Recently I was trying to delegate an SPN For HTTP service for An App ProxyWhen Choosing the above I could no search for the SPN in ADI […]
Category: Research
Research Undertaken
AppLocker
For severs look at https://learn.microsoft.com/en-us/azure/defender-for-cloud/adaptive-application-controlshttps://dailysysadmin.com/KB/Article/6773/configuring-windows-applocker-to-protect-against-ransomware-attacks/ GitHub – microsoft/AaronLocker: Robust and practical application control for Windows <AppLockerPolicy Version=”1?><RuleCollection Type=”Appx” EnforcementMode=”Enabled”><FilePublisherRule Id=”041c480f-6af0-44b6-b712-ebc33913a055? Name=”All signed packaged apps” Description=”Allows members of […]
Account switch detected we were unable to verify your account MAC Outlook
After defederating a domain for a 365 tenant , trying to add the account back to Mac Outlook comes up with the error ” Account switch Detected […]
Sorry,but were having trouble signing you in – AADSTS50020 – Iphone
Trying to reset up the email account of a domain that’s been defederated from one 365 tenant to another , and for some reason, Outlook on the […]
Macintosh \ MAC stuck on “Installing on Macintosh HD”
Recently had a MAC do an automatic upgrade however stalled on 31 Minutes Remaining for 24 hours with “Installing on Macintosh HD” Rebooting the Computer and retrying […]
How to Block Ports on Azure VPN Gateway with Azure firewall
Recently setup a Site to Site ( S2S ) Connection into a VNET of an Azure Tenant By Default the existing Network security group attached to the […]
Bitlocker Intune
Check CIS -> CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 Bitl… | Tenable® Administrative Templates Windows Components > BitLocker Drive EncryptionChoose drive encryption method and cipher […]
timerTrigger Azure Functions – HTTP response code 404 Not Found in Input
For function.json I had the following Changing the days of the week to their Names fixed the issue
Bulk Remove Domain from users in 365 ( UPN and SMTP )
Remove Domain from UPN Remove SMTP address
Can’t remove Domain from GoDaddy due to WindowsLiveId
OK let me try and change the MicrosoftOnlineServicesID to an onMicrosoft I can remove the SMTP What I had to do first was change the UPN of […]
Block USB Mass Storage With Intune
From help here Prevent Write and Execute access to non-approved removable storage using Device Control and Microsoft Intune – imab.dk Name Configure Removable Storage Access Control OMA-URI […]
Block Internet Explorer with AppLocker In Intune
OMA URI : ./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/apps/EXE/Policy String : <RuleCollection Type=”Exe” EnforcementMode=”Enabled”> <FilePathRule Id=”70904818-599a-4ccb-90f2-4a7506f08117″ Name=”Block IE 11″ Description=”” UserOrGroupSid=”S-1-1-0″ Action=”Deny”><Conditions><FilePathCondition Path=”C:\Program Files\Internet Explorer\*” /></Conditions></FilePathRule> </RuleCollection>