SkyWalker

Sr. Consultant Microsoft 365 | Azure

[SkyWalker @buttahsan]

@Eman17_e i treid that but showing bad sites and images

[🌨️Nik sıoqǝןɹɐɥɔ🌨️ @NikCharlebois]

Microsoft Entra ID security updates: What organizations need to do now https://t.co/38h2FN6Lkw

[A d m i n D r o i d @AdmiinDroid]

Unlicensed OneDrive accounts won't remain archived forever! Starting July 2026, Microsoft will enforce a new retention lifecycle that can eventually lead to permanent deletion.

More details: https://t.co/NB8QqtKwV3

#Microsoft365 #OneDrive #SharePoint #AdminDroid

[Adam Juelich @acjuelich]

For those using Device-bound Passkeys and want to start playing with @Yubico, here are the AAGUIDs for Attestation.

https://t.co/VAF7uSHbLG

[Trond Eirik Haavarstein @xenappblog]

Why didn’t somebody tell me before how messy our hardware inventory actually was? 😩

Just opened the new Hardware view in the Intune Dashboard:

- 100% on Windows 11 (678 devices)
- 0 Windows 10 left (good, EOS was Oct 2025)
- BUT… 15 devices haven’t checked in for 90+ days
- 117 devices with **no primary user** (empty UPN)
- 60 devices still on only 8 GB RAM
- 1 device with basically no storage left

Perfect for Win11 readiness checks, post-EOS cleanup, and planning the next refresh cycle.

The FREE Intune Dashboard gives you the full picture + CSV export ready for Entra group imports in one click.

@MSIntune #Intune

[Peter van der Woude @pvanderwoude]

New blog post: Hiding the recommended section from the Start layout and multi-app kiosk mode
https://t.co/crRcooI0DU
#MSIntune #EMS #Windows11 #Kiosk #MultiApp #Start

[Speaker 25 @rodtrent]

Microsoft Defender now monitors RPC activity https://t.co/FuYmaM6O7i

[Vlad Catrinescu @vladcatrinescu]

ICYMI: Recertified: How Microsoft 365 Copilot continues to earn trust and What Changed in a Year | https://t.co/oMxfj3zAJk by the @Microsoft365 team! #MicrosoftCopilot

[Martin Bengtsson @mwbengtsson]

📢 From July 1, Remote Help is included in M365 E3/E5.

I updated my PowerShell script to create four least-privilege custom RBAC roles + groups in seconds.

It now includes -AssignRoles to assign roles to groups automatically, plus full Multi Admin Approval (MAA) support.

https://t.co/JRD1XpvZyh

#MicrosoftIntune #MSIntune #RemoteHelp #PowerShell

[SkyWalker @buttahsan]

@Clip_Station_ 10/10

[SkyWalker @buttahsan]

@merill Nice

[Merill Fernando @merill]

If you want to get a head start on your career securing the Microsoft Cloud, here's a Zero Trust for AI play book.

https://t.co/mbojAgwy5W

Of course you need to secure all the pillars in Zero Trust not just AI.

[SkyWalker @buttahsan]

@xenappblog at the end justification

[Cyber Security News @The_Cyber_News]

🛡️ Microsoft Tightens Entra ID Password Resets With New Authentication Change

Source: https://t.co/W4ADFFtXdm

Microsoft has announced a significant security update to its Entra ID Self-Service Password Reset (SSPR) feature, introducing stricter authentication requirements designed to reduce identity-based attacks.

The update mandates the use of explicitly registered authentication methods, removing reliance on directory-stored contact information that has not been formally verified. The change is part of Microsoft’s broader Secure Future Initiative, which aims to strengthen identity verification across its platforms.

#cybersecuritynews

[SkyWalker @buttahsan]

Thanks

[Dave McCollough @davemccollough]

Great reference for Microsoft Entra roles.

Useful for understanding built-in permissions, spotting privileged roles, and supporting least privilege reviews.

https://t.co/28xSenJl2Y

[Trond Eirik Haavarstein @xenappblog]

If you're running the @Microsoft Defender Recommended ASR's it will automatically block @_HermesAgent - Just exclude folder

[SkyWalker @buttahsan]

https://t.co/mnHoDGveWP

[Daniel Bradley @DanielatOCN]

Soft-delete for Devices is in Microsoft Entra is now in Public Preview! Read more about the experience here > https://t.co/Yn4PvPE2Li 💻

Devices may get be deleted from a multitude of reasons. But now, when they are deleted, they simply get deregistered and moved to a soft-delete container for up to 30 days, during this time they can be restored. This way, the device cannot be used for authentication, or accessing cloud resources, but important data is preserved, such as the BitLocker key, LAPS password and Device Id.

#Microsoft #Entra

[Thomas Naunheim @Thomas_Live]

🔍 Hunting for #ConditionalAccess bypasses and baseline scope enforcement in #MicrosoftEntra?
 ConditionalAccessAudiences  logs every resource evaluated by CAP - but only as raw GUIDs. I built a KQL query that resolves them to names + adds key signals.
🔗 https://t.co/jTDvbKchDx

[A d m i n D r o i d @AdmiinDroid]

Most admins monitor primary mailbox storage.

#ArchiveMailboxes? Not so much. 💯

Track archive mailbox size, quotas, oversized mailboxes, and auto-expanding archives with this #PowerShellScript.

Download:
https://t.co/ysqpshTtiy

#Microsoft365 #ExchangeOnline #AdminDroid