09Dec
19Aug
Reader Question: How can I set up a “Deny-by-Default” Conditional Access Policy?
It has been a while since I took a question from a reader and turned it into a blog post. It is one of my favorite things to do here on ITProMentor, but the “busy-ness” of life has taken me away from the keyboard a lot in recent months. Now...
11Jul
Updated Migration Advice: Remove the last Exchange Server?
The last time I published articles on the topic of email migration was in the long, long ago: in the before time. Yes, before pandemics and novel coronaviruses, but also before we had the option to remove the last Exchange server. Some have asked me if I would change any...
06Jan
Announcing the Practice Development Community and Monthly Educational Series
Today is a big day here at ITProMentor.com. We are entering a new year, and we have a big agenda to go along with it! In my recent surveys many of you indicated interest in gathering together and forming a community. As well, more than a few have asked...
30Jun
Troubleshooting weird Azure AD Join issues
If you are starting to do more Azure AD Join (or disjoin/rejoin) operations, you may run into some issues at times where the computer reports an error. These can take several forms, but generally the message is, "Sorry dude, but you can't join/register this device." Here are a few scenarios that...
11Feb
Boost your security with Hybrid Azure AD Join: From Zero to Conditional Access in one afternoon
"Alex, I work at a non-profit and I would love to take advantage of the better security in Microsoft 365 Business (we have Business Premium now), but it sounds like it is for "cloud-only" customers? Is that right?? We are using Office 365 for Exchange, but we can't go cloud-only...
01Dec
2020 Edition of the Recommended Conditional access policy design guide is available now
I just finished updating the Conditional access design guide, part of the Microsoft 365 Best practices checklists. The new updates reflect some carefully considered feedback from my clients (real-world scenarios), as well as some new additions and a better organizational structure, in three major groups: Authentication Baseline policies – Replaces the Security...
29Oct
New updates to the BP guides PLUS the Office 365 Security Checklist
I have heard from so many people about the Microsoft 365 Best Practices checklists--you guys & gals seem to really like them! I'm pleased to hear it. Although all of this content is available for FREE on my website, I still hear from folks every day who want a...
24Sep
Azure AD Device States, revisited
I have an older article on Azure AD Device States already, but I wanted to quickly return to this topic. I have a few in the audience who are still confused about this. Notice the "Join type" column corresponding to the device state Azure AD Registered - A machine that shows...
04Sep