Security Archives | Peter Klapwijk - In The Cloud 24-7 https://inthecloud247.com/category/security/ Intune, Windows, Office 365, Microsoft 365, Azure, Automation Sat, 21 Feb 2026 08:55:45 +0000 en-US hourly 1 https://inthecloud247.com/wp-content/uploads/2016/09/cropped-Cloud-1-1-32x32.png Security Archives | Peter Klapwijk - In The Cloud 24-7 https://inthecloud247.com/category/security/ 32 32 Why ‘Never persistent’ isn’t really never persistent: understanding browser sessions in Microsoft 365 Web Apps https://inthecloud247.com/never-persistent-browser-session-microsoft-365-explained/ https://inthecloud247.com/never-persistent-browser-session-microsoft-365-explained/#respond Sat, 21 Feb 2026 08:52:00 +0000 https://inthecloud247.com/?p=13723 Do you know how persistent your browser session is when a Conditional Access policy is active, in which the setting Persistent browser session is set to Never persistent?  I assumed that the browser session would never be persistent, like the setting says. Maybe I just thought to simple, as I’m not an authentication expert, but the answer seems to be; it depends. It depends on the authentication architecture of the web application, and on a setting in the browser. [...]

The post Why ‘Never persistent’ isn’t really never persistent: understanding browser sessions in Microsoft 365 Web Apps appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/never-persistent-browser-session-microsoft-365-explained/feed/ 0 Configure Azure file shares for Entra joined Windows devices and cloud identities https://inthecloud247.com/configure-azure-file-shares-for-entra-joined-windows-devices-and-cloud-identities/ https://inthecloud247.com/configure-azure-file-shares-for-entra-joined-windows-devices-and-cloud-identities/#comments Fri, 19 Dec 2025 15:16:52 +0000 https://inthecloud247.com/?p=13609 Today, I share a blog post on how we can enable Kerberos authentication for cloud-only identities on Azure file shares. Azure file shares can come handy when a file share is needed from every location and working with a cloud managed device, but till a short while back we could only enable Kerberos authentication for [...]

The post Configure Azure file shares for Entra joined Windows devices and cloud identities appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/configure-azure-file-shares-for-entra-joined-windows-devices-and-cloud-identities/feed/ 2 Deploy Microsoft Defender updates in deployment rings https://inthecloud247.com/deploy-microsoft-defender-updates-in-deployment-rings/ https://inthecloud247.com/deploy-microsoft-defender-updates-in-deployment-rings/#comments Fri, 04 Jul 2025 13:44:44 +0000 https://inthecloud247.com/?p=13489 Last week I shared in a blog post how we can easily create ring deployment groups in Entra ID. Today’s blog post describes how we can create different update policies to deploy updates for Microsoft Defender in a managed way. Keeping Microsoft Defender up to date is critical to keep our devices secure, but as [...]

The post Deploy Microsoft Defender updates in deployment rings appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/deploy-microsoft-defender-updates-in-deployment-rings/feed/ 2 Update Windows Defender during Windows Autopilot enrollments https://inthecloud247.com/update-windows-defender-during-windows-autopilot-enrollments/ https://inthecloud247.com/update-windows-defender-during-windows-autopilot-enrollments/#comments Fri, 16 May 2025 15:18:18 +0000 https://inthecloud247.com/?p=13438 Today a short post about a way to forcefully update Windows Defender Antimalware during our Windows Autopilot enrollments. When a Windows device is enrolled by an end-user the Windows Defender Antimalware version might be outdated. And because of that, sometimes even real-time protection is turned off. When Windows Update is running, the Antimalware version will [...]

