00:00:00
News— items
Product Updates— items
Recent projects
View all →
Enrolling and securing a macOS device with Intune: from zero to full Defender for Endpoint
Setting up a brand-new macOS tenant in Intune from scratch — user-driven Company Portal enrollment, mapping an existing Windows policy baseline onto macOS equivalents, and a full 15-step Microsoft Defender for Endpoint deployment via Business Premium.
Going fully passwordless on a Microsoft 365 tenant: email, then straight to passkey
Configuring a solo-admin Business Premium tenant so sign-in is genuinely passwordless — enter an email address and go straight to Windows Hello or a passkey, no password field at all, with a break-glass account and Conditional Access enforcement behind it.
Building Layer 8: from nothing to a self-hosted blog with live security monitoring
The full story of how I built this site — from the initial decision to self-host, through designing the UI, configuring the infrastructure, hardening the security, and watching real attacks get blocked within an hour of going live.