Entra ID, Intune and Azure, explained for the people who run them.
What's new in Entra ID, Intune and Azure, what it means in practice, and the steps and scripts to act on it.
PS> Get-Post -Latest 1 Title : Entra ID and Active Directory backup and recovery: the complete guide PS> # 72 posts · 54 tools · 47 deadlines
Free admin tools
No ads, no sign-up. They run in your browser, so nothing you paste leaves your machine.
Attack Path Explorer NEW
Scan your tenant for every route to Global Administrator, then cut them one by one.
Sign-in Investigator
Replay sign-in logs on a 3D globe and catch password spray, MFA fatigue and impossible travel.
Tenant health check
Run one read-only script and get a scored security report for your tenant.
Least-privilege role finder
Tick what someone needs and get the smallest Azure or Entra role that allows it.
Graph query builder
Filters, the right headers and Graph PowerShell for users, groups, devices and sign-ins.
Tenant ID lookup
Any domain's tenant ID, cloud, region and whether sign-in is managed or federated.
Latest
Entra ID and Active Directory backup and recovery: the complete guide
If your identity system goes, nobody can sign in to anything, including the tools you'd use to fix it. This guide covers every layer: what Entra ID keeps for you, what it doesn't, how to protect on-premises Active Directory, and how to keep sync recoverable, with the commands for each.
Learning paths
Posts in a sensible order, with your progress saved.
Recent changes
What Microsoft changed, and what needs action.
- Google Play strong integrity enforced from 31 OctoberChangeaction
- Scoped permissions will become the defaultChangeaction
- Automatic JIT registration for iOS in release 2611Change
- macOS 15 becomes the minimum after macOS 27Changeaction
- Legacy Apple software update policies are being removedRetirementaction
By topic
Pick an area to see recent posts.
Identity, sign-in, Conditional Access and governance. All 43 Entra ID posts →
Azure What's new · Security NEWThe $6.3 billion Binance hack may have started with one engineer's laptop: what happened, and what every IT team should take from it
Binance, the world's largest crypto exchange, lost an estimated $6.3 billion on Thursday night in what looks like the biggest theft on record. Its first findings point to a compromised DevOps engineer's laptop, not stolen keys. Here's what's known so far, who investigators think did it, and the lessons for anyone who gives engineers access to production.
Intune ToolsIntroducing Admin Lens: errors explained right where you see them
Admin Lens is a free browser extension for Azure, Entra and Intune admins. It explains error codes, Microsoft IDs, tokens and Graph permissions on the page you're already looking at, and copies a clean summary into your ticket. Now live on Microsoft Edge Add-ons and the Chrome Web Store.
Entra Security · GovernanceEvery Entra default user permission, what it does, and how to check yours in one command
The agent blueprints toggle is the newest switch under Default user role permissions, but it isn't the only one. Here's what each setting controls, its Graph name, and a short PowerShell check to see where your tenant stands.
Device management, compliance and apps. All 13 Intune posts →
Intune What's newWhat's changing in Intune: the deadlines, defaults and new features to plan for now
Google Play's strong integrity check gets stricter on Saturday, scoped permissions will change who can do what in your tenant, legacy Apple update policies are on their way out, and macOS 15 becomes the new minimum. Here's every Intune change worth knowing about, what each one means and what to do.
Intune ToolsTen new free tools for Azure, Entra and Intune admins, and Admin Lens 2.1
Test NSG rules, Azure Policy definitions and dynamic group rules before you save them, see Conditional Access gaps in one grid, spot drift and Intune conflicts, and check Autopilot CSVs. Plus Admin Lens 2.1, which now explains RBAC actions, IP addresses, Windows builds, certificates and sign-in logs, and lets you add your own dictionary.
- Intune Tools
Introducing Admin Lens: errors explained right where you see them
Admin Lens is a free browser extension for Azure, Entra and Intune admins. It explains error codes, Microsoft IDs, tokens and Graph permissions on the page you're already looking at, and copies a clean summary into your ticket. Now live on Microsoft Edge Add-ons and the Chrome Web Store.
Platform, networking, governance and cost. All 18 Azure posts →
Azure What's new · Windows10 November is the biggest end-of-support day of the year: what ends, how to find it, and what to move to
.NET 8 and 9, PowerShell 7.4 and 7.5, the Azure Functions in-process model, Windows 11 23H2 Enterprise and Education, and IoT Edge 1.5 all reach end of support on Tuesday 10 November 2026, which is also Patch Tuesday. Here's how to find each one in your estate and what to move it to.
Azure Security · What's newThe PHP flaw that took websites offline worldwide: what AI found, and what to do in Azure today
Two critical PHP flaws, found with the help of AI, sent organisations around the world scrambling to take websites offline today. PHP has released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix them. Here's what happened, and how to find every PHP app you run in Azure and get the fix as quickly as possible.
- Intune Tools
Ten new free tools for Azure, Entra and Intune admins, and Admin Lens 2.1
Test NSG rules, Azure Policy definitions and dynamic group rules before you save them, see Conditional Access gaps in one grid, spot drift and Intune conflicts, and check Autopilot CSVs. Plus Admin Lens 2.1, which now explains RBAC actions, IP addresses, Windows builds, certificates and sign-in logs, and lets you add your own dictionary.
Latest posts
all 72 posts →- Entra ID and Active Directory backup and recovery: the complete guide NEWEntra ID · Hybrid identity
- The power cut that saved Maersk, and what NotPetya teaches about Active Directory recovery NEWSecurity · Hybrid identity
- The most expensive mistakes in tech history, and the lesson each one teaches NEWSecurity · Automation
- The $6.3 billion Binance hack may have started with one engineer's laptop: what happened, and what every IT team should take from it NEWSecurity · Entra ID news
- 10 November is the biggest end-of-support day of the year: what ends, how to find it, and what to move toAzure · Windows news
- What's changing in Intune: the deadlines, defaults and new features to plan for nowIntune news
- The week in review: Secure Boot, PHP2Shell, Exchange and everything else that happenedSecurity · Windows news
- Five things breaking this week: PHP attacks, Exchange, Always On VPN, Smart App Control and NTLMv1Security · Windows news
Get new posts
A practical post most days on what's changing in Entra ID, Intune and Azure, and what to do about it.