
Entra Cloud Sync vs Connect Sync: what the 7 April 2027 deadline forces

Conditional Access device filter: why yours matches nothing, and what it cannot protect
An unregistered device has null for every property, so a positive operator can never match it. The mode and operator pairs that hold, and the ones that quietly let devices past.

Conditional Access policy design: the failure modes the documentation leaves out

Entra ID P1 vs P2: the licence maths, not the feature list

Power Pages with Entra External ID: a secure customer portal
You’re building a customer‑facing website using Power Pages backed by Dataverse for data and access control, while Entra External ID handles customer...

Designing Cloud-Native on Azure with Entra ID–centric RBAC
Ad-hoc subscriptions tend to sprawl. Policies drift, teams request exceptions, and security becomes reactive. Azure Landing Zones (ALZ) in 2025 provide a...

Dataverse Deep Dive: Virtual Tables, Plug-Ins, and Entra ID Role Design
Dataverse security is anchored in Entra ID. Users are added to Entra ID security groups that back Dataverse group teams. Those teams carry the security roles...
The newsletter
Free: the Intune troubleshooting field guide
Subscribe and get my 8-page PDF: 13 common Intune problems, the order to check them in, and the fix for each. Then Microsoft 365 fixes from the field, about twice a month. From G.R Badhon, Microsoft MVP.
- The field guide, sent the moment you confirm
- New Intune, Entra ID and Purview guides as they publish
- One field-tested fix or script per issue
