Your trusted source for Microsoft 365, Zero Trust Security, and Cloud Solutions
Explore Latest PostsEndlessTech is a practical, vendor-neutral blog on Microsoft 365 security for IT professionals, MSP technicians, and SMBs. Expect hands-on guides on Zero Trust, Conditional Access, Intune, Entra ID, Purview, and Defender — each grounded in real tenant work, not marketing.
Copilot surfaces years of SharePoint oversharing in seconds. The oversharing report, minimum sensitivity labels, and a real readiness checklist before rollout.
Read More →
How to triage Entra Identity Protection detections, handle verified Leaked Credentials alerts, and keep noise from overwhelming the queue.
Read More →
Most tenants do not know their real guest count. How to audit B2B Collaboration, Direct Connect and cross-tenant access, and clean up inactive guest accounts.
Read More →
Most M365 offboarding runs on scripts admins call mostly reliable. A complete offboarding sequence, an access audit method, and options without Entra ID Governance.
Read More →
A practical troubleshooting order for Intune policy applicability, conflicts, check-ins, registration state and App Protection failures.
Read More →
A decision-based Conditional Access baseline: core controls, report-only deadlines, and how to consolidate policy sprawl safely.
Read More →
What Microsoft documents about PIM authentication context, the 10-minute reauthentication window, and how to validate the behaviour in your tenant.
Read More →
When to use classic Autopilot versus Device Preparation, the full setup for both, the service principal that breaks most V2 rollouts, and the pitfalls that cost a provisioning day.
Read More →
Microsoft is retiring Apple ADE enrollment profiles with no date and no migration tool. What enrollment policies change, why enrolled devices need a wipe, and what enrollment time grouping really costs.
Read More →
An Entra app with zero user sign-ins can still read every mailbox every night. How to separate delegated logins from app-only data flows before you clean up.
Read More →
EOP vs Plan 1 vs Plan 2 without the licensing fog — and the preset policy setup that stops most phishing using the licence you already pay for.
Read More →
M365 tenant enumeration lets an unauthenticated attacker confirm which accounts exist before ever guessing a password. The technical vectors, why Microsoft can't fully fix it, and how to make the leak useless.
Read More →
The pillar everything else protects. Purview sensitivity labels, DLP, auto-labeling, and DSPM for AI for Copilot readiness.
Read More →
Bring shadow IT and SaaS under control. Defender for Cloud Apps, OAuth consent governance, and Conditional Access App Control.
Read More →
Turn every endpoint into a policy gate. Intune compliance, security baselines, Autopilot, and Defender for Endpoint feeding back into Conditional Access.
Read More →
Identity is the first pillar and the highest-impact category in Secure Score. MFA, Conditional Access, phishing-resistant sign-in, and Privileged Identity Management.
Read More →
A new four-part series maps Zero Trust for Microsoft 365 to the four pillars Secure Score actually measures — Identity, Devices, Apps, and Data. Here is what each part covers.
Read More →
Pay per token or buy the GPU? The honest cost-of-ownership and security math — why utilization, not technology, decides the price, and why local deployment shifts risk rather than removing it.
Read More →
Most M365-first companies pay for endpoint security they never switched on. Why the platform you already own beats adding another tool — a leadership perspective.
Read More →
SharePoint Online storage rarely grows because of new files. Version history, recycle bins, and the Preservation Hold Library do the damage. Here is how to reclaim it.
Read More →
Essential security configurations and best practices to secure your Microsoft 365 tenant — mapping IT security, information security, and cybersecurity to Intune, Purview, and Defender XDR with practical Zero Trust implementation steps and NIST CSF 2.0 alignment.
Read More →
A practical guide to the Microsoft Graph API for IT practitioners managing M365 tenants. Tools, authentication, query patterns, and real automation use cases.
Read More →
AD CS ESC1 is a default certificate template misconfiguration that lets attackers escalate to Domain Admin in under three hours. Learn how to audit and remediate ESC1 in your environment.
Read More →
A birthday party debate about US cloud dependency turns into a reality check: fear is not a strategy, autarky is an illusion, and Europe's real chance lies in asymmetric investment.
Read More →
Yes, Microsoft Entra ID has a free tier — and most small businesses already have it bundled with Microsoft 365. Here is exactly what is included, what Premium P1 and P2 cost, and when upgrading actually makes sense.
Read More →
Microsoft Scout has no identity of its own: it signs in with your Microsoft 365 credentials and acts with your permissions, so its actions are recorded as yours.
Read More →
Your company's IT security works exactly like an airport. Some departments have TSA Pre-Check, others are sneaking through the emergency exit. A sarcastic but dead-accurate guide to Zero Trust.
