Something that flew under my radar this summer was the release of Microsoft Connected Cache for Enterprise and Education. Originally, Configuration Manager (SCCM) had a Connected Cache functionality through its Distribution Points. This is something I’ve successfully deployed before and actually works great by caching content on-premises so clients can benefit from Delivery Optimization features […] The post Microsoft Connected Cache for Enterprise and Education – Deployment guide appea...| Mindcore Techblog
In previous blogposts, I’ve described how we can use the OpenSSH extension through Azure Arc to gain better remote SSH and RDP sessions to machines without requiring direct network access. However, they’ve always required we login to the machine with local credentials (or domain, but that’s old school, we want to get away from that). […] The post Modern Server Management – Azure Arc RDP with Entra ID Authentication appeared first on Mindcore Techblog.| Mindcore Techblog
With the recent generally available Entra ID functionality into Bicep while I was on vacation, I couldn’t wait to get back and try it out. Specifically, I wanted to see if using this functionality would allow for some level of Infrastructure as code (IaC) to good ol’ Active Directory when combined with Group Writeback using […]| Mindcore Techblog
Learn how to enable Entra ID-based SSH logins for Linux servers managed with Azure Arc. Eliminate SSH key sprawl, improve auditing, and enforce Conditional Access, RBAC, and MFA for secure, streamlined remote access.| Mindcore Techblog
Modern Server Management with Azure Arc – Remote Management Pt.2 (Security/Linux) | Mindcore Techblog
Explore how to securely manage remote access to Linux servers using Azure Arc and Entra ID in Part 2 of our series. Learn how to eliminate VPNs and jump hosts with RBAC, PIM, Conditional Access, and SSH key automation for a Zero Trust architecture.| Mindcore Techblog
In 2022 we wrote a post about SharePoint and OneDrive integration with Microsoft Entra B2B. As of 2025, the information in this post remains relevant for tenants created before June 2023; tenants provisioned after that date have Entra B2B integration enabled by default. Now, only one command is needed instead of two as before. An […]| Mindcore Techblog
Search blog posts| Mindcore Techblog
A common question in our Microsoft 365 governance workshops is whether to allow the OneDrive client to sync with other organizations. If needed, modern managed Windows computers can restrict OneDrive syncing to specific Entra ID tenants only. Previously, we used a Group Policy Object (GPO) to restrict OneDrive access to a designated Active Directory. In […]| Mindcore Techblog
What is Azure Arc Azure Arc is a Microsoft service that extends your Azure management and governance capabilities to your resources outside of Azure, and this can include on-premises servers, virtual machines, and other cloud environments. With Azure Arc, you can centrally manage, secure, and automate workloads across hybrid and multi-cloud environments using familiar Azure […] The post Azure Arc & Hybrid Workers – Simplifying Hybrid Cloud Automation Pr.1 appeared first on Mindcore Techblog.| Mindcore Techblog
In this small blog post, I will try to give you some insights on what Advanced hunting´s custom detection rules is – and how you can use it! Introduction Microsoft Defender XDR is a powerful security platform that uses AI, machine learning, and behavioral analytics to detect and respond to threats in real time. One […] The post Microsoft Defender XDR – Advanced Hunting – Custom Detection rules appeared first on Mindcore Techblog.| Mindcore Techblog
On updated tenants, external file sharing is now enabled in both 1:1 and group chats. MC1102790 Roadmap ID 492625 When this feature is not enabled you will not see an attach file option when chatting with an external user. To share a file, you must first share the file from your OneDrive and then add […] The post Microsoft Teams can now attach files in external chats appeared first on Mindcore Techblog.| Mindcore Techblog
In this first Azure Arc Remote Management focused blogpost, let’s cover the OpenSSH extension and how it can be used to get a remote PowerShell connection over SSH and even a Remote Desktop Session, all without any direct network connectivity. The best part: It costs absolutely nothing! Join me in this adventure to more securely […] The post Modern Server Management with Azure Arc – Remote Management Pt.1 (SSH/RDP) appeared first on Mindcore Techblog.| Mindcore Techblog
Intro AI, AI, AI… Yes, we’ve heard it over and over again. Get used to it! 🤣 If you work within one of these portals (Defender, Intune, Entra, Sentinel, Purview, you are the perfect candidate to continue reading. My view might differ from others, I’m not easily sold or impressed. That’s why I stay critical […] The post Getting Started with Microsoft Security Copilot: A Practical Guide for Defender, Intune, Entra & More appeared first on Mindcore Techblog.| Mindcore Techblog
Have you ever experienced unexplainable changes to your Windows Servers system time before? We sure have! And Microsoft has recently changed their recommendation on Secure Time Seeding which seems to be the root cause for these strange behaviors as described here. Microsoft has identified potential timekeeping issues in Windows Server OS caused by the Secure […] The post Microsoft’s changed recommendation on Secure Time Seeding for Windows Server appeared first on Mindcore Techblog.| Mindcore Techblog
