IntroductionI had a conversation with a customer recently: "We want better visibility into our Windows endpoints for security monitoring, but we don't know where to start." Honestly, that's a fair place to be stuck. Windows can generate a huge number…

Introduction During an SCCM Operating System Deployment (OSD), a client successfully obtained an IP address, downloaded WDSNBP, contacted the PXE-enabled Distribution Point, and then aborted PXE boot. The SMSPXE.log revealed that SCCM could not locate the required boot image for…

Introduction "One of the executives receiving Microsoft Authenticator prompts several times. Could someone be trying to access the account?" Whenever users report frequent MFA prompts, the first concern is usually security. Questions about compromised credentials, password spraying, token theft, or…

In enterprise environments, Configuration Manager (SCCM/MECM) servers are often shared by multiple administrators for day-to-day operations. While this centralized access improves efficiency, it can also introduce a common operational issue: inactive/disconnected RDP sessions consuming server resources. In this post, I’ll…

Introduction: Organizations enabling remote work with BYOD devices often rely on Azure Virtual Desktop (AVD) or Windows 365 Cloud PC. A common onboarding security practice is to create users in on‑premises Active Directory (AD) with the option “User must change…

One of our customers recently migrated from a third‑party MDM to Microsoft Intune (BYOD) using MAM-only app protection policies. Shortly after go‑live, user reported on iOS began seeing the following message in Microsoft Teams and other Intune-managed apps: Alert: Your organization…

Recently, I was setting up a new Configuration Manager (SCCM) environment as part of a side-by-side migration. One of the key configuration tasks was to replicate the Software Update Point (SUP) settings — particularly the Products selected for synchronization —…

Introduction: I was recently working on the rollout of a passwordless authentication solution in Microsoft Entra ID, which included Windows Hello for Business and Passkeys (FIDO2 security keys). As part of that rollout, one of the requirements was to identify…

Recently, I worked on an SCCM report that compares the list of applications installed on two different computers—typically an older device and a new PC. This is particularly useful in scenarios such as hardware migrations or system upgrades or Virtual…

Recently, I came across an insightful blog post on X (formerly Twitter) by Peter, discussing dynamic group creation for Intune deployments. Inspired by that, I wanted to share my own method—using regular expressions (regex) in Entra ID dynamic groups to…