Introduction When it comes to controlling apps on a Windows endpoint, I used to see App Control for Business as a headache to set up and maintain. But after dealing with the initial pain and figuring things out, I realised that with the right planning and tools, it's...
Introduction In my last post, we explored how to secure admin passwords and convert users to standard accounts on macOS. With this configuration, users may encounter permission prompts when apps request access to sensitive features like full disk access or screen recording. These prompts can disrupt the user experience -...
💡Update 24.07.2025: Native macOS LAPS is now available! However, it only works for newly enrolled devices with Automatic Device Enrollment (ADE). Existing devices must be re-enrolled. Check out the official documentation: https://learn.microsoft.com/en-us/intune/intune-service/enrollment/macos-laps Introduction Managing macOS devices with Intune is a...
Introduction Traditional authentication methods are increasingly vulnerable to phishing attacks. Microsoft Entra ID offers a variety of authentication methods, but not all of them provide strong phishing resistance. Authentication Method Phishing Resistant? Notes Windows Hello for Business ✅ Yes Uses TPM-bound keys and biometrics/PIN. Fully phishing-resistant. FIDO2 Security Keys ✅ Yes...
