Another security blog...

Another security blog...

Home
ENG
SLO
Archive
About

ENG

Assume Breach: Securing MFA Registration in Entra ID
Thanks for reading Another security blog...!
 • 
Matej Klemenčič
Entra ID Guest Accounts: Identify, Analyze, and Clean Up
For a while, I had been manually running cmdlets to export guest account reports from Entra ID.
 • 
Matej Klemenčič
Protecting on-premises from Microsoft 365 attacks
A few years ago, I came across a blog post titled Protecting Microsoft 365 from on-premises attacks, which resonated deeply with me.
 • 
Matej Klemenčič
2
Tenant Restrictions Made Easy with Global Secure Access
In certain scenarios, organizations may want to restrict access to other tenants to prevent potential data leakage or for other security reasons.
 • 
Matej Klemenčič
Switching Off Self-Service Password Reset for Administrators in Microsoft Entra
Recently, I assisted a client in implementing the Microsoft Entra self-service password reset (SSPR) feature. Their requirement was that this service be…
 • 
Matej Klemenčič
Plus Addressing in Exchange Online: Solution for Admin Accounts Without a Mailbox?
One of the cornerstone principles in maintaining a secure Microsoft 365 environment is the segregation of administrative and everyday user accounts…
 • 
Matej Klemenčič
1
Password-less: use FIDO2 as smart card
In today's digital age, where security and privacy are extremely important, we are facing the task of making sure that our devices and services have…
 • 
Matej Klemenčič
Windows LAPS: Create local administrator account via Microsoft Intune
When deploying LAPS in your environment you might want to disable the build in local administrator account and create a custom one. Previously with…
 • 
Matej Klemenčič
Microsoft Defender Updates: Managing Rollouts with Precision
Regular antivirus client components updates are crucial for maintaining a strong security posture, but it's equally important to have control over which…
 • 
Matej Klemenčič
Microsoft Defender for Endpoint script onboarding with TAGs
Onboarding devices in Microsoft Defender for Endpoint (MDE) can be done through various methods, each suited for different scenarios. However, when…
 • 
Matej Klemenčič
© 2025 Matej.GURU
Privacy ∙ Terms ∙ Collection notice
Start writingGet the app
Substack is the home for great culture