Engineering the
Modern Workplace
Deep dives into Microsoft Intune, Azure Automation, PowerShell scripting, Exchange Online and M365 security hardening — written by practitioners, for practitioners.
Featured Articles
View all →Deploy Microsoft Entra Private Access & Global Secure Access (SSE): The Complete Zero Trust Blueprint
An exhaustive, field-tested engineering guide to deploying Microsoft Entra Security Service Edge (SSE), featuring Private Access ZTNA architecture, Connector HA, Graph SDK automation, NRPT diagnostics, and Log Analytics KQL queries.
IntuneMastering Autopilot Device Preparation (Autopilot v2): Enterprise Setup, ESP Fixes & Architecture
An exhaustive, field-tested engineering guide to implementing Microsoft Intune Autopilot Device Preparation (Autopilot v2), featuring v1 vs v2 architecture, Service Principal ownership, Win32 App packaging, ESP reboot loop fixes, and KQL log analytics.
EntraPhishing-Resistant Authentication: Deploying FIDO2 Passkeys & Conditional Access Auth Strength in M365
An exhaustive engineering blueprint for eliminating adversary-in-the-middle (AiTM) phishing attacks by enforcing FIDO2 Passkeys, AAGUID attestation restrictions, Temporary Access Pass (TAP), and Conditional Access Authentication Strengths.
Latest Posts
View all →Company Portal Disappearing on Windows 24H2: Root Causes, AppX Re-registration & Intune Remediation
Diagnose and fix Company Portal disappearing after Windows 24H2 upgrades. Root causes include AppX de-provisioning, IME sync gaps, and Store for Business deprecation. Step-by-step remediation with PowerShell & Graph API.
EntraMastering Windows LAPS with Microsoft Entra ID & Intune: Native Cloud Architecture, Post-Auth Rotation & Incident Forensics
The definitive engineering blueprint for migrating from legacy AD LAPS to native Windows Cloud LAPS in Microsoft Entra ID & Intune, configuring post-authentication automated password rotation (PAA), role-based access control (RBAC), and monitoring event log telemetry.
PowerShellAutomating Intune Hardware & Managed App Inventory Telemetry Extraction to PowerBI via Microsoft Graph API
A production blueprint for engineering an automated telemetry data pipeline from Microsoft Intune to PowerBI using PowerShell 7, Microsoft Graph API pagination, and Azure Blob storage for executive asset & vulnerability reporting.
IntuneMicrosoft Copilot Pages: Streamlined Access via Slash Commands & Library Tab—September 2026 Rollout
Starting September 2026, access existing Copilot Pages via the '/' menu in chat or the Library tab. 'Edit in Pages' now focuses on creation only. No admin controls required—change management guidance included.
SecurityPackaging & Deploying Complex Win32 Apps in Microsoft Intune: Advanced Detection Rules, Silent Transforms & Exit Code Architecture
A deep enterprise guide to packaging challenging desktop applications (CheckPoint, FortiClient, legacy MSI/EXE installers) with Microsoft Win32 Content Prep Tool, custom multi-condition PowerShell detection scripts, MST transforms, and return code management.
IntuneMastering Usage Location: Syncing On-Premises Active Directory Countries to Microsoft Entra ID
Learn how to resolve identity licensing and security gaps by mapping on-premises AD 'Country' attributes to Microsoft Entra ID 'Usage Location' using custom Synchronization Rules.
TeamsMicrosoft Teams Copilot Chat for GCC, GCC High & DoD: Government Cloud Rollout, Governance & Implementation
Deep-dive on Copilot Chat expansion to Teams chats, channels, calls, and meetings across GCC, GCC High, and DoD. Covers compliance boundaries, admin enablement, data residency, and governance controls for government cloud tenants ahead of GA October 2026.
IntuneConverting & Enrolling Existing Active Windows Fleet to Autopilot at Scale: The PowerShell & Graph API Blueprint
A battle-tested enterprise engineering guide to harvesting hardware hashes, leveraging Intune's native conversion policy, and automating bulk device registration via PowerShell and Microsoft Graph without disrupting active end-users.
IntuneMicrosoft Agent 365 Active Users Export: Enable Agent Usage Reporting for Licensing & Governance (MC1462914)
Master Agent 365 active users export for agent adoption visibility, licensing governance, and compliance reporting. CSV schema, admin walkthrough, and governance guardrails for M365 architects.