Notes and walkthroughs from production work with Microsoft Entra ID, Azure, PowerShell and the infrastructure around them.
From Local Ollama Models to a Public OpenAI-Compatible API Running multiple AI models locally is becoming increasingly practical. With Ollama, you can run models such as Llama, Qwen, and DeepSeek on your own hardware. At the same time, cloud providers such as Anthropic, OpenAI, and Google provide access to much larger hosted models. The problem …
If you’re managing Entra ID (Azure AD), you’re facing constant attacks. The single most effective way to protect your tenant is with Conditional Access. But don’t just click around in the portal—deploy your security as code. We’ll build a simple, modular, and production-ready Terraform framework to deploy this “Top 4” set. The “Top 4” Critical …
Disabling Windows Defender (now called Microsoft Defender Antivirus) may be necessary for developers, software testers, or IT professionals. Deactivation allows for testing applications without interference or for installing a third-party antivirus solution. Important: Disabling Defender leaves a system unprotected. Always re-enable security features after testing to protect against viruses and malware. When Should You Disable Defender? …
Introduction A critical flaw in Microsoft Entra ID (formerly Azure Active Directory) — CVE-2025-55241 — reminds us how fragile cloud identity can be when legacy token flows linger. While Microsoft has already patched the issue, the lessons go far beyond a single CVE. At Terait, we help organizations secure Entra ID and Azure identity services. …
If you’ve deployed Vaultwarden in Docker and want to access it securely via a custom domain (like vault.yourdomain.com) instead of an IP and port, this step-by-step guide will help you achieve it using CyberPanel and OpenLiteSpeed. In this tutorial, I’ll show you how to expose Vaultwarden (running on http://<server-ip>:8062) under a subdomain with SSL encryption. …
In today’s rapidly evolving digital landscape, a sound identity governance strategy is paramount. Central to this strategy is a clear and consistent naming convention for Microsoft Entra ID (formerly Azure Active Directory) objects—ranging from Security Groups and Conditional Access Policies to Applications and Administrative Units. A well-designed naming convention ensures discoverability, automation readiness, security compliance, …
When troubleshooting patching issues or assessing update compliance, finding the right log files is critical. The logs provide insights into agent activities, patch assessments, and update installations. This guide covers the various log locations depending on whether you’re working with Azure VMs or Azure Arc‑enabled servers, and explains how to query centralized update assessment results. …
Introduction Managing access to resources in any organization is crucial for security, compliance, and operational efficiency. Microsoft Entra ID (formerly Azure AD) provides governance features to help organizations control who has access to what and ensure that access is granted appropriately. Two key features that help with access management are: Although both play a role …
Why Do You Need This Script? Organizations register applications in Entra ID to authenticate users and grant access to Microsoft services. However, some apps:🔹 Lose valid secrets or certificates and stop working🔹 Remain unused for long periods but retain permissions🔹 Can be exploited if left unmanaged IT administrators need to identify unused applications and those …
Why Do You Need This Script? Guest users in Entra ID (formerly Azure AD) are external users invited to collaborate within an organization. However, many guests:🔹 Never accept their invitations🔹 Stop using their accounts after a period of time🔹 Pose a security risk if their access isn’t revoked To maintain security and compliance, IT administrators …
When it comes to monitoring and managing your Azure resources, Azure Alerts and Action Rules (formerly known as Processing Rules) are two powerful tools in Azure Monitor. While they both play a role in alert management, they serve different purposes and operate at different stages of the alert lifecycle. Let’s break down the differences and when to use each. …
If you need to export the list of users in your Active Directory along with their last password reset or update date, here’s a simple PowerShell script that will help you achieve that. The script retrieves the PasswordLastSet property for all users and exports the results into a CSV file for easy analysis. PowerShell Script: …
