ModernEndpoint - Modern Endpoint

ModernEndpoint

Conditional Access Authentication Strengths: What the Policy Accepts and Where the Guarantees End

Modern Endpoint · Security Insights Conditional Access Authentication Strengths: What the Policy Accepts and Where the Guarantees End MSMenahem SuissaMicrosoft MVP · AI Workforce & Security Tech Lead 16 min read ArticleModernEndpoint Contents 10 sections · 16 min read 🎯 The Design Question Conditional Access Authentication Strengths Actually Answer 🏗️ Where Authentication Strengths Fit in

ModernEndpoint

Windows LAPS on Entra-Joined Devices: The Join State, Recovery, and Permission Dependencies That Define the Design

Modern Endpoint · Security Insights Windows LAPS on Entra-Joined Devices: The Join State, Recovery, and Permission Dependencies That Define the Design MSMenahem SuissaMicrosoft MVP · AI Workforce & Security Tech Lead Consider an organization that has fully migrated its endpoint fleet to Entra-joined Windows 11 devices, enabled Windows LAPS through

ModernEndpoint

The Conditional Access Exclusion That Did Not Exist

Field Incident Analysis The Conditional Access Exclusion That Did Not Exist Fixing Microsoft Edge MAM sign-in when a "Block All Resources" policy intercepts Microsoft Edge Auth before app protection can be evaluated. 10 min read Microsoft Entra IDConditional AccessMicrosoft Intune Contents 16 sections · 10 min read Executive

ModernEndpoint

Your MDM Reports Samsung Devices as Patched — Their Firmware Says Otherwise

Modern Endpoint Governance Series Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using… Most enterprise Intune deployments treat Samsung Galaxy firmware the same way they treat Windows cumulative updates — push a policy, wait for compliance, move on. That assumption breaks in production. Samsung firmware updates include bootloader changes,

ModernEndpoint

Four Microsoft End-of-Support Dates Converge This October

Governance Four Microsoft End-of-Support Dates Converge This October Most IT teams track end-of-support dates one product at a time. This October, four converge at once — and at least one of them is easy to miss because it doesn't look like an end-of-support

ModernEndpoint

Manual App Updates Are Building Operational Debt — Intune's EAM Auto-Update Closes It

Modern Endpoint · Security Insights Enable Enterprise Application Management EAM Auto-Updates in Intune to Keep Apps… Imagine this: you're sitting in the office of a Fortune 500 company. The IT team is grappling with constant application updates that drain resources and cause operational drift. Unmanaged updates lead to

ModernEndpoint

Operational Security Controls

Modern Endpoint · Security Insights Operational Security Controls I've been called into more than a few organizations where Microsoft Defender is proudly enabled but nearly abandoned in practice. It's there, casting a comforting glow of potential security — a potential often unfulfilled. Someone, somewhere, set it up; perhaps