How can I inventory BYOD phones actively using Teams or Outlook?
We allow employees to use personal iOS and Android phones in our Microsoft 365 environment. These devices can access Outlook and Teams and are registered with Microsoft Entra.…
audit logs
Why Aren’t Some Domain Controllers Recording User Logon Events?
We use a User-ID agent on a Windows server to read logon audit events from domain controllers and map IP addresses to usernames. The setup works at four…
Should a one-time secret ever be stored for compliance, or is an audit trail enough?
I'm evaluating a one-time-secret tool for use in a highly regulated environment. The tools I've reviewed don't appear to store the actual secret in their databases. Instead, they…
Which workflow orchestration tools offer truly granular enterprise RBAC?
We're onboarding four separate teams onto our workflow orchestration platform, so controlling who can view, edit, trigger, and manage specific workflows has become important. Our current Airflow setup…
Should a one-time-secret service retain the secret for compliance?
I'm evaluating a one-time-secret service for use in a highly regulated environment. The tools I've reviewed appear to avoid storing the actual secret in their databases and instead…
What’s the best open-source, self-hosted tool for sharing one-time secrets with auditing?
I'm running OneTimeSecret in Docker, but I can't find clear documentation or functionality for auditing shared secrets. I'd like to know which secrets were issued, when they were…
Re-enabling a disabled account can remove private Teams channel memberships
I ran into a concerning Microsoft Teams behavior after disabling and then re-enabling a user account. The account's sign-in was blocked temporarily and later enabled again. The user's…
Which workflow orchestration tools offer genuinely granular enterprise RBAC?
We need to onboard four separate teams onto our workflow orchestration platform, and access control has become a major concern. Our current Airflow setup technically has RBAC, but…
Re-enabling a Disabled Account Can Remove Private Channel Memberships
Has anyone else seen private channel memberships disappear after a user's sign-in is disabled and later enabled again? In testing, the user's normal team memberships eventually returned after…
What Kubernetes permissions would you actually give an AI agent?
AI agents are increasingly being connected to Kubernetes clusters to do more than inspect resources. Read-only access is easy to justify, but practical automation often includes restarting crashlooping…
Is Monitoring SaaS Configuration Changes as Important as Monitoring Logins?
Do organizations need governance and activity monitoring for SaaS applications beyond identity and access-management role assignments? For example, if an administrator changes Salesforce tenant settings, grants someone elevated…
What’s the safest way to run custom production scripts with RBAC, approvals, and audit logs?
We have a collection of Bash, Python, and Groovy scripts for operational tasks such as draining nodes, terminating stuck pods, performing database failovers, and handling other incidents. Standard…
Is Search-UnifiedAuditLog Broken When Using SessionId?
Has anyone noticed unusual behavior with Search-UnifiedAuditLog in Exchange Online recently? An audit script that had worked reliably until last month suddenly stopped returning records for one of…
Our Microsoft 365 tenant has been locked for 20 days—how do we recover and reduce the risk?
I'm the sole systems engineer for a 70-person US automotive manufacturer, handling networking, servers, identity, development, and general IT. About three weeks ago, users suddenly lost email access.…
What Makes Virtual Data Rooms More Secure Than Other File Sharing Options?
I've been curious about what actually makes virtual data rooms (VDRs) secure. When comparing them to standard file-sharing platforms like Google Drive or SharePoint, what are the key…
What are some secure file-sharing alternatives for sensitive documents?
I'm looking for secure file-sharing tools or apps to share sensitive documents with clients outside our organization. We currently block common platforms like Google Drive and Dropbox due…
Confused About MS Azure Audit Log Reports!
I'm investigating a user's activity using the MS Azure Audit Logs, but I'm really puzzled by what I'm seeing. It shows that this specific user is supposedly jumping…
How to Handle This New Security Policy?
I've come across a new requirement in our security policy that seems a bit concerning. It says we need to ensure that all actions by individual users can…
How can I find out who purchased licenses in the billing portal?
I'm trying to figure out if there's a straightforward way to see who actually made purchases in the billing portal. For example, someone acquired 25 Teams Room Pro…
How Can I Find Out Who Purchased Licenses in the Billing Portal?
Is there a straightforward way to see who spent money in the billing portal? For instance, I need to identify the individual who purchased 25 Teams Room Pro…