Category: Microsoft Entra

How to set up Microsoft Entra Terms of Use with Conditional Access: licensing, expiry, versions, guests, reporting and the gotchas, using my lab tenant.

How to set up Microsoft 365 Customer Lockbox: licensing, turning it on, the approver role, reviewing requests and auditing with PowerShell.

Microsoft Entra Backup and Recovery takes a daily backup of key directory objects. Here is how to use difference reports and recovery to undo a bad change safely.

My SC-300 exam study guide: exam facts, skills measured with weightings, the 28 October 2026 update, memory tips and scenario examples, plus how I renewed my Identity and Access Administrator certification.

A practical Microsoft Entra PIM guide: eligible vs active roles, role settings, Conditional Access authentication context on activation, approvals, PIM for Groups and access reviews.

Microsoft Entra passkeys come in synced and device-bound flavours. Here is which to use for BYOD, managed devices and admins, and how to set up passkey profiles.

The Entra sign-in diagnostic tells you why a sign-in failed and what to do next. Here are the roles, 4 steps to run it, the common AADSTS codes and PowerShell and KQL checks.

Conditional Access session controls explained: sign-in frequency, persistent browser session, the device filter gotcha in Microsoft’s template, and two tested policies for unmanaged devices and admins.

Assign Microsoft Entra roles to a role-assignable group, then use PIM for Groups to make admins eligible members with MFA, approval and access reviews.

How to run Microsoft’s zero trust assessment PowerShell module against a Microsoft 365 tenant, read the report and turn the results into a prioritised fix list.