Microsoft 365 & Intune Security Blog

What's included in M365 Business Premium?

Licensing

Microsoft 365 Business Premium is a "business in a box". Configured correctly, you can prevent almost all business compromise attacks while giving users the familiar productivity suite they all know and (sometimes) love.

Read more about What's included in M365 Business Premium?

What's the actual risk of using AI?

Strategy

We keep being told AI is dangerous, that we should be careful, and invest in loads of ramp up projects and tools to help us "adopt" AI, but what does reality look like? It took just five days for a…

Read more about What's the actual risk of using AI?
AI adoption

Does M365 E3 help a scaling business?

Licensing

July 2026 Licensing updates: M365 E3 will contain Defender for Office 365 P1. Meaning the only step-up required to match BP levels of endpoint security is related to EDR. Back to the original…

Read more about Does M365 E3 help a scaling business?
Does M365 E3 help a scaling business?

Some policies I use in Conditional Access

Security

This site is called Conditional Access, and yet surprisingly, it has very little advice on what you should do for CA policies. I've stayed away from this subject on purpose; it's very hard to…

Read more about Some policies I use in Conditional Access
Some policies I use in Conditional Access

How to prevent ransomware attacks using M365 Business Premium

Security

To the average person who isn't in the IT space, the world seems like a scary place when news coverage keeps talking about the number of "sophisticated" attacks which are destroying businesses…

Read more about How to prevent ransomware attacks using M365 Business Premium
How to prevent ransomware attacks using M365 Business Premium

The Cyber Essentials Guide for Windows OS and Driver Patching: Intune Edition

Security

I've previously written about Windows Autopatch, and now that it's included in Business Premium and EDU licenses, it made sense to write an updated post for MSPs to use to get their clients Cyber…

Read more about The Cyber Essentials Guide for Windows OS and Driver Patching: Intune Edition
The Cyber Essentials Guide for Windows OS and Driver Patching: Intune Edition

Is a SOC service really what you need?

Strategy

Security Operations Centre … Their primary focus isn't preventative protection. They are actually Monitoring, Detecting and Responding to threats. A SOC's core expertise is not in security hardening…

Read more about Is a SOC service really what you need?
Is a SOC service really what you need?

Securing access to Windows 365 from a BYOD/Personal Device

Security

Scenario: You have employees or contractors you've given a Windows 365 license to, Intune is managing those cloud devices just fine, but you want to ensure access to them is validated often, and…

Read more about Securing access to Windows 365 from a BYOD/Personal Device
Securing access to Windows 365 from a BYOD/Personal Device

How to deploy Defender for Endpoint: Windows

Security

With Microsoft making a bigger name for itself in the security space in recent years, more and more are looking to utilise what they already pay for in their bundle SKUs like Business Premium/M365…

Read more about How to deploy Defender for Endpoint: Windows
How to deploy Defender for Endpoint: Windows

Allowing the Sonos app via an Intune Firewall configuration

Security

Your office just got some new speakers, but you can't get the Windows app to talk to it? This serves as a dual guide, firstly on how to create and deploy firewall rules using Intune, and secondly how…

Read more about Allowing the Sonos app via an Intune Firewall configuration
Allowing the Sonos app via an Intune Firewall configuration

How to become CIS compliant

Strategy

To most, the Center for Internet Security (CIS) are a provider of benchmarks and standards that one might wish to follow to increase the security of their IT environment. It's a great framework to…

Read more about How to become CIS compliant
How to become CIS compliant

Zero Trust Workshop: Your Security Roadmap

Security Strategy

It's really hard to know where to start when you or your team are assigned the task of securing the company from cyber threats. If you've been in the game a while, you've probably noticed that cyber…

Read more about Zero Trust Workshop: Your Security Roadmap
Zero Trust Workshop: Your Security Roadmap

My Windows Autopatch Experience

Modern Workplace

** UPDATE March 31st: Autopatch is now included in Business Premium and Education SKUs, you've got no excuses**Windows Autopatch is the single best way to stay on top of OS patching in your…

Read more about My Windows Autopatch Experience
My Windows Autopatch Experience

Attack Surface Reduction - Action Required!

Security

If it is your job to manage and secure Windows endpoints and you aren't aware of ASR rules, you need to start moving towards learning what they are, then getting them all configured in block mode*.

Read more about Attack Surface Reduction - Action Required!
Attack Surface Reduction - Action Required!

Browser Extension lockdown

Security

Whether you use Edge, Chrome, Firefox, or some other obscure browser, managing extensions is a crucial part of protecting your users and assets. Window Shopping … There are over 150,000 web…

Read more about Browser Extension lockdown
Browser Extension lockdown