Ben Martin Baur’s Post

New Windows 365 features help provide a more secure workspace ☁ 💻 🔒 Windows 365 provides security in various layers—identity, access, and data—ensuring secure access to Cloud PCs. 🔄 Single sign-on (SSO) and in-session passwordless authentication enhance user experience and security. ⏱ Faster re-authentication (in public preview) improves security by requiring re-authentication after a set period. 📱 Mobile application management (MAM) for iOS and Android enhances security across managed and unmanaged devices. 🖼 Traceable watermarking and screen capture protection prevent sensitive data from being captured or shared. 🔑 Microsoft Purview Customer Key allows organizations to control encryption keys for data at rest in Microsoft datacenters. 🕵️♂️ Microsoft Purview forensic evidence aids in managing insider risks by providing visual insights and event triggers. 📋 Unidirectional clipboard redirection prevents accidental or intentional data leaks between Cloud PCs and clients. 📌 Read More: https://lnkd.in/gM-nB746

SUMMARY: A Microsoft Windows 365 Cloud PC issue left users' systems stuck in a restart loop following a CrowdStrike update. MAIN POINTS: - The issue was triggered by a recent CrowdStrike Falcon update. - Microsoft and CrowdStrike collaborated to investigate and resolve the problem. - Affected users experienced their Cloud PCs repeatedly restarting. TAKEAWAYS: - Users should update their systems regularly for stability. - Collaborations between companies help address and resolve software conflicts quickly. - Staying informed about software updates is crucial. #Microsoft #CrowdStrike #Windows365 #cybersecuritynews

What's next after the Crowdstrike update fiasco and the massive global IT disruptions caused by the Microsoft Azure outage? 1. The world relies heavily on three cloud service providers (CSPs): Microsoft Azure, Amazon AWS, and Google Cloud. Any disruption to these firms can severely impact major service providers worldwide. The frequency of disruptions for these CSPs has increased in recent years. The primary cause of these disruptions? You guessed it—misconfigurations, often due to automation or human errors. These CSPs need to improve their patching quality control processes. If you control the software patching and update process, ensure you test updates in your test environment before applying them to production. 2. Be very careful when applying fixes. Always go to authorized sources to verify the fixes. Do not rely on unverified and unauthorized YouTube videos. 3. Many websites operated by malicious actors have started sharing misinformation or malware disguised as fixes. Ensure you only visit authorized sources for patches and instructions. Don’t become a phishing victim in these desperate times. Here is the Crowdstrike official statement on updates for Windows: https://lnkd.in/gJJVnjdC Here is the Crowdstrike official blog warning customers about malicious actors: https://lnkd.in/gjdz_D8H

🛡️ #Streamlined connectivity for #DefenderForEndpoint is now generally available (#GA) for #Windows, #macOS, and #Linux. 👉 This experience makes it easier to configure and manage Defender for Endpoint services by reducing the number of URLs required for connectivity, providing IP & Azure service tag support, and simplifying post-deployment network management. 👉 The Defender for Endpoint-recognized simplified domain: *[.]endpoint[.]security[.]microsoft[.]com replaces the following core Defender for Endpoint services: ✔️ Cloud Protection/MAPS ✔️ Malware Sample Submission Storage ✔️ Auto-IR Sample Storage ✔️ Defender for Endpoint Command & Control ✔️ EDR Cyberdata 👉 To support network devices without hostname resolution or wildcard support, you can alternatively configure connectivity using dedicated Defender for Endpoint static IP ranges. 💡 Docs: https://lnkd.in/dfJj75Nt #MDE #EDR

We have BitLocker! Microsoft's BitLocker is a security feature for the Windows operating system that provides drive encryption. This prevents data theft if the device is lost/stolen or tampered with in any way. The keys 😉 to success: ✔ The system receiving a BitLocker policy must have TPM 1.2 or later and Secure Boot must be enabled. (For a fuller list of reqs, see: https://lnkd.in/eRw9VGBq) 📜 We used an Endpoint Security Policy in Intune to set a basic BitLocker policy that silently deploys drive encryption. ❌ In our tests, the silent deployment failed because Secure Boot was disabled. After enabling in the UEFI settings, the encryption process kicked off silently at next boot without any user intervention. 🔐 The drive is now encrypting used space only and the recovery keys are backed up to the device object viewable in both Intune and Entra AD. 🔑 Onto configuring passwordless authentication! #Microsoft #LAPS #Entra #Intune #Autopilot #Cloud #Windows #PC #Azure #BitLocker #DriveEncryption

