In nearly every engagement I get the question why it’s not possible to assign Azure AD roles based on Azure AD or synced AD groups. Also, in my opinion this would be a nice feature to have in a productive environment. I started building a solution based on Azure Automation, which takes care of it…
Two years ago, we implemented AzureAD PIM in our baseVISION infrastructure to rise the security level. But after some time, we recognized, that it has too many drawbacks because the activation of the requested role took sometimes longer than a few hours. Especially in Exchange, Skype or Intune this was a big Problem. Therefore, we…
By default, everyone in your organization with an Office 365 or Azure AD account has access to Compliance Manager and can perform any action in Compliance Manager. So every company with an O356 subscription or Azure AD is probably giving insights to their defense strategy if they are using the Compliance Manager. First of all,…
In the last months I got more and more requests to implement Azure AD Application Proxy to publish various services to the internet. One option is not configurable over the Azure Portal, which can be very helpful. If you have to publish a server, for example https://webserver.contos.com to the internet, but you would like to…
When you would like to use “OneNote Web Clipper”, a very useful Microsoft Edge extension, in your company environment in combination with O365 Integrated Apps disabled, then you will face the problem, that just Global Admins can use it. This is because the application requires consent to access user data per user. And if you…
During an Windows 10 / MDM / Syntaro project we faced an issue regarding MFA (Multi Factor Authentication). The customer was a local school where not all students have a smartphone during the class. Because of this, we had the requirement to disable MFA in his environment for Azure AD Joins. Our first idea was…
Azure AD Condition Access is a Microsoft solution to dynamically grant or deny access to Applications based on the User, Device, Location and Risk Levels. In this post, I will tell you how to implement Conditional Access in your environment based on notes from the field. First of all, we have to discuss the use…
If your company is using cloud resources or publishes their OnPrem Resources to the Internet then most of you just use Username/Password or probably Multifactor Authentication (MFA) for Authentication? To securely publish OnPrem Resources you are using Reverse Proxies in your DMZ? If you answer these questions with yes then, you must read this blog….
The Windows Store for Business is available on every Windows 10 (Build 1511) device and enables you as a company to purchase App licenses for your employees and define which applications they can use. Additionally you can reassign licenses, if an employee left the company. The applications are automatically updated and you have nothing to…
© G&T, Date Privacy & Cookies © 2018 baseVISION AG. All Rights Reserved.