In this post, we’ll look at suppressing single sign-on (SSO) consent prompts for Azure Virtual Desktop (AVD) and Windows 365. These consent prompts can be very disruptive as they interrupt the smooth sign-in flow. I first came across the option to suppress SSO consent prompts while testing Windows 365 Link devices. If your organization is […] The post Say Goodbye to SSO Consent Prompts for AVD and Windows 365 appeared first on Mindcore Techblog.| Mindcore Techblog
Managing permissions for Managed Identities in Azure/Entra ID has been a long-standing challenge. Microsoft has yet not provided a built-in interface for this, leaving administrators reliant on PowerShell to handle permissions – even if the “same” exists for App Registrations and Enterprise Applications. To bridge this gap, I developed this PowerShell-based tool to the community […] The post Entra ID – Managed Identity Permission Manager appeared first on Mindcore Techblog.| Mindcore Techblog
After reading about cross-tenant quirks in sensitivity labels, I got curious: how are these labels stored in a .DOCX file—and can they be removed without encryption? Short answer: yes, and it’s surprisingly easy. The post Sensitivity Labels in .DOCX Files: How Secure Is That Metadata? appeared first on Mindcore Techblog.| Mindcore Techblog
With the release of DCSv3, I was excited to give it a try at-scale but since it hasn’t been integrated into Azure Machine Configuration (yet…) I figured I’d try a different approach to deploying and testing it. A lesser-known feature of Azure and Arc machines are Run Commands. Typically used for quick diagnoses or troubleshooting […] The post Modern Server Management – Exploring Azure Arc Run Commands using Bicep appeared first on Mindcore Techblog.| Mindcore Techblog
Her kan du se den fulde liste over Microsoft-løsninger, der pensioneres i 2025: Link: Ending Support in 2025 – Microsoft Lifecycle | Microsoft Learn The post Tidslinje over pensionering af Microsoft løsninger i 2025 appeared first on Mindcore Techblog.| Mindcore Techblog
Recently we ran into a fun experience when adjusting the Cross-Cloud meetings within the Teams Admin Center which caused Entra ID Cross-Tenant Access Settings to be changed. This behavior didn’t seem to be documented anywhere and did cause some head-scratching before we figured out why B2B invitations weren’t automatically being accepted any longer. Update 07-02-2025: […] The post Entra ID Cross-Tenant Access Settings vs. Teams Cross-Cloud meetings – Who wins? appeared first on Mindco...| Mindcore Techblog
Managing server configurations in hybrid or on-premises environments can be challenging, with outdated tools and manual processes leading to errors and inefficiencies. This post explores how to simplify configuration management with Desired State Configuration (DSC) and Azure Automanage Machine Configuration. Ever noticed this Machine Configuration option under VMs and wondered how it works? Me too! […] The post Azure Automanage Machine Configuration Introduction – Configuration as Code a...| Mindcore Techblog
Introduction You may think that setting up a language in Microsoft 365 [admin.microsoft.com] portals may be straightforward. However, it may not be as obvious as it seems at first, and there are many factors which can play a role in that. The Basics The interface language of Azure [portal.azure.com] and Microsoft 365 portals may be […] The post Languages confusion in Microsoft 365 portals appeared first on Mindcore Techblog.| Mindcore Techblog
Introduction Being a Global Administrator [GA] in Microsoft 365 portal gives you unlimited permissions to access and configure all of its components and settings. SharePoint Administrator on the other hand allows you to administer and configure everything that is related to SharePoint platform, including OneDrive of course. NoteYou should not use either of the roles […] The post Accessing user’s OneDrive with Global Administrator or SharePoint Administrator role. appeared first on Mindcor...| Mindcore Techblog
Ever since writing about The Concept of Windows 365 Boot, I’ve been puzzled by Microsoft’s choice to use User-Driven mode in the Windows Autopilot deployment profile when configuring Shared PC mode through the Windows 365 Boot guided scenario. To me, it seems illogical to use User-Driven mode in a Shared PC scenario, which is basically […] The post Windows 365 Boot: Why User-Driven Mode? appeared first on Mindcore Techblog.| Mindcore Techblog
Introduction In case you missed the update about the new announcement Microsoft is tightening security around Azure and Microsoft admin portals, by enforcing multifactor authentication (MFA) for all interactive sign-ins. This change has sparked a lot of questions across social medias, and in this post, I aim to address these questions to the best of […] The post Mandatory MFA enforcements is coming appeared first on Mindcore Techblog.| Mindcore Techblog
Microsoft in recent months has made leaps and bounds to support Multi-Tenant organizations utilizing Cross-tenant Synchronization.| Mindcore Techblog
Mindcore Techblog Let’s talk about Client Management, Security and IT Infrastructure Microsoft 365 Office 365 Azure Windows Windows Server Microsoft Endpoint Manager Security, Compliance and Identity PowerShell PowerApps Power Automate| Mindcore Techblog
Learn how to configure RBAC in Microsoft Security Copilot to control access across Defender, Intune, Entra, and more. Step-by-step guide with best practices.| Mindcore Techblog
