Browsed by
Category: Proactive Remediations

The Texas Chain Saw Bitlocker Remediations

The Texas Chain Saw Bitlocker Remediations

This blog will be about some proactive remediations and Intune Role Assignments to make sure your service desk can help your users when they need to enter the Bitlocker recovery key and nothing more. I was inspired to check if I can come up with an idea to solve this problem (until Microsoft comes up with a solution) What admin role grants permission to view devices’ bitlocker recovery keys? – Microsoft Tech Community So why not use proactive remediations to…

Read More Read More

The LAPS: Reloaded / Revolutions

The LAPS: Reloaded / Revolutions

First, A shout out to Peter Rising | LinkedIn for delivering the blog title. We had a nice movie discussion, which movie is better: Terminator 1 and 2…. We also talked about the Matrix… Guess where the blog name came from. This blog will be about an Idea I had to use proactive remediations to create a sort of LAPS (Local administrator password solution). I have mentioned it a lot, you will need to make sure your end-users do not…

Read More Read More

B for Bitlocker

B for Bitlocker

This blog will be about the Bitlocker recovery key and how to make sure it will be escrowed to Azure. I will show you what options you have to make sure your recovery keys are safe. Bitlocker is one of the many security measures you will need to implement to make sure the data is safe when the device gets stolen. Bitlocker encrypts the data on the device so it can’t be read without authenticated decrypting using a recovery key….

Read More Read More

Things to block in Denver When You’re an IT Admin

Things to block in Denver When You’re an IT Admin

This blog (old but it is being kept up to date) will be about some more information and options on how to block administrative tools like regedit and the command Prompt. I am going to divide it into multiple parts and I will show you all of the options you have to prevent access to the CMD. Applocker Prevent access to administrative tools (settings catalog) Don’t run / DisallowApps specified applications (settings catalog) Proactive Remediations Conclusion 1.Applocker In one of…

Read More Read More