The Andy Kemp blog
Microsoft 365 security, from the field.
97 practical articles on Entra ID, Zero Trust, Global Secure Access, privileged access and tenant change, written from real delivery work by a Microsoft MVP.
Read in order
All series Series
-
GSA in Practice: The How, Not the Why
Practical, step-by-step guides to deploying, configuring and operating Microsoft Global Secure Access, including Entra Internet Access, Entra Private Access, Intune, diagnostics and troubleshooting.
-
Windows LAPS: Rethinking Local Administrator Management
A practical series exploring how to design, manage and operate Windows LAPS across Windows 11, Intune, Group Policy and Windows Server.
-
Building Again: My Journey into Vibe Coding
Nearly 30 years after I almost became a software engineer, AI has helped me start building again. This personal series follows my journey into vibe coding, and what I have learned about turning working prototypes into secure, supportable cloud applications.
-
Microsoft Global Secure Access
A practical deep dive into Microsoft Global Secure Access, Microsoft Entra Internet Access and Microsoft Entra Private Access. This series explores real-world architecture patterns, Zero Trust design principles, application publishing, fixed egress IP scenarios, privileged access use cases and lessons learned from implementation projects.
-
Authentication Assurance
A practical guide to modern authentication, passkeys and identity assurance for Microsoft Entra. Learn how to apply the right level of authentication to the right identities.
-
Privileged Access Workstations
A practical guide to building modern privileged access strategies, using Privileged Access Workstations, administrative environments and identity assurance controls to protect high-trust identities.
Topics
- Cyber Security 44
- Microsoft 44
- Zero Trust 39
- Entra 36
- Privileged Access 30
- Privileged Identity 29
- Microsoft 365 Security 26
- Security Strategy 19
- Identity 17
- Azure 13
- Passwordless 13
- Intune 12
Show all 49 topics
- Global Secure Access 11
- Scripting 11
- Ubuntu 11
- Virtual 11
- Windows 365 11
- Azure Virtual Desktop 9
- Networking 9
- Windows 11 9
- Automation 8
- Web Development 8
- Personal Development 7
- Microsoft Graph 6
- Windows Server 6
- AI 5
- PowerShell 5
- Consulting 4
- GitHub 4
- Security 4
- Community 3
- Exchange 3
- Mac OS 3
- Compliance & Governance 2
- Copilot 2
- Personal 2
- Self-Hosting 2
- VPN 2
- Data Protection 1
- Devices 1
- EWS 1
- Exchange Online 1
- Hybrid 1
- Information Protection 1
- Infrastructure as Code 1
- Python 1
- Well Being 1
- Windows App 1
- WordPress 1
All articles
Search the titles, or filter by topic and tag.
Showing 1-12 of 97 posts.
Never miss a post
New articles in your inbox. Saved posts and PDFs with a free account.
Reading online stays open to everyone. A free account lets you bookmark posts and export articles or whole series as PDFs to read offline.
Get a free accountGet notified about new posts
Drop your email in and I'll let you know when there's something new.