Olav Tvedt's Avatar

Olav Tvedt

@olavt.bsky.social

«The Sky Is a Neighborhood» -Foo Fighters. Cloud dude @Sparebankenvest. Cloud Security MVP (17 years). Podcasting Microsoft cloud and related stuff on YouTube: https://www.youtube.com/@bluescreenbrothers

125 Followers  |  154 Following  |  31 Posts  |  Joined: 08.11.2024  |  1.5887

Latest posts by olavt.bsky.social on Bluesky

Entra Apps: Hunting Certificates & Secrets
YouTube video by BlueScreen Brothers Entra Apps: Hunting Certificates & Secrets

The hunt for expiring certs and secrets on your Entra/Azure apps where the topic when @goodworkaround.com and I did our newest podcast.

We share where to find them (some are well hidden), cmd lines and a script that help monitor and alert before they expires and cause problems
youtu.be/1TjedH5o-QU

07.11.2025 13:23 — 👍 1    🔁 0    💬 0    📌 0
How to convert Active Directory groups to Entra ID controlled group
YouTube video by BlueScreen Brothers How to convert Active Directory groups to Entra ID controlled group

#Entraid preview out: Convert Source of Authority of synced Active Directory groups to the cloud.
Or easier said, you can now convert Active directory groups so you can change and manage them in EntraID

How to w/demos shown by @goodworkaround.com and me in our newest episode

youtu.be/_K3k5_A44sM

19.10.2025 09:50 — 👍 1    🔁 0    💬 0    📌 0
Windows Sandbox - No network fix (Update sept.25 - Only netsh version are now working)
YouTube video by BlueScreen Brothers Windows Sandbox - No network fix (Update sept.25 - Only netsh version are now working)

Brand new problem with Windows Sandbox, after updates in September. The manual and PowerShell solution do not longer work, but luckily the good old "Netsh" command still work.

youtu.be/XX3fdBptKqQ

18.09.2025 09:12 — 👍 0    🔁 0    💬 0    📌 0
Entra App Registration: A deep dive into configuration part 1
YouTube video by BlueScreen Brothers Entra App Registration: A deep dive into configuration part 1

Last day before 2 weeks vacation. When coming back I will start making some more Entra App videos. I think secret and certificate will be first focus

In the mean time enjoy one off our "classics"
youtu.be/f5iXXi0prbA

15.08.2025 12:37 — 👍 1    🔁 0    💬 0    📌 0
Preview
Become Defender for Cloud Ninja [Last update: 07/30/2025]All content has been reviewed and updated for July 2025.   This blog post has a curation of many Microsoft Defender for Cloud...

The Microsoft Defender for Cloud Ninja training have been updated
Some new:
- Agentless code scanning for GitHub and Azure DevOps (preview)
- Protecting Cloud Storage in the Age of AI
- Microsoft AI Security Story: Protection Across the Platform
- And more
techcommunity.microsoft.com/blog/microso...

06.08.2025 08:13 — 👍 0    🔁 0    💬 0    📌 0
Preview
Extended Security Updates (ESU) program for Windows 10 Learn about the Extended Security Updates (ESU) program for Windows 10. The ESU program gives customers the option to receive security updates for Windows 10.

Who are hosting a birthday party for Windows 10 today?
🥳

10 Years today since it was released. Is that the reason for the extended support?

Ent. Extended Security Updates (ESU) Win 10:
learn.microsoft.com/en-us/window...

Consumer Ext Security Updates (ESU):
support.microsoft.com/en-us/window...

29.07.2025 11:47 — 👍 0    🔁 0    💬 0    📌 0
Preview
Scripts-For-Sharing/Azure/Access_Control_(IAM)/Get-AllAzureRolesGroup.ps1 at master · OTvedt/Scripts-For-Sharing Contribute to OTvedt/Scripts-For-Sharing development by creating an account on GitHub.

Sometimes I need to hunt Azure to check if a specific group has permissions some where in all my subscriptions.

With help from Co-pilot in VS Code I now have this script. Listing both "Active" and "Eligible" permissions and exporting it into a CSV file

github.com/OTvedt/Scrip...

21.07.2025 09:11 — 👍 0    🔁 0    💬 0    📌 0
Post image

Renewed for the 18th time, still excited and nervous when waiting for that e-mail

Big thanks to @alexsolaat.bsky.social, @tinastenderup.bsky.social, and the entire #MVPBuzz family

10.07.2025 15:24 — 👍 4    🔁 0    💬 0    📌 0
Preview
Microsoft Defender for Office 365 now blocks email bombing attacks Microsoft says its Defender for Office 365 cloud-based email security suite will now automatically detect and block email bombing attacks.