The post Update Windows Defender during Windows Autopilot enrollments appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/update-windows-defender-during-windows-autopilot-enrollments/feed/ 2 Using Visual Studio with Microsoft Endpoint Privilege Management, some notes https://inthecloud247.com/using-visual-studio-with-microsoft-endpoint-privilege-management-some-notes/ https://inthecloud247.com/using-visual-studio-with-microsoft-endpoint-privilege-management-some-notes/#comments Tue, 08 Apr 2025 19:11:49 +0000 https://inthecloud247.com/?p=13308 Today, I share some notes about configuring Microsoft Endpoint Privilege Management for Visual Studio. Endpoint Privilege Management (EPM) is a feature within Microsoft Intune that allows standard users to perform tasks that typically require administrative privileges. This means users can install applications without needing full admin rights. Visual Studio (VS) seems to be one of [...]

The post Using Visual Studio with Microsoft Endpoint Privilege Management, some notes appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/using-visual-studio-with-microsoft-endpoint-privilege-management-some-notes/feed/ 2 How I solved a strange Kerberos issue https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/ https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/#comments Thu, 12 Dec 2024 15:30:00 +0000 https://inthecloud247.com/?p=12845 Today a short article that describes an issue I faced on Entra ID joined Windows devices which failed accessing on-premises resources. I was recently testing Microsofts Global Secure Access solution to provide access from Entra joined Windows devices to on-premises file shares as since a short time private DNS is available. The implementation of this [...]

The post How I solved a strange Kerberos issue appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/feed/ 5 Revoke user access in case of an emergency with a single click – on-premises AD integration https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click-on-premises-ad-integration/ https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click-on-premises-ad-integration/#comments Fri, 06 Dec 2024 11:00:00 +0000 https://inthecloud247.com/?p=12774 Today I will show you how to revoke user access for an Active Directory user account in an automated way. This is a follow-up post to the initial blog post in which I described how to build automation to revoke user access in a single click. For example in case of employee termination or when [...]

The post Revoke user access in case of an emergency with a single click – on-premises AD integration appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click-on-premises-ad-integration/feed/ 4 Revoke user access in case of an emergency with a single click  https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click/ https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click/#comments Fri, 15 Nov 2024 12:25:00 +0000 https://inthecloud247.com/?p=12646 I’ve seen several online discussions about the steps which need to be taken in case of a ‘red button’ action, for example when a user account is compromised or employee termination.  Of course, it differs depending on the environment which actions need to be taken to block access to corporate data as soon as possible [...]

The post Revoke user access in case of an emergency with a single click  appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click/feed/ 1 Get notified of new Microsoft EPM elevation requests part 2: approve or deny the request https://inthecloud247.com/get-notified-of-new-microsoft-epm-elevation-requests-part-2-approve-or-deny-the-request/ https://inthecloud247.com/get-notified-of-new-microsoft-epm-elevation-requests-part-2-approve-or-deny-the-request/#respond Wed, 11 Sep 2024 17:59:00 +0000 https://inthecloud247.com/?p=12492 Last week I wrote the first blog post about getting notified on Microsoft Endpoint Privilege Management elevation requests for which somebody needs to take action. In that blog post, I showed how we can create our own notification service for Microsoft EPM. In the example, the requester’s manager receives an Adaptive Card in the Teams [...]

The post Get notified of new Microsoft EPM elevation requests part 2: approve or deny the request appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/get-notified-of-new-microsoft-epm-elevation-requests-part-2-approve-or-deny-the-request/feed/ 0 Microsoft EPM; Run with elevated access is missing from the right-click menu https://inthecloud247.com/microsoft-epm-run-with-elevated-access-is-missing-from-the-right-click-menu/ https://inthecloud247.com/microsoft-epm-run-with-elevated-access-is-missing-from-the-right-click-menu/#comments Mon, 02 Sep 2024 14:53:14 +0000 https://inthecloud247.com/?p=12475 Today is a short blog post for people with the same issue I faced today With Microsoft Endpoint Privilege Management (EPM). I enrolled my Windows device today into Microsoft EPM and after a reboot, I noticed that I was not only missing the option to run an application with elevated access via EPM in the [...]

The post Microsoft EPM; Run with elevated access is missing from the right-click menu appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/microsoft-epm-run-with-elevated-access-is-missing-from-the-right-click-menu/feed/ 6