Howtos Tips

Azure AD Conditional Access Standard

Based on the excellent work in this blog article I implemented a standard for conditional access that we plan to use across clients. It attempts to balance the security lock down with breaking as few things as possible. You need to create and populate the following groups CA-Excluded No Conditional Access rules applied to members CA-Service Accounts Can only authenticate from trusted IP named locations CA-International Users Users who can connect from pre-defined trusted countries…

Continue reading

Howtos

Creating a Secure Boot UEFI compatible Windows USB Key

Background Creating a USB bootable Windows key with Rufus results in a system that can’t startup with Secure Boot which is required for proper BitLocker activation. UEFI/Secure Boot USB sticks must be FAT32 not NTFS formatted. FAT32 volumes have a limit of 32GB. You must partition the device with a volume smaller than 32GB to proceed. FAT32 volumes have a file size limit of 4GB. One of the Windows installer files is over 4GB and…

Continue reading

Tips

AWS Workspaces Login Page Wont Load or Times Out

If you have an AWS Workspaces client on Windows that launches but then times out when loading the login fields/page you may have a corrupted registration. Uninstalling and reinstalling the application does not remove your previous registrations so will not fix the problem. You need to clean up the local cached registration info. Quit the Workspaces Cleint Delete the folder C:\Users\Username\AppData\Local\Amazon Web Services Re-start AWS Workspaces and enter your registration code

Continue reading

Tips

Intune Device Showing New User or Other User at Login

We have observed an occasional but chronic issue with our Intune enrolled laptops – From time to time a machine will boot to a screen requesting a password for “New User” or “Other User” without the option to switch to the enrolled user or enter their WHfB PIN. Rebooting the device does not help and none of the other login options work. Solution – Shut down (not reboot) the device while holding down the shift…

Continue reading