Adam Cox

Getting started with Intune and Entra managed devices may seem straight forward, but there are a lot of hidden settings which could cause you issues further down the line. In this post I've looked at the settings across M365 to help those making the jump into cloud management I've probably missed some, but will keep updating it https://lnkd.in/epUzhxd8

101

5 Comments

Azure AD Technical Interview Questions 1. What happens when a user is deleted from Azure AD and then restored within 30 days? What attributes or permissions might not be fully restored? 2. How does Azure AD Conditional Access differ from Intune App Protection Policies, and what happens if both are applied to a user and app simultaneously? 3. If you have two policies: one that blocks legacy authentication and another that allows it for specific users, how does Azure AD evaluate these? Which one takes precedence and why? 4. You disable a user in Azure AD, but they can still access Microsoft 365 services for a while. Explain why this might happen and how to immediately revoke access. 5. Can a single Azure AD tenant have users with the same UPN? If not, how would you allow similar usernames in multi-geo or multi-domain scenarios? 6. How does Azure AD handle group membership evaluation for a dynamic group where the rule references a user attribute that was recently changed? When will the membership reflect this? 7. How do you differentiate between a guest user and a member user in Azure AD using PowerShell or Graph API, and why does it matter in Conditional Access? 8. What are some scenarios where a user might appear in Azure AD but fail to authenticate via SSO, even though synchronization looks healthy? 9. If a user is assigned licenses via a group in Azure AD, what happens if you remove the user from the group but then re-add them? Do all license settings revert automatically? 10. Explain how Azure AD authentication works behind the scenes when a user accesses an application federated with a third-party identity provider (e.g., SAML or OIDC). How does token issuance flow differ? #AzureAD #IdentityManagement #AzureSecurity #Microsoft365 #ConditionalAccess #IAM #CloudSecurity #L2Interview #AzureExperts #CyberSecurity #TechInterview #TrickyQuestions #CloudComputing #LinkedInLearning #ITPros #MicrosoftAzure #AzureADInterview

209

17 Comments

🔧 Fixed a tricky FSLogix user profile size issue in AVD with no GPO or Intune! Recently tackled an interesting issue with a client’s Azure Virtual Desktop (AVD) setup. The client is using Microsoft Entra Domain Services (not a full domain controller) to connect their AVD environment to a domain. Due to budget constraints, they don’t use Group Policy (GPO) or Intune managing ~400 users without the added licensing cost. The issue: The engineer who originally built the AVD environment missed setting a profile size limit for FSLogix. As a result, all user profiles were defaulting to 30 GB, which caused unnecessary storage consumption. Here’s how I resolved it: 1. Tried to update the registry key SizeInMB, but quickly realized it only impacts new profiles, not existing ones. 2. Mounted the FSLogix file share using a SAS URL on an AVD host. 3. Downloaded the user .vhd files locally. 4. Used the Hyper-V PowerShell module to resize each VHD to the correct size. 5. Uploaded the resized VHDs back to the FSLogix file share. ⚠️ Pro tip: You can’t use nested virtualization inside most Azure VMs. To run Hyper-V PowerShell commands like Resize-VHD, you need to use a D-series VM that supports it. #AVD #Azure #FSLogix #CloudEngineering #MicrosoftAzure #PowerShell #AzureVirtualDesktop #EntraDomainServices #TechTips

109

18 Comments

Sentinel is retiring from Azure portal.... well not yet but in July 1st 2026. So if you have currently used (like I) Sentinel from Azure you could start doing at least preparations for your own and customer environments so when the time comes everything would work like in Azure. And if you / your customer is not currently using Sentinel and is planning to start using it or migrating it I recommend to find out this new experience from the start. 🔍 This is step for Unified SecOps experience – Seamless integration of SIEM (Sentinel) and XDR (Defender), offering a single pane of glass for incident management, analytics, hunting, and automation. 🔍 Efficiency & intelligence – Reduced context switching and training overhead, AI-driven detection and response, and faster MTTR (mean time to respond) thanks to enriched threat intelligence and GenAI capabilities. 🔍Optimized SOC workflows – Integrated case management, alert correlation, and exposure management support smarter threat triage and proactive security posture improvements. 🧭 What to do next: 1. Plan ahead – Engage SOC / MSSPs / other IT staff and compliance teams early to align on timing, training, and workflows. 2.Prep your environment – Validate workspace configurations, RBAC, connectors, and workspace architecture << THIS is an important phase ! 3.Take full advantage – Use advanced AI/ML features, unified hunting and incident tools, and cost and data optimization available in the Defender portal. More in microsoft tech community article > https://lnkd.in/dGMdGGJb And thanks to Jere Haavisto for lifting this! #azure #sentinel #unifiedexperience #defender #security

26

2 Comments

I found 2 errors in the Microsoft Documentation page. Below is the statement however it is possible to create Auto Failover groups between 2 resource groups. (It has been informed by one of the mates who is part of my training) Creating a failover group between two instances in different resource groups or subscriptions is only supported with Azure PowerShell, or the REST API, and not the Azure portal or the Azure CLI. https://lnkd.in/g3-MpGxN To improve security, SQL Server Authentication logins are stored in a .bacpac export file without a password. When the file is imported, the login is created as a disabled login with a generated password But in reality whether we do dacpac or bacpac from on-premises to Azure sql the logins corresponding to that database will be transferred but they are not disabled. However, we need to recreate the password. https://lnkd.in/gaPHNeFh

45

4 Comments