Great news. Soon (if not already) your Defender for Office 365 will automatically detect and block email bombing attacks.

www.bleepingcomputer.com/news/securit...

01.07.2025 10:49 — 👍 0    🔁 0    💬 0    📌 0
Post image Post image Post image

Okay folks, your going to want to bookmark this 👉 signin.merill.net

Over the weekend I vibe coded a tool I'm calling Microsoft Entra Sign-in URL Builder

This is something I've been wanting to build for some time and inspiration struck.

30.06.2025 12:59 — 👍 35    🔁 11    💬 3    📌 2
Preview
Scripts-For-Sharing/Azure/Apps/Get-Apps-with-too-long-expiration.ps1 at master · OTvedt/Scripts-For-Sharing Contribute to OTvedt/Scripts-For-Sharing development by creating an account on GitHub.

Trying to clean up old "mistakes". Default expiration dates for new secrets in Entra App registrations were at one point set to the years 2299 and 2100. Created a script that lists these so I can clean them up.
And also check if there is any with 2 years+ too expiration

github.com/OTvedt/Scrip...

23.06.2025 12:43 — 👍 0    🔁 0    💬 0    📌 0
Windows Sandbox - No network fix
YouTube video by BlueScreen Brothers Windows Sandbox - No network fix

I am a heavy user of Windows Sandbox, but I (and many more) have had the "No network" problem.

It is in fact just a good old DNS setting problem. I created a short video on how to fix it manually or with a configuration file.

youtu.be/XX3fdBptKqQ

16.05.2025 12:45 — 👍 1    🔁 1    💬 0    📌 0
Windows Sandbox - No network fix
YouTube video by BlueScreen Brothers Windows Sandbox - No network fix

I am a heavy user of Windows Sandbox, but I (and many more) have had the "No network" problem.

It is in fact just a good old DNS setting problem. I created a short video on how to fix it manually or with a configuration file.

youtu.be/XX3fdBptKqQ

16.05.2025 12:45 — 👍 1    🔁 1    💬 0    📌 0
Post image

Updated my Entra PIM roles activation script to include the possibility of selecting for how long the roles should be active.

The script will list all roles you are eligible to active and highlight the once already active

github.com/OTvedt/Scrip...

09.05.2025 14:03 — 👍 0    🔁 0    💬 0    📌 0
Post image

Struggling with Windows Sandbox not having network access?
It is most likely related to DNS trouble, set it manually or create a Sandbox config file (.wsb) that configure the DNS setting during startup every time.

06.05.2025 08:05 — 👍 0    🔁 0    💬 0    📌 0

On the "Microsoft Account security settings" you can remove the device if it get "lost". When setting up you will get recovery codes that you can use if you don't have other ways of logging in (Take care of thise, you can generate new once now if you have lost them ;-)

05.05.2025 12:29 — 👍 1    🔁 0    💬 1    📌 0
Preview
Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support Microsoft now defaults new accounts to passkeys instead of passwords + Safer logins + Reduced phishing risk.

New private Microsoft accounts gets more safe with passkeys as default.
You get both that nice and easy passwordless experience and enhancing the security

thehackernews.com/2025/05/micr...

How to enable on your exiting account? (personal and work account)
support.microsoft.com/en-us/accoun...

05.05.2025 11:47 — 👍 0    🔁 0    💬 0    📌 1
Microsoft Surface: Security from chip to cloud
YouTube video by BlueScreen Brothers Microsoft Surface: Security from chip to cloud

Security from chip to cloud are the topic on #BlueScreenBrothers latest episode. Focused on #Microsoft Surface, but the advices should be followed on any hardware vendors equipment.
@alexsolaat.bsky.social youtu.be/s8Awpscsgjk

27.04.2025 09:58 — 👍 0    🔁 0    💬 0    📌 0
AI technologies and Microsoft Surface with Microsoft PM Frank Buchholz and Chauncey Larson
YouTube video by BlueScreen Brothers AI technologies and Microsoft Surface with Microsoft PM Frank Buchholz and Chauncey Larson

During #MVPSummit @alexsolaat.bsky.social meetup with @microsoft.com Surface Program managers Frank Buchholz and Chauncey Larson. They recorded a podcast about AI technologies and Microsoft Surface

Check it out here:
youtu.be/JTluLkcE5m4
#MVPBuzz

04.04.2025 12:07 — 👍 1    🔁 0    💬 0    📌 0
Evolution of Mainframe and Cloud PC
YouTube video by BlueScreen Brothers Evolution of Mainframe and Cloud PC

@alexsolaat.bsky.social and Anders are meeting up with Briand Sanderson (Microsoft) again during the Microsoft MVP Summit. And in this episode there is lovely mix of old time #Mainframe and modern #CloudPC