Read More →
Microsoft documents that Teams channel sites die with their team. When one survives, deleting it is the last step, not the first. How to find them safely.
Read More →
From theory to implementation: Discover the technical reality behind a productive Context Engineering system. Learn how functional separation, prompt architecture, and clear ownership drive AI success.
Read More →
Security by Obscurity is a dangerous illusion. Learn how Defense in Depth, Least Privilege, and Zero Trust build real enterprise security with Microsoft 365.
Read More →
Auditing SharePoint permissions used to mean fragile PowerShell scripts and blind spots. Microsoft's new native Data Access Governance report changes everything — and one Copilot license unlocks it all.
Read More →
They're not competitors — they don't even play in the same league. A factual breakdown of why comparing M365 and Baramundi is like comparing apples to oranges, and when you actually need both.
Read More →
A Microsoft 365 Copilot business case for 60 users built from Microsoft's own published numbers: every input named, every subtotal shown, and the two levers that move the result.
Read More →
Microsoft's new Exchange SOA switch promises to let you shut down your last on-premises server. But configuration drift, split management, and a nasty offboarding trap say otherwise.
Read More →
Forget imaging. Windows Autopilot ships devices straight from the manufacturer to the employee — self-configuring, zero IT touch. Here's how to pick the right strategy: v1 vs. v2.
Read More →
Fix the AADSTS650052 error: WindowsDefenderATP Service Principal missing. Learn the cause, pitfalls with E5 Dev Tenants, and the PowerShell solution.
Read More →
A personal reflection on 15+ years in IT consulting – from Windows NT and Active Directory to M365 and Zero Trust – and the moments that shaped the journey.
Read More →
Static golden tenants can't keep up with Microsoft's update pace. Learn why IT teams and MSPs are moving to automated, drift-aware Intune management.
Read More →
File-level archiving in Microsoft 365 Archive has shipped. What it does, how the billing works, where the limits are, and when a third-party tool still earns its place.
Read More →
Microsoft 365 isn't perfect, but it's unrivaled. Why its market position is earned, alternatives are mostly building blocks, and independent backups are key to resilience.
Read More →
A deep dive into why iOS devices fail to enroll via Apple Business Manager (ABM) and show a 'Not Contacted' status in Intune. Learn the root cause and the mandatory factory reset fix.
Read More →
Discover why Intune Enrollment Restrictions are the foundational control for a Zero Trust architecture. Learn how to block personal Windows devices, mitigate local admin risks, and build a secure endpoint environment from the ground up.
Read More →
A clear guide to understanding the relationship between Microsoft Entra ID Tenants and Azure Subscriptions, and how they work together to manage identity and cloud resources.
Read More →
A fact-check on the Swiss Parliament's Microsoft Copilot incident, exploring digital sovereignty, cloud governance, and the shared responsibility model in the AI era.
Read More →
A deep dive into the Microsoft Entra Suite and how it enables a Zero Trust security model for modern organizations.
Read More →
The debate over Windows 11's hardware requirements isn't about an update; it's about the future of IT infrastructure and why a structured hardware lifecycle is a business necessity.
Read More →
Learn why Business Premium is essential for SMBs and how E5 Security and Compliance add-ons deliver enterprise-grade protection at a fraction of the cost.
Read More →
Discover how the Model Context Protocol transforms AI integration while introducing critical security risks, and learn the four-layer defense strategy.
Read More →
Discover how Microsoft Secure Score helps SMBs benchmark and improve cybersecurity. Learn practical steps, benchmarks, and expert tips for Microsoft 365 security.
Read More →
Discover how Windows 365 Cloud Apps revolutionize application delivery. Targeted app streaming reduces costs and increases efficiency for SMEs.
Read More →
Discover how Mobile Application Management (MAM) can help you secure corporate data on personal devices without compromising on flexibility.
Read More →
The complete guide to implementing Zero Trust across all six pillars—Identity, Endpoints, Data, Apps, Infrastructure, and Network—with M365 as the control plane. Licensing, deployment sequence, and maturity metrics included.
Read More →EndlessTech Blog is your go-to resource for practical insights on M365, cybersecurity, and Zero Trust cloud solutions. Written by Philipp Schmidt, an experienced IT consultant specializing in Intune, Entra ID, and scalable cloud implementations.
New to the blog? These cornerstone articles cover the fundamentals.
All six pillars mapped to M365 services, licensing, deployment sequence, and maturity metrics.
Microsoft Secure Score for SMBsBenchmark your security posture and learn the practical steps to improve it.
Intune Enrollment Restrictions GuideThe foundational control against local admin risk and unauthorized device enrollment.
Why Microsoft Is So DominantA pragmatic reality check on M365's market position, why alternatives are mostly building blocks, and why independent backups matter.
