Windows Hello for Business normally uses a single sign-in method, such as a PIN or biometric data (fingerprint or facial recognition) to unlock a device. If one of these credentials is compromised, for example by someone observing the PIN being entered, an attacker could potentially access the device. To improve security, Windows Hello for Business […]
Windows Hello for Business: Multi-factor Unlock Read More »
In this post we will discover how to further harden the security around Windows Hello for Business. We will have a look at that Enhanced Sign-in Security is, when to use it and how to enable it. ❗Make sure to read the full post before starting your testing. What is Windows Hello Enhanced Sign-in Security?
Windows Hello for Business: Enhanced Sign-in Security Read More »
Remote help is the good ole Quick Assist on steroids. With added security and more possibilities, Remote Help is used to support users through remote control of their devices. Remote Help should be considered and evaluated if your organization is looking for a remote control tool, and the administrator experience is great as it supports
Remote Help – Security hardening Read More »
Bad actors (internal and external) have so far been able to run brute-force attacks against local accounts in the dark, to try to find the correct password. These attacks could be done by having physical access to the device but also by using RDP. But those days are over as the built-in local account lockout
Windows 11: Local account lockout policy Read More »
Policies are used to configure Windows to make each device as usable and secure as possible. For Intune Managed Windows devices, these settings are evaluated during check-in to make sure they are still in the desired state. But, what happens to settings which have been manipulated by a user/administrator/bad actor (configuration drift), and the computer
Windows 11: Config Refresh Read More »
2023-06 quality update comes with some security fixes for supported Windows operating systems. But, one of the fixes is not enabled by default and it is up to us administrators to prepare, test and roll out the fix to our devices. In this case we just need to add a registry value and we will
Fix CVE-2023-32019 the easy way Read More »
Being able to elevate permissions on Windows clients and servers in a secure and controlled way can be a struggle. Pass-the-Hash (PtH) must always be considered, rendering environments where an admin has signed on with domain credentials vulnerable. Using local administrator accounts has been used for a long time and we have seen solutions such
Windows LAPS: More than just a policy Read More »
Have you ever been fumbling around, looking for the Bitlocker recovery key but don’t know exactly where to look? – add to that having a user on the phone, anxious to start working.. the struggle is real! This tool will make it extremely easy to fetch the key regardless if the key is stored in
Bitlocker Recovery Key Tool Read More »
So, this is a good one! Mistakes such as approving a rogue MFA request is easily made and that is where location information and matching number comes to play. This makes it easier for us to identify a rogue MFA request (initiated by a bad actor). ❗ First things first… note that this feature is
Azure MFA – Enable Location Information Read More »
2025-02-25 update: The tool has updated with a new look-and-feel and bug fixes. 2021-11-16: I saw a uservoice on this topic and the idea to allow users to set their own BitLocker PIN after Windows Autopilot, was born. Use it with Windows 10 or Windows 11! Our goal: About the tool The tool is used
BitLocker Startup PIN – the Modern Way Read More »
This website uses cookies. By continuing to use this site, you accept our use of cookies.
