Engineering the
Modern Workplace
Deep dives into Microsoft Intune, Azure Automation, PowerShell scripting, Exchange Online and M365 security hardening — written by practitioners, for practitioners.
Featured Articles
View all →Deploy Microsoft Entra Private Access & Global Secure Access (SSE): The Complete Zero Trust Blueprint
An exhaustive, field-tested engineering guide to deploying Microsoft Entra Security Service Edge (SSE), featuring Private Access ZTNA architecture, Connector HA, Graph SDK automation, NRPT diagnostics, and Log Analytics KQL queries.
IntuneMastering Autopilot Device Preparation (Autopilot v2): Enterprise Setup, ESP Fixes & Architecture
An exhaustive, field-tested engineering guide to implementing Microsoft Intune Autopilot Device Preparation (Autopilot v2), featuring v1 vs v2 architecture, Service Principal ownership, Win32 App packaging, ESP reboot loop fixes, and KQL log analytics.
EntraPhishing-Resistant Authentication: Deploying FIDO2 Passkeys & Conditional Access Auth Strength in M365
An exhaustive engineering blueprint for eliminating adversary-in-the-middle (AiTM) phishing attacks by enforcing FIDO2 Passkeys, AAGUID attestation restrictions, Temporary Access Pass (TAP), and Conditional Access Authentication Strengths.
Latest Posts
View all →Datacenter Emergency Power Outage Procedure: Graceful Shutdown of VMware ESXi, Hyper-V, Dell iDRAC & Dell PowerVault SANs
An exhaustive, chronological disaster recovery runbook for managing sudden UPS battery runtime depletion in on-premises datacenters: sequenced graceful shutdown of VMs, Dell PowerEdge hosts via iDRAC9, Dell EMC PowerVault SANs, and the reverse cold-start power restoration protocol.
IntuneMastering AZ-802: Advanced Techniques for Printer Migration and AD Snapshots
Explore advanced strategies for AZ-802 including Universal Print migration and AD snapshots for optimal cloud integration.
IntuneOptimizing Enterprise Wi-Fi Roaming & Eliminating Intel AX211 Drops: Intune Proactive Remediations & Driver Tweaks
A comprehensive engineering runbook for eliminating sticky client disconnects, packet loss, and Microsoft Teams call drops during hallway and meeting room roaming on enterprise laptops equipped with Intel Wi-Fi 6E AX211 / AX210 adapters via Intune Proactive Remediations and registry tuning.
EntraEnterprise SAP GUI & NetWeaver SSO: Troubleshooting Expired SAML Token Signing Certificates with Microsoft Entra ID
A step-by-step incident remediation guide for resolving sudden SAP Single Sign-On outages caused by expired SAML token signing certificates, updating Entra ID Enterprise App metadata, and importing X.509 certs into STRUST without downtime.
EntraMastering the Microsoft Identity and Access Administrator Certification with Proven Strategies
Essential strategies to conquer the SC-300 exam leveraging practical labs, PowerShell, and Azure governance.
EntraEnrolling & Joining Linux Ubuntu to Active Directory and Microsoft Intune: SSSD, Realmd & Endpoint Management
A complete step-by-step engineering guide to joining Ubuntu Linux workstations to Active Directory using realmd and SSSD, configuring Kerberos auto-discovery, home directory auto-creation, and enrolling into Microsoft Intune for Linux compliance policies.
IntunePassing AZ-104 with 875: Azure Administrator Certification Strategy for Enterprise Identity & Governance
Real-world AZ-104 exam strategy achieving 875/1000. Master identity governance, virtual networks, storage, and compute resource management—critical for Microsoft 365 and Intune administrators.
IntuneDecommissioning SCCM Co-Management: Transitioning to 100% Cloud-Native Intune & Cleaning CCMExec Residue
The ultimate enterprise engineering roadmap for sliding workloads from Microsoft Configuration Manager (SCCM) to Intune, cleanly uninstalling the CCMExec SMS Agent, and removing legacy certificate and registry residue.
PowerShellAuditing Microsoft Teams Ownership & Member Sprawl with PowerShell & Microsoft Graph API
An automated governance framework to scan all Microsoft Teams in a tenant, detect orphaned teams with zero active owners, audit guest user access, and export compliance reports to CSV via Microsoft Graph & MicrosoftTeams PowerShell.