Dennis Weber

👋 Entra Exporter v3.0 is now out folks! Amazing effort from @AndrewZtrhgf for 🚀 Blazingly fast export 🌀 Azure IAM support and more Many thanks to our other contributors including @SamErde, @LitoMore, JayDoubleu and JulianSteiman Check it out at aka.ms/entraexporter

👋 Folks, I'm super excited to announce the launch of the Microsoft Zero Trust Assessment! I've been working on this project for the past year at Microsoft with an extended team including our security researchers, product feature teams and docs Here's what it does 🧵👇

So what happens on the night of an M365 tenant migration cutover? This is where the rubber hits the road after a company is acquired and you decide to merge the tenants into one. Friday, 8:00 PM. * Start M365 tenant migration after months of planning * The plan is simple: remove the domain, cut over. Friday, 8:15 PM: * Everything grinds to a halt. * The domain won’t detach. * No error message worth anything. Just… stuck. Friday, 10:45 PM: * We find the culprit — a ghost account from the pre-BPOS era holding the domain hostage. * No script will touch it. No admin can modify it. Saturday, 2:00 AM: We’re on a Microsoft CritSit call, waking up engineers to manually fix it so we can keep moving. 💡 This is the real side of Microsoft 365 tenant migrations — the war stories, the politics, the identity traps, and the brutal Monday morning “day-one” tests that determine whether your project is seen as a success or a failure. In this episode, migration veteran Conrad Murray joins me to share the lessons learned from some of the largest M365 tenant migrations so you can avoid the mistakes, spot the landmines early, and deliver a smooth cutover. 🎧 Add to your podcast queue or watch now entra.news/p/identity-war-st…

Did you know that Azure DevOps will no longer be protected by conditional access policies targeting the Azure Management API? To help you with this Henrik Piecha added a timely Maester.dev check to detect and flag this. Get it today in the latest preview build of 🔥Maester.

🕟 A timely reminder for M365 Admins. Have you restricted non-admin users from creating new Entra tenants? I just merged a neat pull request from Marcel Nguyen for 🔥 Maester that checks for this setting. I ❤️ the detailed help text and Marcel provided for this test. 👇🔻 ✅ "Yes" restricts the creation of Microsoft Entra ID tenants to the global administrator or tenant creator roles. ❌ "No" allows non-admin users to create Microsoft Entra ID tenants. Anyone who creates a tenant will become the global administrator for that tenant. 🤔 Tenant creation should be restricted to admin users who have undergone proper training and understand the responsibilities of tenant management, security governance, and compliance requirements. 🛠️ Remediation action This setting can be changed via user settings in the Microsoft Entra or Azure portal or via Microsoft Graph API / Graph PowerShell Module. 1️⃣ Go to entra.microsoft.com 2️⃣ Navigate to Users → User settings 3️⃣ Find "Restrict non-admin users from creating tenants" setting 4️⃣ Change from "No" to "Yes" 5️⃣ Click Save

👋 Check out this new Microsoft Entra blog post 👇 A fresh look for the Microsoft authentication background techcommunity.microsoft.com/…