Fabian Bader

@fabian.bader.cloud

2445 Followers 368 Following

#Security #Azure #EntraID #XDR #MDE #Identity #M365 #AD #PKI #KQL Microsoft MVP Tweets and opinions are my own

A margarita pizza with mozzarella cheese
Made it on #58 of the MSRC leaderboard Q1 2025
a card deck from the back, fanned out, reading "Family of Client IDs" with a tree in the middle
Xelibri cellphones released by Siemens in 2003
Action required: 1 user has elevated access in your tenant. You should take immediate action and remove all role assignments with elevated access
A 3D printed Ninja Cat in zen mode
Protecting directory information If the recommended baseline MFA policy without app exclusions can't be configured due to business reasons, and your organization’s security policy must include these low privilege scopes, the alternative is to create a separate Conditional Access policy targeting Windows Azure Active Directory (00000002-0000-0000-c000-000000000000). Windows Azure Active Directory (also called Azure AD Graph) is a resource representing data stored in the directory such as users, groups, and applications. The Windows Azure Active Directory resource is included in All resources but can be individually targeted in Conditional Access policies
You can enroll your new devices to Intune even if you select Require device to be marked as compliant for All users and All resources (formerly 'All cloud apps') using the previous steps. Require device to be marked as compliant control does not block Intune enrollment and the access to the Microsoft Intune Web Company Portal application.
A piece of paper held up by magnets, still in the factory wrap.
Third party passkey providers NOT enabled.
kusto graph logo