ChristerB retweeted
One of my pet peeves with Microsoft Windows
Especially Edge.
Imaging spending thousands on a new Surface Laptop Ultra and being hit with ads on your premium device 🤮
BTW for Microsoft Edge I made this to get rid of ads
getyako.com/
PS all you folks on corporate devices don't see them, but use any personal device and thats what you see...
So i started using the Surface Laptop Ultra at GitHub Universe. And its good.
But I am independent, and I will always speak my mind.
I switched from a Mac and set up Outlook accordingly. And what I discovered is:
Outlook has ads. What the heck? Outlook displays advertisements right above my important emails.
What is this about? Is Microsoft actually serious? I’m speechless. How is it possible to build such good hardware, only to develop software that runs so completely counter to that?
An absolute deal-breaker.
Yeah, going back to Apple Mail without ads. Absurd. completely absurd.
ChristerB retweeted
The downside with NTFS permissions is that you have to do this for every path you want to block, so you are creating or consuming a list and iterating through all user profiles
The cool thing is, you could take LOL projects, like lolrmm.io/ and feed those lists in
ChristerB retweeted
Microsoft have just added Graph API permissions to view and manage Copilot Cost Controls! ourcloudnetwork.com/new-copi…
Soon admins and ISV's will be able to programmatically:
• View and manage assignments to Cost Management Policies
• View, Create, Update and Delete Cost Management Policies
• View Per-user consumption rankings and usage aggregated by security groups
#Microsoft #Copilot #Cost
ChristerB retweeted
Today marks a new chapter for Windows, as we bring unmetered intelligence to every desk and every home, and make every PC a place where agents can work securely on your behalf.
Some highlights of what we announced:
• MAI-Code-1.1 Flash: 137B parameter coding model w/ 256K context window, which is now optimized to run on your PC!
• GitHub Copilot now hands off work to local models like MAI-Code-1.1 Flash, helping projects cost a lot less without sacrificing quality.
• With Hybrid Intelligence, Copilot can now take action directly on the PC and keep sensitive work on your device.
• And with Code in Copilot, you can essentially build any software you need on your desktop, without any cloud token spend, and it’s just super at it. You’re no longer limited to what’s in an app store! Your PC becomes an infinite software factory.
• Security is foundational to all this, which is why we are also bringing together Windows and Agent 365 so agents can work within secure boundaries on-device, including MXC a local sandbox for agent execution. Windows becomes your secure agent box!
• All this comes to life on a new generation of devices, like Surface Laptop Ultra, powered by NVIDIA RTX Spark.
Can’t wait to see what you build with all this.
ChristerB retweeted
#OpenIntuneBaseline Windows v4.0 is here! 🎉
Highlights include:
* Continuing to be the most agile and cutting-edge Intune baseline on the planet!
* A shake-up of Compliance policies, allowing true grace period granularity (and ditching the EAS Password policy because it's 🗑️)
* Edge settings for days! Simple support for the Edge Management Service and security hardening and user experience improvements.
* Updated M365 Apps Security baseline alignment.
* Fixed MS breaking the in-box app removal policy.
* Defender behaviour tweaks based on real customer feedback, not arbitrary check-boxes.
* Deprecated and obsolete settings sent to live on a farm.
As always:
✅ Take what you want
✅ Change what doesn't suit your environment
✅ Test it before yeeting to 40,000 endpoints on Friday afternoon
❌ Don't treat any security baseline as a magical compliance button
Check out the full release notes at: stte.me/oib26h2
Then, head on over to the OIB Deployer to deploy the new and updated policies, or check your current config vs 4.0 with the Settings Validator!
https://deploy[.]openintunebaseline.com
And, uhh, keep an eye on Friday, too ;)
#OIB #Windows #EndpointSecurity #Community #Capybara
ChristerB retweeted
Microsoft reúne una excelente serie sobre #ActiveDirectory Hardening, con temas fundamentales para reducir la superficie de ataque:
✅ Deshabilitar NTLMv1
✅ Eliminar SMBv1
✅ Forzar LDAP Signing
✅ Implementar AES para Kerberos
✅ Configurar LDAP Channel Binding
✅ Forzar SMB Signing
✅ Aplicar Least Privilege
✅ Reducir y eliminar el uso de NTLM
⚠️ Hardening no significa aplicar una GPO y esperar lo mejor. Requiere inventario, auditoría, pruebas y validación de dependencias.
