Hybrid infrastructure
Annoyed by RDP warnings? Get rid of them - with signed RDP files!

Lesedauer 3 MinutenRemote access to Windows systems is typically achieved via a Remote Desktop connection. No special configuration is required for this (apart from file shares). However, RDP files are considered insecure by default, as there is no way to verify their origin. For this reason, Windows displays a warning when such a file is opened. This […]

Read more
Real World Corner
Reach your goals faster - with direct download links to Entra products!

Lesedauer 3 MinutenIn my customer projects, I frequently need resources that can only be found in the Entra Admin Center. Sometimes Microsoft also moves products from the public Download Center to pages that require sign-in. This happened, for example, with Entra Connect Sync. However, there are a few tricks I’d like to share here that let you […]

Read more
Microsoft 365
Multi-Tenant management with Entra Tenant Governance - everything alright now?

Lesedauer 6 MinutenManaging a Microsoft cloud environment can be quite time-consuming. And when you have multiple environments—for example, due to acquisitions or spin-offs—the complexity increases accordingly. Microsoft does not have an integrated solution for this that enables comprehensive or centralized administration of multiple cloud environments—until now? Since March 2026, the new “Entra tenant governance” feature has been […]

Read more
Microsoft 365
Microsoft 365 Migrations | Part 2: Management of the environments

Lesedauer 6 MinutenOptimizing and operating a Microsoft cloud environment is not something that can be done on the side. There’s no denying it: the cloud offers many opportunities for automation and natively provides the necessary security services. However, these do not configure themselves. The enterprise IT department still plays a crucial role in professionally implementing security and […]

Read more
Real World Corner
Run scripts with confidence - using code signing certificates!

Lesedauer 6 MinutenOn the one hand, PowerShell is a fairly powerful tool for automation. On the other hand, Microsoft and other vendors now expect users to have a basic understanding of how to use PowerShell.Some functions aren’t even available in a graphical interface at all, but must always be modified using PowerShell. It’s also reasonable to assume […]

Read more
Hybrid infrastructure
Modern Authentication in Exchange Server - farewell, NTLM and Kerberos!

Lesedauer 13 MinutenFor some time now, Microsoft has been pointing out that the NTLM authentication protocol is outdated and that organizations should disable it entirely.However, this is easier said than done. In practice, there are still many (older) applications that continue to use NTLM instead of Kerberos for authentication. If NTLM were disabled, these applications would no […]

Read more
Hybrid infrastructure
Control granular permissions for servers and clients via Active Directory—with group policies and PowerShell!

Lesedauer 6 MinutenLocal Active Directory infrastructures remain widespread and are therefore a popular target for attackers. To effectively reduce the attack surface and harden the infrastructure against attacks, numerous guides and articles are now available. Broadly speaking, the recommendations can be divided into the following topics: Topic Empfehlung(en) Zero Trust - No system or user is automatically […]

Read more
Microsoft 365
Microsoft 365 Migration | Part 1: Options for Collaboration

Lesedauer 5 MinutenIn my first post, I discussed how companies can eventually face the challenge of merging multiple IT infrastructures. This post explores how companies can collaborate within Microsoft 365 without performing an integration. Option 1: Loose collaboration This form of collaboration corresponds to the standard model, which is also used by unrelated companies. No special configuration […]

Read more
Microsoft 365
Hierarchies for Exchange Address Lists - why and how does it work?

Lesedauer 5 MinutenIt is common practice to map the organizational structure of your own company in IT services. While this is not recommended in Active Directory (companies tend to restructure every few years, and this is usually not easy to implement in AD), services for Exchange Online and Teams are more suitable for this purpose. This is […]

Read more
Real World Corner
Easily copy address books from Exchange Server to Exchange Online!

Lesedauer 3 MinutenExchange address books can be used to group mailboxes into logical units, such as company divisions. This gives employees an overview of the company structure and allows them to see which divisions an employee is assigned to. One of my customers uses these address books quite extensively. At the same time, they are currently switching […]

Read more