Kenneth van Surksum - MVP

Microsoft MVP Enterprise Mobility & Security | Modern Workplace Consultant | Workplace Ninja User Group Netherlands | Secure At Work

[Kenneth van Surksum - MVP @kennethvs]

🚀 New Conditional Access Baseline (v2025-10) is now live on GitHub!
👉 https://t.co/YmuXqIO4I4

It includes:
✅ JSON export of all CA policies
📄 PDF overview via Merill’s CA Documenter
🧰 Export tooling by Mikael Karlsson

Based on my earlier Conditional Access Demystified whitepaper still updated regularly with the latest Microsoft Entra ID practices.
Full post 👉 https://t.co/N5RMOMpAMt

[#ExpertsLiveNL @ExpertsLiveNL]

🚨 Laatste kans-alert voor Experts Live Netherlands 2026 🚨

De tickets gaan hard. Heel hard.

Dus als je op 1 en 2 juni bij hét Microsoft-community event van het jaar wilt zijn, wacht dan niet tot je agenda “magisch rustiger” wordt. Spoiler: dat gebeurt niet. 😉
Met een bomvol programma, sterke keynotes, closing notes, technische sessies en volop ruimte om de community te ontmoeten, wordt dit weer een editie die je niet wilt missen.

Wil je erbij zijn? Wacht dan niet te lang. De tickets lopen snel op en deze editie raakt steeds dichter bij uitverkocht.

📅 1–2 juni 2026
📍 NBC Congrescentrum, Nieuwegein
🎟️ Pak je ticket nu: https://t.co/8yJPVPXBk9

#ExpertsLiveNL #MicrosoftCommunity #TechEvent

[Kenneth van Surksum - MVP @kennethvs]

@Micke_K_72 @jarwidmark Thank you @Micke_K_72 !

[Micke Karlsson @Micke_K_72]

3.10.3 Released. Added Win32 app Install/Uninstall script support and Windows Quality Update Policies. Fixed category import, JSON property order for Git tracking + multiple documentation fixes. See https://t.co/fFctA4XZkj for more info

[ProfDevSys @ProfDevSys]

Registration for AppManagEvent 2026 recently opened!

Join speakers like Brian Madden, @Timothymangan , @Samilaiho , @Paulacqure, @Mikael_nystrom @ronnipedersen @Jimmoyle , @Tim_Dk , @kennethvs , @pdaalmans and many more.

We look forward to welcome you coming fall.

[MEM Summit 2027 @MemSummit]

Identity attacks continue to evolve, and so must our defenses.

Session : What’s Next After You Mitigated AITM?

Speakers
⭐️ Erik Loef @erikloef
⭐️ Kenneth van Surksum @kennethvs

Over the last decade we moved from passwords to MFA, and more recently to phishing-resistant MFA to mitigate adversary-in-the-middle attacks. But attackers continue to adapt, and new threats are emerging.

In this session, Erik and Kenneth will explore what comes next in protecting identities, including risks such as token theft and session hijacking, and what organizations should consider as the next step in strengthening their identity security strategy.

What you will learn
• How identity attacks have evolved from passwords to AITM attacks
• Why phishing resistant MFA is only part of the solution
• What new threats such as token theft mean for modern identity security

Discover the full agenda and all sessions at
https://t.co/WwwBe4TZg8

#MEMSummit #Endpointmanagement

[MC2MC @mc2mcbe]

On February 5th, we’re excited to have @pdaalmans and @kennethvs take the stage at MC2MC Connect.

Their session, “Essential Tips and Tricks for Today’s Workplace Admin,” is packed with actionable, real-world insights.

🎟️ https://t.co/PlPmvZAnAR

#MC2MC #ConnectMC2MC2026

[WP Ninjas User Group NL @wpninjasnl]

🚀 Speaker Announcement!
Excited to welcome Ugur Koc, well-known community contributor and Senior Product Manager at glueckkanja, to WP Ninja Connect on 4 Feb 2026!
Creator of many tools that truly help the community move forward.