Una lectura imprescindible para cualquier administrador de Active Directory. 👇
techcommunity.microsoft.com/…
ChristerB retweeted
New video: deep dive into Entra passkey registration campaigns before Microsoft's SMS/voice MFA changes start pushing more users through these flows. Covers the new logic Microsoft uses to decide when folks should be nudged to create a passkey.
• Microsoft-managed vs. enabled
• New concept: passkey profile eligibility
• OS/browser nudge logic
WATCH: youtube.com/watch?v=le2UapLn…
ChristerB retweeted
September Windows Server updates break Remote Desktop Services
bleepingcomputer.com/news/mi…
bleepingcomputer.com/news/mi…
ChristerB retweeted
The Edge Management Service has so many hidden gems.
However, if you're using the #OpenIntuneBaseline, you're already benefitting from a *required* user prompt and significantly reduced forced restart period from the Edge defaults 😉
Did you know you can force update Edge from the M365 Admin center? :)
admin.cloud.microsoft/#/Edge
I'm pretty certain you can do similar with Google Enterprise Core as well: chromeenterprise.google/prod…
ChristerB retweeted
workshops.aws is still the most underused free resource on AWS.
Hands-on guides, written by AWS teams, and they actually work. No marketing BS, just labs 🤷♂️
The one I keep recommending: Amazon ECS/Fargate
ChristerB retweeted
If you haven't seen the process for deploying Remote Help yet, this thread is for you
Not because it's hard, but because it is even more unhinged than Global Secure Access setup
I honestly can't believe this shipped, and trust me, it only gets worse the more you look at it
ChristerB retweeted
With #MSIntune 2608 Disable MAC address randomization on #macOS Wi-Fi profiles
learn.microsoft.com/en-us/in…
ChristerB retweeted
𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗫𝗗𝗥 𝗽𝗼𝘄𝗲𝗿 𝘁𝗼𝗼𝗹.
XDRInternals: a community PowerShell module (140+ cmdlets, undocumented APIs) that automates hunting, endpoint & identity queries from the console. Not official MS — test first.
buff.ly/5HsUXyt
#DefenderXDR
ChristerB retweeted
Folks, I'm excited to announce something for all the die hard Intune fans.
Check out daily.intune.admin.news today!
+ bookmark it.
BONUS: Sign up for the email newsletter to get the updates delivered straight to you inbox daily.
ChristerB retweeted
🔥 𝗠𝘆 𝗳𝗮𝘃𝗼𝗿𝗶𝘁𝗲 𝗖𝗼𝗽𝗶𝗹𝗼𝘁 𝘂𝘀𝗲 𝗰𝗮𝘀𝗲 𝗿𝗶𝗴𝗵𝘁 𝗻𝗼𝘄 🧙♂️
Connecting Copilot to 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗟𝗲𝗮𝗿𝗻 as source and configuring a 𝗱𝗮𝗶𝗹𝘆 𝘀𝗰𝗵𝗲𝗱𝘂𝗹𝗲𝗱 𝗽𝗿𝗼𝗺𝗽𝘁 that scans the last 24 hours of Microsoft Security updates.
Every day, I get a concise briefing covering:
• New KQL capabilities
• Defender XDR & Sentinel updates
• Entra, Purview & Intune enhancements
• Production-relevant changes for SOC teams
• Recommended actions for defenders
Think of it as having your own Microsoft Security research assistant working 24/7.💪
#MicrosoftSecurity #KQLWizard
ChristerB retweeted
📦 We're excited to release NotMyFault, RDCMan, ZoomIt, CoreInfo, Process Explorer, Process Monitor, and PsPing with new features and bug fixes!
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/…
ChristerB retweeted
Migrated everyone from ublock origin to ublock origin lite which provides very similar protections :)
Deployment and controlling of extensions is using Intune. Powershell script to control the settings
This fine gentlemen @mwbengtsson has all the steps
imab.dk/enterprise-ad-blocki…
