Engineering the
Modern Workplace
Deep dives into Microsoft Intune, Azure Automation, PowerShell scripting, Exchange Online and M365 security hardening — written by practitioners, for practitioners.
Featured Articles
View all →Microsoft Graph Beta: customDataProvidedResourceUploadSession – referenceId & files
Explore Microsoft Graph Beta's customDataProvidedResourceUploadSession, covering referenceId, file uploads, and practical API implementation tips.
EntraWindows Hello for Business - Cloud Kerberos Trust Complete Hybrid Deployment
Master Windows Hello for Business with Cloud Kerberos Trust. Complete hybrid deployment guide for secure, passwordless authentication across your organization.
IntuneIntune Device Sync: Force Refresh Every 10 Minutes
Master Intune device synchronization and configure automatic refresh intervals. Learn the architecture, API methods, and production-ready configurations for near-real-time device state.
Latest Posts
View all →M365 Next-Gen Sharing: Secure by Default, Governed by Design
Microsoft 365's new sharing experience is here, fundamentally changing how files and folders are shared. As M365/Intune engineers, understanding this shift to a 'secure by default' model is critical for robust data governance and external collaboration, driven by Entra ID, Purview, and granular SharePoint controls.
TeamsMicrosoft Teams: App centric management in Teams Admin Center to manage the Apps access for tenants, end-users, and groups in GCC High
For years, managing Microsoft Teams app access in GCC High felt like navigating a labyrinth built on layers of App Permission Policies. Global policies, custom policies, user assignments – it was a complex beast, espe...
AzureGA: Pre-upgrade Validation Checks for Azure PostgreSQL Flexible Server
Microsoft has made pre-upgrade validation checks generally available for Azure Database for PostgreSQL Flexible Server, letting you catch breaking changes before committing to a major version upgrade.
AzurePublic Preview: Markdown for Agents in Azure App Service
Azure App Service now supports Markdown rendering for AI agents in public preview, letting LLM-backed apps deliver clean, formatted responses natively.
M365OneNote Copilot Notebooks for Gov Clouds: Persistent AI Workspaces
Explore the new Copilot Notebooks design in the Microsoft 365 Copilot app, now rolling out for DoD, GCC, and GCC High. This deep dive covers compliance, prerequisites, and technical implementation for persistent AI-driven context aggregation.
ExchangePurview Label Inheritance from Attachments: iOS & Android
Outlook for iOS and Android now inherits Purview sensitivity labels from attachments. Here's the full production implementation guide.
IntuneIntune App SDK Android Phase 7: App Participation Deep Dive
A production-focused guide to implementing Intune MAM App Participation Features in Android apps — save/open policy, notifications, backup, and CA registration with real code.
M365Microsoft 365 Copilot App Gets a Chat-Centered Redesign
Microsoft is rolling out a streamlined, chat-first redesign of the M365 Copilot app starting late May 2026. Here's what admins need to check before it hits your tenant.
SecurityMicrosoft Tunnel VPN for MAM on Unenrolled Android Devices
Deploy Microsoft Tunnel VPN to unenrolled Android devices using MAM policies — no MDM enrollment required. Full architecture, config steps, and production gotchas.