Andy Kemp Consulting
Insights

Category: Cyber Security

Practical posts on Microsoft 365 security, identity controls, privileged access, Conditional Access, Zero Trust and operational risk reduction.

Explore related service: Security & Identity
Atlas reading a tablet while seated on books with a coffee

Showing 1-12 of 44 posts.

Windows LAPS: Rethinking Local Administrator Management
Free account needed to save — takes 30 seconds.

15 min read Updated 14 Oct 2026

Operating Windows LAPS: Deployment Isn't the Finish Line

Operate Windows LAPS: privileged retrieval, auditing, post-authentication rotation, event-log monitoring and governance of other local administrator accounts.
Windows LAPS: Rethinking Local Administrator Management · Part 4
Cyber Security #Windows 11 #Windows Server
Windows LAPS: Rethinking Local Administrator Management
Free account needed to save — takes 30 seconds.

14 min read

Windows LAPS on Windows Server: Same Technology, Different Design

Windows LAPS works across Windows clients and servers, but the architecture shouldn't simply be copied from Windows 11. A practical look at member servers, Active Directory, pas...
Windows LAPS: Rethinking Local Administrator Management · Part 3
Cyber Security #Windows 11 #Windows Server
Windows LAPS: Rethinking Local Administrator Management
Free account needed to save — takes 30 seconds.

12 min read

Windows LAPS: Intune or Group Policy for Windows 11?

Windows LAPS can be configured through Intune or Group Policy, but what happens when both are present? A practical look at policy precedence, hybrid environments and choosing a...
Windows LAPS: Rethinking Local Administrator Management · Part 2
Cyber Security #Windows 11 #Windows Server
Windows LAPS: Rethinking Local Administrator Management
Free account needed to save — takes 30 seconds.

12 min read

Windows LAPS on Windows 11: Designing Local Admin Properly

Windows LAPS can now create and manage its own local administrator account on Windows 11. But which account should you manage, and what about every other local admin?
Windows LAPS: Rethinking Local Administrator Management · Part 1
Cyber Security #Windows 11 #Windows Server
Your Conditional Access Policy Says Require MFA. What Does That Actually Mean?
Free account needed to save — takes 30 seconds.

13 min read

Your Conditional Access Policy Says Require MFA. What Does That Actually Mean?

What does “Require MFA” in Conditional Access actually guarantee? A practical look at MFA, Authentication Strength, phishing-resistant authentication, passkeys, synced passkeys...
Cyber Security #Conditional Access #Cyber Security
Microsoft Global Secure Access
Free account needed to save — takes 30 seconds.

19 min read

Global Secure Access and Privileged Access: An Architecture I Want to Test

What could Microsoft Global Secure Access add to a privileged-access architecture? This article explores a conceptual design combining Entra Private Access, application segmenta...
Microsoft Global Secure Access · Part 9
Cyber Security #Cyber Security #GSA
Microsoft Global Secure Access
Free account needed to save — takes 30 seconds.

17 min read

Designing Entra Private Access Properly: Don't Rebuild Your VPN in the Cloud

Microsoft Entra Private Access can replace traditional VPN access, but simply publishing broad private networks through Quick Access risks recreating the same access model in a...
Microsoft Global Secure Access · Part 8
Cyber Security #Cyber Security #GSA
Microsoft Global Secure Access
Free account needed to save — takes 30 seconds.

23 min read

Migrating from a Traditional Secure Web Gateway to Global Secure Access

Migrating from a traditional Secure Web Gateway to Microsoft Global Secure Access is more than replacing one endpoint client with another. This article explores policy rationali...
Microsoft Global Secure Access · Part 6
Entra #Cyber Security #GSA