Windows Hello for Business normally uses a single sign-in method, such as a PIN or biometric data (fingerprint or facial recognition) to unlock a device. If one of these credentials is compromised, for example by someone observing the PIN being entered, an attacker could potentially access the device. To improve security, Windows Hello for Business […]

Remote help is the good ole Quick Assist on steroids. With added security and more possibilities, Remote Help is used to support users through remote control of their devices. Remote Help should be considered and evaluated if your organization is looking for a remote control tool, and the administrator experience is great as it supports

Bad actors (internal and external) have so far been able to run brute-force attacks against local accounts in the dark, to try to find the correct password. These attacks could be done by having physical access to the device but also by using RDP. But those days are over as the built-in local account lockout

Policies are used to configure Windows to make each device as usable and secure as possible. For Intune Managed Windows devices, these settings are evaluated during check-in to make sure they are still in the desired state. But, what happens to settings which have been manipulated by a user/administrator/bad actor (configuration drift), and the computer