PIMTool
The Problem Have you ever been in the situation, where you have to activate more than one PIM role and it took ages? I built a tool, which will make PIM comfy. What is PIM? PIM or Privileged Identity Management…
Monitor Intune Apple Token Expiration with Logic App
What are these token? These tokens are necessary if you manage iOS/iPadOS or MacOS devices with Intune. There are three different token: Name Lifetime Push Certificate 1 year VPP Token 1 year DEP Token 1 year You will absolutely want…
Assign remote tenant groups to Azure roles
Why is this a big deal? Recently I stumbled above a new feature in the Azure Portal which let me assign role assigments to remote tenant groups. This will allow you to assign Azure roles to e.g. GDAP groups! Why…
How to Use Custom Compliance Policies in Microsoft Intune
What Are Custom Compliance Policies in Microsoft Intune? Rarely seen (at least I didn’t 😂), custom compliance policies will give you the ability to detect any kind of misconfigurations or custom detections (fitting your organization) and block access to organization…
What happens when you disable security defaults?
Introduction Did you ever wonder, what happens, when you disable the security defaults in an Entra ID Tenant? I recently setup a brand new tenant and were pretty surprised. What are security defaults? Maybe first, let’s have a look, what…
App Permission Info
Introduction Ever wanted to know, which app has which permission in your tenant? Happy to help 😊 This script gets all permissions from every app registration and enterprise app in the tenant and reports it in a user-friendly way. Capabilities…
Entra Backup and Recovery
At the time of writing, this feature is in public preview (March 2026) Introduction Don’t you think Microsoft is backing up your tenant… but now they do! At least some parts of it. Most of you have (hopefully) a working…
App Protection Policies for Microsoft Edge
Why App Protection Policies? App Protection Policies are a great way to secure data while on BYOD – some may know that already from iOS or Android. I will show you today how to start with MAM for Edge on…
Tenant Info PowerShell Module
I struggled to get a whole sight about some tenants I managed, so I thought I would vibe code a bit 🙂 What can it do? It gets me a plain oversight over all users, mailboxes etc. but just have…
Intune collect diagnostics: Collect Custom Logs Easily
Introduction Do you ever had the problem, that you do not have access to a device and the logs, you get out of Intune with ‘Collect Diagnostics’ are not enough? Not anymore! In this post I will show you, how…