Learn
Posts in a sensible order, one-page cheat sheets to keep beside you, and a glossary for the acronyms.
Learning paths
progress is saved in this browserConditional Access from zero
Build a Conditional Access setup you can trust: safe testing, emergency access, the right MFA, locations and device compliance.
Passwordless rollout
Move users from passwords and text messages to passkeys, from the first sign-in to retiring SMS.
Intune for Windows, start to finish
Apps, scripts, local admin passwords and compliance, in the order most teams roll them out.
Locking down admin access
Emergency accounts, just-in-time roles, strong activation and safer app permissions.
Automating Entra and Azure safely
Scripts and pipelines without stored secrets, and the queries to keep an eye on them.
Azure landing zone guardrails
The cheap, high-value controls every Azure estate should have before it grows.
Shrinking hybrid identity
Plan the move from Connect Sync, convert users to the cloud and rethink hybrid join.
Cheat sheets
one A4 page each · print or save as PDFEntra ID authentication methods
Every sign-in method in Entra ID at a glance: how strong it is, whether it's passwordless, and where it fits.
Conditional Access building blocks
What goes into a Conditional Access policy, how policies combine, and the baseline set most tenants should have.
Intune enrolment options
Which enrolment method to use for each platform, for corporate and personal devices.
Private endpoint DNS zones
The private DNS zone for each common Azure service, and the rules that make private endpoints resolve properly.