🔗 https://t.co/bfZA9wxwRd

🥷🏼 #WPNinjasNL

[Kenneth van Surksum - MVP @kennethvs]

@MihaPecnik That is unintentionally, let me fix that

[Kenneth van Surksum - MVP @kennethvs]

🚀 New Conditional Access Baseline (v2025-10) is now live on GitHub!
👉 https://t.co/YmuXqIO4I4

It includes:
✅ JSON export of all CA policies
📄 PDF overview via Merill’s CA Documenter
🧰 Export tooling by Mikael Karlsson

Based on my earlier Conditional Access Demystified whitepaper still updated regularly with the latest Microsoft Entra ID practices.
Full post 👉 https://t.co/N5RMOMpAMt

[Kenneth van Surksum - MVP @kennethvs]

RT @Mister_MDM: The Intune MDM Device Certificate and its renewal…

Next year (around 03/04 of 2025) every single Intune MDM certificate wi…

[Kenneth van Surksum - MVP @kennethvs]

Microsoft keeps rolling out new #Copilot features at lightning speed, great for innovation, but risky without #governance. In my new blog I share how to bring order to this fast-moving rollout in Microsoft 365 👇
https://t.co/duxE1RF5x9

[Rudy Ooms @Mister_MDM]

Ever feel like Intune takes its time to apply a policy?

That behavior isn’t something new…. it goes back to the original “get, set, get” model Microsoft built nearly twenty years ago.
The same OMA DM Protocol that once powered Windows Phone became the blueprint for every Intune policy still running today.
Even now, you can still spot WindowsPhoneProvider references buried inside the OMA DM client code.

This blog looks at where Intune all started:

https://t.co/rgWCm7Rj0V

#Intune #MSIntune #Windows #Windows11

[Kenneth van Surksum - MVP @kennethvs]

Balancing Control & Convenience — Preventing Edge Password Sync on Unmanaged Devices 🖥️

How to secure Microsoft Edge with:
✔️ Conditional Access
✔️ Edge Management Service
✔️ Smart sign-in restrictions

Learn how to block password sync safely 👉 https://t.co/QpzUX83yHt

#MicrosoftEdge #Intune #ConditionalAccess #EntraID #Security #M365

[Tony Redmond @12Knocksinna]

.@Office365 #Entra and #Microsoft365 are formed from many apps. A recent update exposes additional Microsoft 1st party apps for Conditional Access policies. Most are linked to the My Sign-Ins portal. Here's what's happening:
https://t.co/rgvfcerH8o

[Rudy Ooms @Mister_MDM]

Ever wondered what those S 1 12 1 entries in your Administrators group actually represent

With the new AADSidToNameV2Support feature, Entra group and role SIDs are automatically translated into real names and stored on the device (cached)

Here is the blog that explains how it works

https://t.co/xyDL2dPKar

#Intune #MSIntune #Windows #Entra #Windows11 #Azure

[Kenneth van Surksum - MVP @kennethvs]

When “Block All” in Conditional Access blocks too much… 🔒
Until recently, guest users couldn’t change their MFA methods when you blocked all cloud apps.

The My Sign-ins app is now selectable in Conditional Access 🎉

Finally possible:
✅ Limit guests to M365 resources
✅ Keep self-service (MFA, profile) working

🧩 Read how to configure it: https://t.co/gmA2IJRWBY

#EntraID #ConditionalAccess #Microsoft365 #Intune

[Jose | MVP @schenardie]

@wpninjasummit is kicking off soon. All paths lead to Baden.

[Kenneth van Surksum - MVP @kennethvs]

@Mister_MDM 🙈

[Kenneth van Surksum - MVP @kennethvs]

@Mister_MDM 🙈

[Cloud IdentitySummit @identitysummit]

🛡️ Identity #Security at its Best🛡️

Our #IdentitySecurity Track dives deep into the challenges & innovations shaping secure identity infrastructures. From token theft protection to Conditional Access.

👉https://t.co/uZCWUUgYla

#IdentitySummit #MicrosoftEntra #ConditionalAccess