🌟 Excited to unveil my latest blog post, "Spoof/Change MAC Address permanently in Microsoft Azure"! 💡Dive into the intricacies of software licensing methods and the challenges they pose in Azure environments. From user-account licensing to the often cumbersome MAC address licensing, we explore how to navigate these hurdles. 🔍 Discover the significance of MAC addresses in network communication and the critical role they play in device identification. Learn how to effectively change MAC addresses on both Windows and Linux VMs, ensuring seamless operations without compromising connectivity or security. 💻 This comprehensive guide empowers you to optimize your infrastructure, reduce costs, and fortify your security measures. 🚀 Ready to enhance your Azure experience? Don't miss out on these invaluable insights! Read the full article now #MicrosoftAzure #Networking #Security #TechBlog #MACAddress #VirtualMachines #Azure #Spoofing

🚨 Microsoft and CrowdStrike Join Forces to Combat BSOD Issue! 🚨 Exciting news! Microsoft has just released a new CrowdStrike Recovery Tool designed to help IT administrators repair over 8.5 million Windows devices affected by the recent BSOD (Blue Screen of Death) issue. This powerful tool is a game-changer for IT teams, providing a streamlined solution to a widespread problem. Here’s what you need to know: - Target Audience: IT administrators and cybersecurity professionals. - Requirements: Admin privileges and specific prerequisites are necessary to use the tool effectively. 🔧 Why This Matters: - Efficiency: Quickly repair affected systems, minimizing downtime. - Security: Ensure your Windows endpoints are secure and fully operational. Check out the full details and get your systems back on track! 💻🔒 #Cybersecurity #WindowsSecurity #ITAdmin #TechNews #BSOD #Microsoft #CrowdStrike Sources [1] https://lnkd.in/eGRs8hBd [2] Microsoft releases CrowdStrike Recovery Tool — admits 8.5 million Windows devices were affected by the BSOD issue https://lnkd.in/edyqMC2P [3] New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints https://lnkd.in/eEGK2jd3

I know some businesses maybe be ignoring the upcoming Windows 10 End of Life. It's a year away... As long as they’re “supported,” everything should work fine, right? For many, that’s true — 𝗯𝘂𝘁 𝗵𝗲𝗿𝗲’𝘀 𝘁𝗵𝗲 𝗰𝗮𝘁𝗰𝗵. What some organizations aren’t seeing is the issue of aging hardware that hasn’t been flagged. Without a plan for timely refreshes, businesses can face an unpleasant surprise when these devices fall out of compliance, impacting certifications like Cyber Essentials and creating security risks. I've done several onboardings in the last few weeks and in one instance almost half of their workstation fleet is already End of Life or will be unsupported by October 2025. This could have been avoided with proactive planning, effective Account Management, and clear communication. 𝗧𝗮𝗸𝗲 𝗮 𝗹𝗼𝗼𝗸 𝗮𝘁 𝘄𝗵𝗲𝗿𝗲 𝘆𝗼𝘂 𝘀𝘁𝗮𝗻𝗱 𝘁𝗼𝗱𝗮𝘆 — it’s worth avoiding the surprises down the road. #Windows11 #ITPlanning #CyberSecurity #AccountManagement #TechRefresh #ManagedServices

🚨 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝟭𝟬 𝗦𝘂𝗽𝗽𝗼𝗿𝘁 𝗘𝗻𝗱𝘀 𝟭𝟰 𝗢𝗰𝘁𝗼𝗯𝗲𝗿 𝟮𝟬𝟮𝟱 🚨 🕑 With less than a year to go, it's essential to start planning ahead for when Microsoft ends support for Windows 10. After this date, Microsoft will no longer provide free updates, technical assistance, or security fixes for the product. Your PC will still work, but operating without these critical updates exposes your business to security risks. ❓It's time to start asking, 𝗱𝗼 𝘆𝗼𝘂 𝗵𝗮𝘃𝗲 𝗮 𝘀𝘁𝗿𝗮𝘁𝗲𝗴𝘆 𝗳𝗼𝗿 𝘂𝗽𝗴𝗿𝗮𝗱𝗶𝗻𝗴 𝘁𝗼 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝟭𝟭 𝘆𝗲𝘁? 💡 When planning an upgrade to Windows 11, it’s important to consider not just the technical aspects but also compliance requirements, procurement strategies, and budgets. Whilst modern tooling, operating systems, and applications are also generally more resilient to upgrades and changes nowadays, it's still best practice to pilot updates first - especially in larger and more complex settings. 🤝 At Mondo Cloud, we can help you navigate this transition using the latest Microsoft management tools like #Intune and #Autopilot. 🔐 Let’s secure your business for the future - start planning your Windows 11 upgrade today! 💻 #Windows10EOL #Windows11 #ITStrategy #Microsoft #CyberSecurity

#AzureDaily 🚨Known Issue: macOS devices in stealth mode may turn non-compliant with #Microsoft Endpoint Manager #Intune VPN configurations🔧 Workaround: Temporarily disable stealth mode for compliance. Microsoft working on permanent fix🛠️ Follow updates using @IntuneSuppTeam #Azure #MVPBuzz