#MVPBuzz #MVPSummit
youtu.be/2bmIXQtPWlA

27.03.2025 13:45 — 👍 0    🔁 0    💬 0    📌 0
Moderns security threat and plugins
YouTube video by BlueScreen Brothers Moderns security threat and plugins

A brand new episode out:
With Briand Sanderson (Microsoft), @alexsolaat.bsky.social and Anders Kristiansen (Storebrand) exploring the latest trends, risks, and ethical dilemmas

Discover how to stay safe and secure in the digital age, from browser extensions to AI tools.
youtu.be/C2DOccFC2RU

26.03.2025 10:35 — 👍 4    🔁 0    💬 0    📌 0
Scripts-For-Sharing/Azure/Access_Control_(IAM)/Classic-AdminRoles/Find-ClassicAdmins.ps1 at master · OTvedt/Scripts-For-Sharing Contribute to OTvedt/Scripts-For-Sharing development by creating an account on GitHub.

Needed to figure out if I had any Azure Classic Admins left (unsupported since 31.August 2024) in my subscriptions

Found a script (wmatthyssen.com) and modified it to suit my taste:

github.com/OTvedt/Scrip...

More info from Microsoft here:
learn.microsoft.com/nb-no/azure/...

25.03.2025 12:06 — 👍 1    🔁 0    💬 0    📌 0
Accessing resources cross tenant using managed service identities
YouTube video by BlueScreen Brothers Accessing resources cross tenant using managed service identities

New episode out!
@goodworkaround.com and I am looking in to #Azure cross tenant use of managed identities without having to use shared #secrets or #certificates that expire

Check it out, and follow our channel for more exiting nerdy stuff!
youtu.be/oV9jHjNyqfk

27.02.2025 10:59 — 👍 2    🔁 1    💬 0    📌 0
Accessing resources cross tenant using managed service identities
YouTube video by BlueScreen Brothers Accessing resources cross tenant using managed service identities

New episode out!
@goodworkaround.com and I am looking in to #Azure cross tenant use of managed identities without having to use shared #secrets or #certificates that expire

Check it out, and follow our channel for more exiting nerdy stuff!
youtu.be/oV9jHjNyqfk

27.02.2025 10:59 — 👍 2    🔁 1    💬 0    📌 0
Managed identity - System and user-assigned demos
YouTube video by BlueScreen Brothers Managed identity - System and user-assigned demos

@goodworkaround.com and I are exploring Managed identities through demonstrations and real-life examples using logic apps and automation accounts.
The tasks of setting and verifying access permission are also thoroughly explored

Check it out here(and follow for more)
www.youtube.com/watch?v=spb-...

07.02.2025 12:49 — 👍 0    🔁 0    💬 0    📌 0
Preview
Scripts-For-Sharing/Azure/PIM/Entra/Activate-MultipleRoles.ps1 at master · OTvedt/Scripts-For-Sharing Contribute to OTvedt/Scripts-For-Sharing development by creating an account on GitHub.

It was time to modernize my old Entra roles activation script.

It's a total remake, now based on the MsGraph module and the fancy new feature that lists all of the user's "Eligible" roles and lets you select multiple roles for activation

github.com/OTvedt/Scrip...

24.01.2025 13:37 — 👍 1    🔁 0    💬 0    📌 0
Microsoft Graph for dummies Part1 - The basics, explorer, permissions and more
YouTube video by BlueScreen Brothers Microsoft Graph for dummies Part1 - The basics, explorer, permissions and more

@goodworkaround.com and I did a 3 part series on #MicrosoftGraph some time ago. Starting with the basic and building up

part 1: The basics, explorer, permissions and more
Part 2: Using PowerShell
Part 3: App registration and secrets

First part here:
youtu.be/z11IZ4JFtBA?...

20.01.2025 11:31 — 👍 0    🔁 0    💬 0    📌 0
Post image

Really love that you now can do PIM (Privileged Identity Management) task and adjustment directly on the resource in Azure portal.

17.01.2025 11:24 — 👍 1    🔁 0    💬 1    📌 0
Entra App Registration: A deep dive into configuration part 1
YouTube video by BlueScreen Brothers Entra App Registration: A deep dive into configuration part 1

Deep dives into Entra/Azure App registration, demos, and explanation, with @goodworkaround.com and me

We go into creation, overview, authentication and API permissions. We also take a look at decoding the access token
youtu.be/f5iXXi0prbA

14.01.2025 10:17 — 👍 0    🔁 0    💬 0    📌 0

Had the pleasure of sitting down with the BlueScreen Brothers Alex & Olav for a fun chat about the human side of security and how it's often overlooked. Have a listen!

13.01.2025 14:19 — 👍 1    🔁 1    💬 0    📌 0

@olavt is following 19 prominent accounts