I'm a one-person IT team supporting about 15 employees. Production users and roughly 25 lab or development VMs currently share the same Active Directory domain and Entra ID…
I'm the only IT person for a company of about 15 employees. Production users and roughly 25 development or lab VMs currently share the same Active Directory domain…
I'm trying to build a reliable process for moving employees between departments in Microsoft 365. A department change can affect security groups, Teams, SharePoint sites, OneDrive, and mailbox…
I'm trying to understand what a practical offboarding process looks like for a small team without a dedicated security person. When a developer or contractor leaves, there may…
I was asked how I would clean up a messy Active Directory environment and determine which groups could safely be deleted without disrupting anything. The challenge was that…
We're having trouble keeping track of who owns our Active Directory service accounts, especially when employees leave the company. Many accounts become orphaned, and we can't easily determine…
Our organization is considering moving away from Netwrix for self-service account unlocks and password resets. We're evaluating replacement options and would appreciate recommendations based on real-world experience, including…
I'm trying to replace an account-management tool that is currently unavailable by building an employee onboarding process with PowerShell. Comparing newly created users with established accounts has shown…
Microsoft appears to be moving organizations toward passkeys while also phasing out SMS and voice authentication in Entra ID. We have SMS and voice disabled already, but users…
We're planning to migrate remote access for about 500 employees and contractors. Our environment includes SaaS platforms, internal web applications, Windows and Linux administration, several legacy applications, and…
Auth0's pricing is becoming too expensive for our needs, especially as usage grows. We're looking for alternatives that can handle service accounts, machine-to-machine authentication, and API access. What…
I need a central place to manage both always-on and on-demand RBAC role assignments for human users. Should these assignments be created directly at the tenant root management…
I need a central place to manage both on-demand and ambient (always-on) RBAC assignments for human users. Should these assignments be created directly at the tenant root group,…
At my company, when an employee changes their name, we update their account details and email address, but only keep the previous email as an alias for 30…
At my company, when someone changes their name, we update their login and email address but keep the previous address as an alias for only 30 days. After…
I spent about nine months as an IT support intern at my current company and was recently promoted to junior IT administrator. I'm pleased with the progress, but…
I'm preparing for a move and trying to understand how employee information flows between administrative systems. For people who manage IT or operations, when an employee changes details…
I'm trying to replicate the old on-premises Active Directory behavior where each user is limited to signing in from assigned devices. For example, User A should be able…
I'm trying to replicate the old on-premises Active Directory behavior where each user can sign in only from assigned devices. For example, User A should be able to…
I'm designing a configuration-driven Azure Landing Zone deployment using infrastructure as code, such as Bicep, and Azure DevOps. The difficult part is securing identity and permissions for operations…