Patrick Seltmann

Why you should ensure whether your TPM module has not been disabled once - ctrlshiftenter.cloud Hi everyone, in this blog post, I will write about the importance of the trusted platform module (TPM)…

New blog post! Why the Trusted Platform Module (TPM) is critical and why disabling it—even once—can breaks your security chain. Spoiler: There is no "self-healing" process for critical artifacts like the PRT or Windows Hello keys! www.ctrlshiftenter.cloud/n2z1
#Microsoft #Cybersecurity #Endpoint

🚀 New blog post: Should you exclude "Microsoft Intune Enrollment" from your compliance conditional access policy or not?

Read more in my new blog post: www.ctrlshiftenter.cloud/31fa #conditionalaccess #intune #entra #microsoft #security

Mastering App Control for Business | Part 7: Maintaining your policies with Azure DevOps (or PowerShell) - ctrlshiftenter.cloud Hello everyone, in this last post in this series, I will describe how you can maintain your App…

🚀 New: App Control for Business — Part 7. Automate ACfB policy deployment: maintain, sign, and deploy to Intune via Azure DevOps pipelines or with PowerShell 7. Read more about this on my blog: www.ctrlshiftenter.cloud/bn0o
#AppControl #WDAC #Intune #PowerShell #DevOps #Security #Microsoft

Thanks for your reply. I have already double checked that but the sign-inverification methods are still not there.

Does anyone know how to remove these old authentication methods from windows? #windows #authentication

Mastering App Control for Business | Part 6: Sign, apply and remove signed policies - ctrlshiftenter.cloud HI folks, in this post, I continue my blog series about Application Control for Business and take a…

🚀 New Blog Post – App Control for Business | Part 6
Learn how to sign, apply, and remove signed policies to protect against tampering.
Now on my blog 👇
👉 www.ctrlshiftenter.cloud/oat7 #WDAC #AppControl #EndpointSecurity #Cybersecurity #Microsoft #Intune #prevention

Mastering App Control for Business | Part 5: Create a base policy for fully managed devices - ctrlshiftenter.cloud Hi folks, in this blog post, I will continue my series on Application Control for Business and explain…

🚀 New Blog Post – App Control for Business | Part 5
How to create a custom base policy for fully managed devices — with PowerShell or the App Control Wizard.
Includes real examples with Notepad++
👉 www.ctrlshiftenter.cloud/4qz1
#WDAC #AppControl #Security #Intune

Exciting News for Nonprofits: Enhanced Security with Microsoft Enterprise E5 Add-On! | Microsoft Community Hub What Does the E5 Security Add-On Include? The Microsoft Enterprise E5 Security add-on offers advanced security capabilities, including: Microsoft Entra ID...

#Microsoft has announced the availability of E5 Security Add-On licenses for #nonprofits witch already own Business Premium Licenses.
This is a hugh benefit for nonprofit organization which want to take their #cybersecurity to the next level.
techcommunity.microsoft.com/blog/nonprof...

Entra Connect Sync - Attack Surface Reductions - ctrlshiftenter.cloud In this blog post, I will write about often ignored security aspects in hybrid Microsoft infrastructures (in my…

🔐 Reduce the attack surface of your Entra Connect Sync setup!
✅ Hard vs. soft match
✅ ImmutableID & mS-DS-ConsistencyGuid
✅ Secure app-based auth w/ CA
✅ Security Best Practises
🔎 Monitor changes via KQL
👉 www.ctrlshiftenter.cloud/q1oc #EntraID #Microsoft #Hybrid #Security

🎉 Just published an early public version of CAxPorter Utility – to manage #EntraID #ConditionalAccess Policies in bulk!

Import/export CA policies
Rename & delete policies
Generate Markdown docs via #OpenAI
Works with CLI & GUI
Blog: www.ctrlshiftenter.cloud/60zf
GitHub: github.com/PatrickSeltm...

Looks like Lifecycle Workflows just added the ability to revoke session tokens 💪

Previously, we had to create our own custom extension (Logic App) to do this, so really nice to see it as a built-in task now :)

learn.microsoft.com/...

Entra ID to Disable Service Principal-Less Authentication Microsoft will disable service principal-less authentication in March 2026. This step closes a hole that doesn't exist today but might in the future.

