Governance Four Microsoft End-of-Support Dates Converge This October Most IT teams track end-of-support dates one product at a time. This October, four converge at once — and at least one of them is easy to miss because it doesn't look like an end-of-support
![[PREVIEW] Default Azure Automation Setting Enables Cross-Tenant Identity Takeover: What IT…](https://storage.ghost.io/c/18/07/18075d62-c435-4588-bde1-d440868fbdab/content/images/size/w600/2026/07/cover-27.png)
Modern Endpoint Governance Series Default Azure Automation Setting Enables Cross-Tenant Identity Takeover: What IT… Most enterprise security reviews treat Azure Automation as an operational tool, not an identity risk surface. That assumption is wrong, and it has been wrong since Microsoft introduced the Run As Account as the default
Modern Endpoint · Security Insights ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012… In my experience working with enterprise organizations, the frequency of security alerts can overwhelm. SOC teams often drown in a deluge of notifications, each demanding attention yet not all meriting priority. It'
Modern Endpoint · Security Insights Microsoft Entra ID security updates: Passkeys are the default authentication method A few months back, I was working with a large global enterprise to streamline their identity management architecture. Despite advanced tools and governance structures, they struggled with user friction. Multi-factor authentication was cumbersome, employee
Modern Endpoint · Security Insights Enable Enterprise Application Management EAM Auto-Updates in Intune to Keep Apps… Imagine this: you're sitting in the office of a Fortune 500 company. The IT team is grappling with constant application updates that drain resources and cause operational drift. Unmanaged updates lead to
Modern Endpoint · Security Insights Breach at the Beach: Play the Ultimate Entra ID CTF: What IT Admins Need to Know As IT admins, we often face the challenge of unraveling complex breach scenarios. Imagine a highly publicized breach unfolded at a critical infrastructure beach location. It highlighted glaring gaps in
Microsoft Purview gives you the architecture to let your organization use Copilot, ChatGPT, and every AI tool that follows — without giving up visibility, control, or compliance posture.
Modern Endpoint · Security Insights Conditional Access in Multi-Session Environments 🔍 Copy-Paste Calamities in Conditional Access Policies Article ModernEndpoint 🔍 Copy-Paste Calamities in Conditional Access Policies It was a dreary Monday morning when I received a frantic call from one of our major clients. Their Azure Virtual Desktop (AVD) environment
Modern Endpoint · Security Insights Operational Security Controls I've been called into more than a few organizations where Microsoft Defender is proudly enabled but nearly abandoned in practice. It's there, casting a comforting glow of potential security — a potential often unfulfilled. Someone, somewhere, set it up; perhaps
```html Modern Endpoint Governance Series Microsoft Defender for Endpoint on Windows 11 Is GA. That's Not the Interesting Part. The real story is not another security feature becoming available. The real story is how fast security platforms are changing — and how many organizations still treat governance as something
Microsoft Purview · DLP + DSPM + AI Data Security · Interactive Workshop Data Security Governance Builder An interactive planning document for enterprise data security: DSPM, DLP, Endpoint DLP, Sensitivity Labels, Insider Risk, External Sharing and Copilot readiness — including a live builder that generates recommendations, risk score, policy names, rollout plan and executive summary.
ME Modern Endpoint Modern Security. Modern Management. June 2026 — Update Review What's New in Microsoft Intune 2025–2026 From Ignite 2025 through June 2026 — AI Agents, default Hotpatch, Linux SSO, Android XR, macOS Platform SSO, Security Baseline 25H2, and dozens of improvements that will transform your daily operations.
Effective July 1, 2026 What is coming to Microsoft 365 E5? Microsoft is adding major security and endpoint-management capabilities to Microsoft 365 E5, including Security Copilot access and advanced Intune Suite capabilities, alongside a pricing update. 🤖 Security Copilot 💻 Intune Suite 🔑 Cloud PKI 💰 $57 → $60 Microsoft 365 E5 JULY 2026
Secure Boot · Certificate Lifecycle · Intune Governance Secure Boot Certificates 2026: A Lifecycle Governance Problem The 2026 Secure Boot certificate rollover is not only a Windows Update task. In enterprise environments, it is a lifecycle governance event that crosses firmware, Windows servicing, Intune reporting, inactive device management, compliance policy, and operational
AVD
Azure Virtual Desktop · Identity · Session Risk Token Lifecycle Risk in Azure Virtual Desktop Why AVD security is not only about host hardening, Conditional Access, and session isolation — but also about understanding what happens to identity tokens during long-running sessions, reconnects, profile reuse, and multi-session operations. Modern Endpoint Governance
entra id
Security Governance Defender Onboarding Governance Why enabling Microsoft Defender is not the same as controlling it 8–10 min read One of the biggest gaps I still see in customer environments is the way Microsoft Defender is approached operationally. In many organizations, Defender onboarding is treated as a deployment task
entra id
Microsoft Entra · Device Identity Hybrid Join Lifecycle Model Hybrid join is not a destination — it is a lifecycle stage. Understanding each phase, from provisioning to retirement, is what separates a stable identity posture from an environment full of stale objects, broken trust, and unresolved dependencies. For many organizations, Microsoft Entra
entra id
Identity & Privileged Access When Identity Becomes the Perimeter: Why Token Theft, Dormant Accounts, and Privileged Access Are the Real Risk Attackers no longer need to break in the traditional way. A valid token, a forgotten account, or a single privileged session is often all it takes — and the real
Home / Intune Object Drift Modern Endpoint Architecture Intune Object Drift is a lifecycle architecture problem. The silent lifecycle problem behind stale devices, broken enrollment, and Azure Virtual Desktop operational noise. By Menahem Suissa Modern Endpoint Architect Published 2026 Object Drift Signal MapLive model Duplicate identitiesMultiple objects representing one endpoint lifecycle
featured
Most Entra ID environments don't fail because of misconfiguration.
AVD
Home / Insights / AVD Architecture Field Architecture · AVD vs RDS What changed when I stopped managing servers — and started designing platforms. A field-based reflection on Remote Desktop Services, Azure Virtual Desktop, Intune, licensing, operations, and the architectural shift from keeping systems alive to designing better user experiences. By Menahem Suissa
App Attach
AVD Architecture · Identity Lifecycle · Governance Why Most Azure Virtual Desktop Environments Accumulate Silent Technical Debt Azure Virtual Desktop environments are designed for elasticity and scale. Session hosts are deployed, scaled, patched, and eventually decommissioned. But most organizations do not properly decommission AVD session hosts — and that creates silent operational, financial,
App Attach
Azure Virtual Desktop · Application Layer · Architecture MSIX App Attach in Azure Virtual Desktop: From Feature to Architecture Your organization implemented MSIX App Attach. The packages mount correctly. Users get their applications. Then production starts behaving differently — storage latency spikes, apps disappear for a subset of users, and no obvious error
App Attach
Microsoft Endpoint · Azure Virtual Desktop · MSIX App Attach Why MSIX App Attach Is a Practical Requirement for Azure Virtual Desktop Lessons learned from real-world AVD environments: why MSIX App Attach moved from “interesting feature” to a natural part of stable, scalable, and secure Azure Virtual Desktop architecture. AVD Operations
Use these quick controls to improve readability while browsing Modern Endpoint.