By now you probably already know about Entra Global Secure Access (GSA) to provide a secure access to corporate resources, either cloud (Office 365), internal applications (private access) or even manage internet access to filter authorized web sites. Well, until now there was a down side as the device must have been joined to the […]
As you know, Entra ID offers a way to synchronize identity objects between different tenants (cross-tenant sync) the same way you can synchronize your on-premises Active Directory with Entra (Entra ID Cloud Sync or Entra ID Connect). Since recently, Entra Cross-Tenant Sync is now able to also sync groups (Entra ID – You can now
Entra – Do not delete your cross-tenant synced group before you do this Read More »
A new feature has been introduced in Entra: deleted device objects recovery. Similar to what has been there for years with user objects and more recently to group objects, you can now recover delete device objects up to 30 days after deletion. To do so, logon to your Entra tenant and access the Devices\Delete devices
Entra – You can now recover deleted device objects (preview) Read More »
With the Secure Boot certificate expiration date fast approaching (June 2026), Microsoft has released a new recommendation in Microsoft Defender to assist assessing the readiness of your environment. Off course, this means devices (either client or server) must be onboarded onto Microsoft Defender, which can be done either with Intune for clients or scripts or
Defender – Assess Secure Boot certificate expiration status Defender Read More »
If you are still relying on on-premises Active Directory for your identity management, especially because you still need to access applications or resources on-premises relying on Windows authentication, you are probably synchronizing your AD with Entra ID. Most likely, you are using Entra Connect Sync to sync your on-premises directory with Entra.
Entra ID – Prepare to migrate from Entra Connect Sync to Entra Cloud Sync Read More »
As you probably already know, you can synchronize users from one Entra ID tenant to another one, simplifying user management when in multiple tenant configuration (see Configure cross-tenant synchronization – Microsoft Entra ID | Microsoft Learn). Until now you could only synchronize user objects between tenants, with the error EntityTypeNotSupported. Well, good news as now
Entra ID – You can now synchronize groups with cross-tenant capability Read More »
As you probably already know, Microsoft has introduce a feature to reduce the number of device restart after updates deployment on Windows, called Hotpatch (see Hotpatch updates | Microsoft Learn). Well, starting May 2026, Hotpatch will now be enabled by default for eligible devices. If your organization is not ready for Hotpatch, Intune administrators can
Intune – Hotpatch will be enabled by default Read More »
Managing identity across multiple tenants is a growing challenge for organizations of all sizes. Mergers, acquisitions, and the rise of shadow IT often lead to a fragmented tenant landscape—creating security and compliance blind spots that attackers are quick to exploit. Even a single poorly secured tenant can put your entire organization at risk. This poses
Entra ID – Manage multi-tenant at scale in security (preview) Read More »
As we rely more and more to Entra ID for authentication and access control, a key requirements is the ability to recover from attacks and/or accidental changes. While there has been few improvements in Entra for quickly recovering (recycle bin for security groups (Entra ID – You can now recover deleted cloud security groups (preview))
Entra ID – You can now backup and recover your Entra tenant (preview) Read More »
If you work in an hybrid environment with Active Directory being synchronized with Entra ID using either Entra ID Connect or Cloud Sync, you probably already the best practice and recommendation to use cloud-based account only when assigning administration privileges. This helps mitigating potential account compromission to be extended to other environment and elevated privileges.
Entra ID – Entra ID Connect/Cloud Sync going to block hard match for privileged roles Read More »
