Reading Time: 6 minutes4 Introduction Following on from my previous post I have been asked why I use a PAW for my own tenant, and or why not just use a conditional access policy to ensure that a compliant device for the tenant is used by the privileged user. So, I reply with the question, why wouldn’t you want […]
Continue readingSecuring my privileged access with AVD
Reading Time: 3 minutes2 I’m trying to “lead by example” (I use that term loosely), when it comes to privileged access. A bit of background For a long time my regular Microsoft 365 account was also my GA account in my own tenant, I know, I know thats top of the no no’s when it comes to Entra, but, […]
Continue readingPrivileged Identity Management and Access Tiers
Reading Time: 7 minutes5 Introduction I’ve been working with a customer recently assisting with sorting out their privileged access and assisting them with their adoption of PIM (Privileged Identity Manager) Whilst I’d argue that PIM is not essential to secure you access to Entra, it is, in my view good practice and reduces the attack surface. You can use […]
Continue readingCost effective IPSec Site to Site VPN with Azure and UDM
Reading Time: 14 minutes9 Introduction There are many ways to establish a VPN between my UDM and Azure andI’ve tried them all, but, for the best result I would still recommend using an Azure Virtual Network Gateway. However, that does come with a price tag! Sure, there is the basic Virtual Network Gateway SKU that you can use which […]
Continue readingCreating a local SMTP relay using Postfix and SendGrid
Reading Time: 7 minutes4 I had a question recently asking about what would be the best solution as a local SMTP relay after ditching the local Exchange Management Server after going purely cloud identities. There’s a few ways this can be done, using the Windows IIS SMTP service and link in with Microsoft 365, however, to my surprise, this […]
Continue readingRecovering your self hosted WordPress sites on Ubuntu
Reading Time: 6 minutes4 So, you are backing up your Ubuntu Server but what happens when you have a failure? or you delete something from the server? How do you go about recovering it? or do you want to move your sites to another server? I’ve used this for when I move from self hosted on a VM on […]
Continue readingCreating Multiple Security Groups in Microsoft Entra
Reading Time: 4 minutes3 I was recently asked if there was a quick way to create 180 plus Security Groups in Microsoft Entra. I used to do a lot of PowerShell Scripting but not done much in recent years. Also with the switch to Microsoft Graph for management now I was treading in new territory. Previously I would have […]
Continue readingBacking up your Ubuntu web server and database
Reading Time: 3 minutes2 Once you have your server up and running you’ll probably want to sort out backing it up on a regular basis. If you’re running your server in Azure, sure you can use the backup feature there, but where’s the fun in that? So what I planned on doing was to back the following up to […]
Continue readingRecommended updates to your self hosted WordPress
Reading Time: < 1 minute1 So, now your site is up and running you’ll want to get a few things installed on it as a base. for me I like to enable things like Multifactor Authentication, the use of FIDO2 or Passkeys to secure my user account, but also I like to install things like WP Mail SMTP and Big […]
Continue readingSelf hosting WordPress on Ubuntu 22.04.4
Reading Time: 5 minutes3 I’ve used various hosting services over the years including hosted WordPress, which has been good, but it can sometimes work out costly and also you do not have full access to the infrastructure. Ubuntu can be deployed easily on Azure for very little cost, or if you have the capacity you can host on your […]
Continue reading








