys in modern authentication.

Authentication Assurance · Part 2

11 Aug 2026 4 min read

The Evolution of Authentication

Discover how authentication has evolved from passwords to phishing-resistant passkeys, and why understanding that journey is key to designing modern identity security.

Authentication Assurance · Part 1

11 Aug 2026 4 min read

Why Authentication Assurance Matters

Why modern identity security is about more than enabling MFA. Learn why authentication assurance should increase alongside the value and impact of the identities you're protecting.

Cyber Security #Continuous Improvement #Entra ID

8 Aug 2026 3 min read

Authentication Assurance – Introduction

An introduction to Authentication Assurance and why modern identity security is about more than simply enabling MFA or going passwordless.

Authentication Assurance

Privileged Access Workstations · Part 8

Building a Modern Privileged Access Strategy

Learn how to build a modern privileged access strategy by combining Trust Levels, Privileged Access Workstations, phishing-resistant authentication, Conditional Access, PIM and...

Cyber Security #Cloud Security Strategy #Cyber Security

Privileged Access Workstations · Part 7

Operating and Maintaining a Privileged Access Workstation

Learn how to operate and maintain a Privileged Access Workstation by managing configuration drift, patching, compliance, monitoring and governance to preserve administrative ass...

Cyber Security #Cloud Security Strategy #Continuous Improvement

Privileged Access Workstations · Part 6

Hardening a Modern Privileged Access Workstation

Learn how to harden a modern Privileged Access Workstation using Microsoft Intune, Microsoft Defender, Conditional Access, PIM and Windows security features to build a trusted a...

Cyber Security #Cyber Security #Endpoint Security

Privileged Access Workstations · Part 5

Choosing the Right Administrative Environment

Learn how to choose the right administrative environment by balancing risk, operational requirements and assurance when deploying Privileged Access Workstations.

Cyber Security #Cloud Security Strategy #Cyber Security

6 Aug 2026 6 min read

Virtual Privileged Access Workstations

Explore how Virtual Privileged Access Workstations (vPAWs) provide a secure and practical alternative to physical PAWs by balancing administrative assurance with operational fle...

Privileged Access Workstations · Part 4

Cyber Security #Cloud Security Strategy #Cyber Security