Mauro Barocco

How to Give Your IT Department Full Admin Access Step 1: Create an IT Department Group in Active Directory 🔸 Open Active Directory Users and Computers (ADUC). 🔸 Right-click your OU → New → Group. 🔸 Name it: IT Department. Step 2: Add Your IT Staff to the Group 🔸 Go into the group → Members → Add your IT users. 🔸 ✅ Now all your IT staff are organized and ready. Step 3: Deploy a Group Policy to Grant Admin Rights 🔸 Open "Group Policy Management (GPMC)." 🔸 Create a GPO: "IT Department - Local Admin Rights." 🔸 Edit the GPO: 🔹 Go to: "Computer Configuration → Preferences → Control Panel Settings → Local Users and Groups" 🔹 Create a New Local Group → Administrators (built-in). 🔹 Action: Update. 🔹 Add your IT Department Group as a member. Step 4: Apply GPO to Your Computer OU 🔸 Link the GPO to the OU where your client computers live. (You cannot link GPOs directly to containers like "Computers." GPOs can only be linked to real OUs.) 🔸 (Optional) Use WMI filters to apply only to Windows 10/11 PCs. Step 5: Test and Validate 🔸 Run "gpupdate /force" on a machine. 🔸 Check the local Administrators group: your IT Department group should now be there! 🚀 ✅ Result: 🔸 No manual work. 🔸 Centralized admin access. 🔸 Easy to audit and control. #SystemAdmin #Office365 #O365 #M365 #Azure

490

41 commenti

🚀 Today I published a new blog post: A first look at Microsoft Entra Private Access for Active Directory domain controllers. Over the past few days, I tested the current preview of the Private Access Sensor — a feature that lets you restrict Kerberos SSO for specific SPNs to clients using Entra Private Access. The post walks you through setup, configuration, and my first impressions, along with some tips, tricks, and personal takeaways. This feature shows strong potential to add an extra security layer to on-prem environments — definitely worth a look! 👉 Read the full post here: https://lnkd.in/ejkuYQym Hashtag #MicrosoftEntra #CyberSecurity #ActiveDirectory #Kerberos #GlobalSecureAccess #ZTNA

228

7 commenti

Say Goodbye to Annoying Reboot-Required Updates! 🚀 Simplifying Windows 11 Updates with Hot Patching Windows updates requiring a reboot can often be frustrating. However, Microsoft has continuously worked to enhance the update experience, and their latest announcement brings significant improvements for Windows 11. The new update feature, known as Hot Patching, allows quality updates such as security patches, bug fixes, and performance improvements to be applied without requiring a device restart. While this doesn’t eliminate the need for reboots entirely (as your IT administrator will likely remind you), it reduces disruptions. As we say, happy users, happy life. To get started with Hot Patching, ensure: ✔️ Your devices are on Windows Enterprise E3/E5 (e.g., Microsoft 365 A3/A5 or F3) or a Windows 365 Enterprise subscription. (Note: Microsoft 365 Business Premium does not qualify for this feature.) ✔️ Devices are running Windows 11 Enterprise version 24H2 (build 26100.2033 or later). ✔️ Devices are enrolled in Microsoft Intune. ✔️ VBS (Virtualization-Based Security) is enabled. This is the default setting for new Windows 11 machines but may not be automatically applied during upgrades from Windows 10 to Windows 11. 🚀🚀Pro Tips🚀🚀 🌟 You can already set up policies in Intune! Go to Devices → Windows → Windows Updates → Quality Updates and select the Preview option. 🌟 Devices that can’t receive Hot Patches will still get regular updates, so no worries about missing out! (Microsoft does their background magic here) 🌟 Hot Patches kick in after your first baseline update (Baseline updates: January, April, July, October, December). 🌟 They play nicely with existing update rings, no exclusions needed!

108

5 commenti

Starting from version (2.4.129.0) of Microsoft Entra Connect Sync, a new admin audit logging feature is available. https://lnkd.in/eTzdQkk9 So you might want to consider forwarding these logs. I'll post detailed instructions soon. #EntraID #AuditLogs #Security #KQL

127

1 commento

New Handy Tips video is live! Zabbix 7.4 introduces inline field validation, making it easier and faster to configure hosts, items, and triggers. No more guesswork, just instant feedback right where you need it. 🎥 Watch the full tip on our YouTube channel and see how this feature can save you time in day-to-day work: https://lnkd.in/dwupEn-r

70

💻The Role of an IT Support with Microsoft 365 Administration Today, IT Support is no longer just about fixing daily technical issues. With the shift to the cloud, IT Support professionals are also expected to manage Microsoft 365 administration to keep users productive and secure. 👉 This includes: * Managing users and licenses in Azure AD / Entra ID * Configuring and supporting Teams, Outlook, and SharePoint * Enforcing security best practices (MFA, access management, monitoring) * Training and assisting employees to get the most out of M365 tools * Acting as a bridge between end-users and IT infrastructure, translating business needs into practical solutions 🔑 In short: IT Support has evolved into a key player in digital transformation — combining hands-on user support with strong knowledge of cloud environments.

47

2 commenti

Improvements to Raspberry Pi Connect for Organisations' audit log make it easy for admins to review activity from the past 90 days. Raspberry Pi Connect enables you to remotely access your Raspberry Pi devices via screen sharing and remote shell from anywhere. It’s a powerful tool, and being able to review when a device has been accessed via Connect, and by whom, is a critical part of keeping your organisation secure. 👉 https://lnkd.in/e7sjWirE

77

4 commenti

Bitdefender Labs and MDR teams confirm active, widespread exploitation of CVE-2025-53770 in on-premises Microsoft SharePoint Server. Immediate action to take: - Apply emergency patches (KB5002754 for SharePoint 2019, KB5002768 for Subscription Edition; 2016 patch pending) - Rotate ASP.NET Machine Keys Edge network device exploits serve as a "beachhead" for follow-up attacks like ransomware (days or weeks later). We've tracked record ransomware activity to single vulnerabilities exploited months prior, demonstrating this pattern. Read the full technical advisory for IoCs and detailed guidance: https://lnkd.in/ed_SHiq6

72

2 commenti