Notes from the trenches.
Real world Microsoft 365, Intune and Entra, written down so you can skip the headache I already had.
Most of what I write these days lives on goldenmaster.cloud π: real world Microsoft 365, Intune and Entra, written down so you can skip the headache I already had.
Wait... You Walked Away *Without* Pressing Win+L?! (Meet Win+Leave)
"Pizza's on me today, everyone! π Order whatever you like." Posted in the team chat at ...
Everyone Wants to Build a Copilot Agent. Almost Nobody Should.
The pitch is intoxicating. Open Microsoft 365 Copilot, describe in two sentences what y...
Your Tenant Says Every Device Is Compliant. It's Lying.
You did everything right. Conditional Access requires a compliant device before anyone ...
π Autopilot β One Framework to Manage Them All
Most organisations donβt just have one type of device. If you look closely, you can alm...
All posts
The full blog over on goldenmaster.cloud.
The library is the bigger half of it π: 160 pages I write and keep up myself, where a setting gets explained instead of listed.
Entra ID baseline
Conditional Access, authentication, identity protection. Per policy: what it blocks, which licence you need for it, and how to get back out.
Intune baseline
Windows and macOS. Enrolment, configuration, compliance, endpoint security and update rings, the way I set them up at customers.
Admin center
The tenant wide switches that decide what everyone else is allowed to do.
Organising an event, user group or podcast?
I am happy to come by. Tell me the audience and I will tailor the session.