Conditional Access Authentication Strengths: What the Policy Accepts and Where the Guarantees End

Modern Endpoint · Security Insights Conditional Access Authentication Strengths: What the Policy Accepts and Where the Guarantees End MSMenahem SuissaMicrosoft MVP · AI Workforce & Security Tech Lead 16 min read ArticleModernEndpoint Contents 10 sections · 16 min read 🎯 The Design Question Conditional Access Authentication Strengths Actually Answer 🏗️ Where Authentication Strengths Fit in

Windows LAPS on Entra-Joined Devices: The Join State, Recovery, and Permission Dependencies That Define the Design

Modern Endpoint · Security Insights Windows LAPS on Entra-Joined Devices: The Join State, Recovery, and Permission Dependencies That Define the Design MSMenahem SuissaMicrosoft MVP · AI Workforce & Security Tech Lead Consider an organization that has fully migrated its endpoint fleet to Entra-joined Windows 11 devices, enabled Windows LAPS through

The Conditional Access Exclusion That Did Not Exist

Field Incident Analysis The Conditional Access Exclusion That Did Not Exist Fixing Microsoft Edge MAM sign-in when a "Block All Resources" policy intercepts Microsoft Edge Auth before app protection can be evaluated. 10 min read Microsoft Entra IDConditional AccessMicrosoft Intune Contents 16 sections · 10 min read Executive

Your MDM Reports Samsung Devices as Patched — Their Firmware Says Otherwise

Modern Endpoint Governance Series Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using… Most enterprise Intune deployments treat Samsung Galaxy firmware the same way they treat Windows cumulative updates — push a policy, wait for compliance, move on. That assumption breaks in production. Samsung firmware updates include bootloader changes,

Four Microsoft End-of-Support Dates Converge This October

Governance Four Microsoft End-of-Support Dates Converge This October Most IT teams track end-of-support dates one product at a time. This October, four converge at once — and at least one of them is easy to miss because it doesn't look like an end-of-support

Manual App Updates Are Building Operational Debt — Intune's EAM Auto-Update Closes It

Modern Endpoint · Security Insights Enable Enterprise Application Management EAM Auto-Updates in Intune to Keep Apps… Imagine this: you're sitting in the office of a Fortune 500 company. The IT team is grappling with constant application updates that drain resources and cause operational drift. Unmanaged updates lead to

Operational Security Controls

Modern Endpoint · Security Insights Operational Security Controls I've been called into more than a few organizations where Microsoft Defender is proudly enabled but nearly abandoned in practice. It's there, casting a comforting glow of potential security — a potential often unfulfilled. Someone, somewhere, set it up; perhaps

Microsoft Defender for Endpoint on Windows 11 Is GA

```html Modern Endpoint Governance Series Microsoft Defender for Endpoint on Windows 11 Is GA. That's Not the Interesting Part. The real story is not another security feature becoming available. The real story is how fast security platforms are changing — and how many organizations still treat governance as something

Data Security Governance Builder

Microsoft Purview · DLP + DSPM + AI Data Security · Interactive Workshop Data Security Governance Builder An interactive planning document for enterprise data security: DSPM, DLP, Endpoint DLP, Sensitivity Labels, Insider Risk, External Sharing and Copilot readiness — including a live builder that generates recommendations, risk score, policy names, rollout plan and executive summary.

What's New in Microsoft Intune 2025–2026

ME Modern Endpoint Modern Security. Modern Management. June 2026 — Update Review What's New in Microsoft Intune 2025–2026 From Ignite 2025 through June 2026 — AI Agents, default Hotpatch, Linux SSO, Android XR, macOS Platform SSO, Security Baseline 25H2, and dozens of improvements that will transform your daily operations.

What is coming to Microsoft 365 E5?

Effective July 1, 2026 What is coming to Microsoft 365 E5? Microsoft is adding major security and endpoint-management capabilities to Microsoft 365 E5, including Security Copilot access and advanced Intune Suite capabilities, alongside a pricing update. 🤖 Security Copilot 💻 Intune Suite 🔑 Cloud PKI 💰 $57 → $60 Microsoft 365 E5 JULY 2026

Secure Boot Certificate Lifecycle

Secure Boot · Certificate Lifecycle · Intune Governance Secure Boot Certificates 2026: A Lifecycle Governance Problem The 2026 Secure Boot certificate rollover is not only a Windows Update task. In enterprise environments, it is a lifecycle governance event that crosses firmware, Windows servicing, Intune reporting, inactive device management, compliance policy, and operational