Founder of Modern Endpoint. Microsoft MVP — Microsoft Intune & Azure Virtual Desktop. Focused on lifecycle governance across identity, endpoint, and virtual desktop platforms.
AVD
Azure Virtual Desktop · Identity · Session Risk Token Lifecycle Risk in Azure Virtual Desktop Why AVD security is not only about host hardening, Conditional Access, and session isolation — but also about understanding what happens to identity tokens during long-running sessions, reconnects, profile reuse, and multi-session operations. Modern Endpoint Governance
Entra ID
Security Governance Defender Onboarding Governance Why enabling Microsoft Defender is not the same as controlling it 8–10 min read One of the biggest gaps I still see in customer environments is the way Microsoft Defender is approached operationally. In many organizations, Defender onboarding is treated as a deployment task
Entra ID
Microsoft Entra · Device Identity Hybrid Join Lifecycle Model Hybrid join is not a destination — it is a lifecycle stage. Understanding each phase, from provisioning to retirement, is what separates a stable identity posture from an environment full of stale objects, broken trust, and unresolved dependencies. For many organizations, Microsoft Entra
Entra ID
Identity & Privileged Access When Identity Becomes the Perimeter: Why Token Theft, Dormant Accounts, and Privileged Access Are the Real Risk Attackers no longer need to break in the traditional way. A valid token, a forgotten account, or a single privileged session is often all it takes — and the real
Home / Intune Object Drift Modern Endpoint Architecture Intune Object Drift is a lifecycle architecture problem. The silent lifecycle problem behind stale devices, broken enrollment, and Azure Virtual Desktop operational noise. By Menahem Suissa Modern Endpoint Architect Published 2026 Object Drift Signal MapLive model Duplicate identitiesMultiple objects representing one endpoint lifecycle
featured
Most Entra ID environments don't fail because of misconfiguration.
AVD
Home / Insights / AVD Architecture Field Architecture · AVD vs RDS What changed when I stopped managing servers — and started designing platforms. A field-based reflection on Remote Desktop Services, Azure Virtual Desktop, Intune, licensing, operations, and the architectural shift from keeping systems alive to designing better user experiences. By Menahem Suissa
App Attach
AVD Architecture · Identity Lifecycle · Governance Why Most Azure Virtual Desktop Environments Accumulate Silent Technical Debt Azure Virtual Desktop environments are designed for elasticity and scale. Session hosts are deployed, scaled, patched, and eventually decommissioned. But most organizations do not properly decommission AVD session hosts — and that creates silent operational, financial,
App Attach
Azure Virtual Desktop · Application Layer · Architecture MSIX App Attach in Azure Virtual Desktop: From Feature to Architecture Your organization implemented MSIX App Attach. The packages mount correctly. Users get their applications. Then production starts behaving differently — storage latency spikes, apps disappear for a subset of users, and no obvious error
App Attach
Microsoft Endpoint · Azure Virtual Desktop · MSIX App Attach Why MSIX App Attach Is a Practical Requirement for Azure Virtual Desktop Lessons learned from real-world AVD environments: why MSIX App Attach moved from “interesting feature” to a natural part of stable, scalable, and secure Azure Virtual Desktop architecture. AVD Operations
AVD
A production failure analysis of WindowsAppRuntime 1.4 in AVD multi-session environments.
Use these quick controls to improve readability while browsing Modern Endpoint.