Finding Dangerous Permissions in Microsoft Entra IDTechnical blog post | Microsoft Entra ID | Workload identities When I start reviewing the security of a Microsoft Entra ID tenant, privileged users are normally one of the first things I look at. Who has Global Administrator? Who has Privileged Role Administrator? Are those assignments permanent? Is PIM…
A practical first pass across identity, privileged access, collaboration, data protection and incident readiness ThatLazyAdmin | September 2026 If an identity was compromised today, what could an attacker actually do with it Start by understanding the tenant Getting access to a new Microsoft 365 tenant is always interesting. Sometimes I open Microsoft Entra and find…
Author: Shaun Hardneck — www.thatlazyadmin.com Most organisations believe they have a proper Joiner, Mover, Leaver (JML) process in place. In reality, many environments are still relying on manual onboarding emails, inconsistent approval chains, shared spreadsheets, and operational workarounds that have evolved over years without proper governance. At first glance, the process appears functional. New users…
Every IT team knows the struggle: a supplier needs SharePoint access, a consulting firm needs to join a Teams workspace, or a subsidiary wants to log into an internal app. What usually happens? Someone invites an external user as a guest, gives them access, and moves on. Fast forward a year — nobody remembers who…
Passwords alone are no longer enough. Phishing attacks, password reuse, and credential stuffing continue to plague organizations. Microsoft Entra ID (formerly Azure AD) supports strong phishing-resistant authentication methods, and one of the most practical options is using a FIDO2-compliant security key like YubiKey. In this guide, we’ll walk through how to set up YubiKey with…
What It Is, How It Works, and Why You Should Enable It When deploying Azure Virtual Desktop (AVD), many organizations focus on the basics: host pools, user assignments, and session host sizing. However, performance optimization is just as important, especially for latency-sensitive workloads like Microsoft Teams or remote support tools. This is where RDP Shortpath…
When you spin up a new Microsoft 365 tenant, Microsoft automatically gives you a default domain — usually something like thatlazyadmin.onmicrosoft.com. These MOERA (Microsoft Online Email Routing Address) domains are incredibly handy at the beginning. They let you test, create users, and send mail right away, even before you’ve bought a proper domain. But here’s…
I recently ran into a frustrating issue while working in a domain-joined Azure Virtual Desktop (AVD) environment. Everything appeared to be configured correctly — Conditional Access policies were in place, token folders were cleaned up, and the BrokerPlugin workaround had already been implemented. Yet, despite all of this, users were still getting stuck in an…
Let’s be honest — we’ve all been there. One day, things are working fine. AD replication is happy, secure channels are intact, logons are snappy. The next? You’re staring at replication failures, secure channel trust issues, and those vague “RPC server is unavailable” errors that make you want to flip a table. So, I built…
Understanding Azure Backup Immutable Vault: Security, Benefits, and Challenges Introduction Data security and resilience are at the core of any modern IT strategy. Microsoft Azure offers several mechanisms to ensure business continuity, one of which is the Immutable Vault for Azure Backup. This feature is designed to protect backup data from accidental or malicious deletion…
Offboarding from Microsoft Security Copilot: A Step-by-Step Guide In the first part of this series, we explored how to set up Microsoft Security Copilot. In this installment, we’ll focus on the offboarding process for Microsoft Security Copilot. Microsoft Security Copilot has empowered your organization to tackle cyber threats with the speed and precision of AI….
Getting Started with Microsoft Security Copilot What is Microsoft Security Copilot? Microsoft Security Copilot is an innovative generative AI security tool designed to help organizations protect themselves from cyber threats. By combining AI-powered capabilities with Microsoft’s extensive security ecosystem, Security Copilot enables IT and security professionals to detect and respond to threats, process security signals,…