#EntraID will block service prinicipal-less authentication from March 2026. Don't know what this is or if it will affect your #Microsoft365 tenant? It's time to check.... Microsoft will take care of 1P apps. Other vendors need to do the same
office365itpros.com/2025/04/15/s...
@nathanmcnulty.com

Hello #microsoft, your mslearn page “Conditional Access architecture and personas” from the #Azure Architect Center, which explains the Conditional Access Persona Framework, was deleted 5 days ago. Why?

Mastering App Control for Business | Part 4: How to create a "starter base policy" for lightly managed devices - ctrlshiftenter.cloud In the last three blog posts about App Control for Business, I talked a lot of theory and…

🚀 New blog post: Mastering App Control for Business – Part 4 🔐
Learn how to create a “starter base policy” for lightly managed Windows devices.

www.ctrlshiftenter.cloud/qu8h

#WDAC #AppControl #Intune #CyberSecurity #ZeroTrust #Windows #MSIntune #Microsoft #EndpointManagement #Endpoint #Security

Session token lifetime: require reauthentication every time - ctrlshiftenter.cloud Every time I talk about Conditional Access I say: “You must think about it as an identity firewall…

I've written a short explanations about the session toke lifetime: require reauthentication that was released by #microsoft with the march 2025 #MicrosoftEntra updates. www.ctrlshiftenter.cloud/hdf7

#ConditionalAccess #ZeroTrust #IdentitySecurity #M365 #CloudSecurity #PrivilegedAccess #PAW

Mastering App Control for Business | Part 3: Application ID Tagging Policies & managed Installer - ctrlshiftenter.cloud Hello everyone. In my last blog post Mastering App Control for Business | Part 2: Policy Templates &…

🚀 New Blog Post: Mastering App Control for Business | Part 3 – App Tagging & Managed Installer
How to combine tagging policies with Windows Firewall & explore the pros/cons of Managed Installer.

🔗 www.ctrlshiftenter.cloud/gmva
#WDAC #AppControl #Intune #Securtiy #Microsoft

What's new in Microsoft Intune Find out what's new in Microsoft Intune.

New Windows LAPS features just dropped with the March '25 Intune update! Check the docs:
learn.microsoft.com/en-us/mem/in...

#Intune #EndpointManagement #WindowsLAPS #WindowsSecurity

Mastering App Control for Business | Part 2: Policy Templates & Rule Options - ctrlshiftenter.cloud In my last blog post Mastering App Control for Business | Part 1: Introduction & Key Concept I…

🚀 New Blog Post: Mastering App Control for Business | Part 2 🔐
Diving into policy templates, rule options & security settings in App Control for Business (ACfB)! 💡
📖 Read more: www.ctrlshiftenter.cloud/vmbo
#CyberSecurity #AppControl #WDAC #ITSecurity #ZeroTrust #EndpointSecurity #Intune

Mastering App Control for Business | Part 1: Introduction & Key Concept - ctrlshiftenter.cloud Off-Topic: This is my first blog post in English. Writing in a different language and even more so…

🚀 New Blog Post: Mastering App Control for Business | Part 1 🔐
Trusting all apps is risky! Attackers exploit detection gaps—traditional security is reactive, not proactive.

🔗 Read more: www.ctrlshiftenter.cloud/zhmp
#CyberSecurity #WDAC #ZeroTrust #AppControl4Business #Enterprise #M365 #Intune

Mastering App Control for Business | Part 2: Policy Templates & Rule Options - ctrlshiftenter.cloud In my last blog post Mastering App Control for Business | Part 1: Introduction & Key Concept I…

🚀 New Blog Post: Mastering App Control for Business | Part 2 🔐
Diving into policy templates, rule options & security settings in App Control for Business (ACfB)! 💡
📖 Read more: www.ctrlshiftenter.cloud/vmbo
#CyberSecurity #AppControl #WDAC #ITSecurity #ZeroTrust #EndpointSecurity #Intune

Are there any use cases for #appcontrolforbusiness application tagging policies instead of tagging application to control these in the windows Firewall? #microsoft #endpointprotection #intune

Mastering App Control for Business | Part 1: Introduction & Key Concept - ctrlshiftenter.cloud Off-Topic: This is my first blog post in English. Writing in a different language and even more so…

🚀 New Blog Post: Mastering App Control for Business | Part 1 🔐
Trusting all apps is risky! Attackers exploit detection gaps—traditional security is reactive, not proactive.

🔗 Read more: www.ctrlshiftenter.cloud/zhmp
#CyberSecurity #WDAC #ZeroTrust #AppControl4Business #Enterprise #M365 #Intune