Microsoft cloud field notes
Field-tested guides for Microsoft Defender, Intune, Entra ID, Autopilot and Purview — written for people who have to make the controls work.
Newest field guide
A field implementation for discovering local AI coding agents, scoping the affected Windows devices, and deploying Microsoft Defender AI agent runtime protection through an audit-first rollout.
Read the field guideRecent work
Why remembered MFA devices should be reviewed carefully and how Conditional Access session controls give admins a cleaner security model.
entra-idOneDrive web URLs are moving to onedrive.cloud.microsoft. Existing links keep working, but admin-owned URL controls need a quick review.
microsoft-365Microsoft Entra ID is changing hard-match behavior for cloud-managed users that hold Microsoft Entra roles.
entra-idMicrosoft Entra registration campaigns can now nudge users to register passkeys during sign-in.
entra-idA field note on using Intune proactive remediations to detect Microsoft Defender version drift, trigger updates, and keep evidence.
defender