https://blog.andykemp.com/ https://blog.andykemp.com/start-here/ https://blog.andykemp.com/series/ https://blog.andykemp.com/series/authentication-assurance/ https://blog.andykemp.com/series/building-again-my-journey-into-vibe-coding/ https://blog.andykemp.com/series/gsa-in-practice/ https://blog.andykemp.com/series/microsoft-global-secure-access/ https://blog.andykemp.com/series/paw/ https://blog.andykemp.com/series/windows-laps-rethinking-local-administrator-management/ https://blog.andykemp.com/backing-up-your-ubuntu-web-server-and-database/2024-05-24T08:33:12.000Z https://blog.andykemp.com/recommended-updates-to-your-selfhosted-wordpress/2024-05-24T09:56:37.000Z https://blog.andykemp.com/selfhosting-wordpress-on-ubuntu-22-04-4/2024-05-23T13:47:28.000Z https://blog.andykemp.com/creating-multiple-security-groups-in-microsoft-entra/2024-05-24T09:44:54.000Z https://blog.andykemp.com/recovering-your-self-hosted-wordpress-sites-on-ubuntu/2024-06-10T14:40:18.000Z https://blog.andykemp.com/creating-a-local-smtp-relay-using-postfix-and-sendgrid/2024-05-31T10:09:44.000Z https://blog.andykemp.com/cost-effective-ipsec-site-to-site-vpn-with-azure-and-udm/2024-06-10T14:37:15.000Z https://blog.andykemp.com/privileged-identity-management-and-access-tiers/2024-07-02T19:26:02.000Z https://blog.andykemp.com/securing-my-privileged-access-with-avd/2025-01-15T15:56:48.000Z https://blog.andykemp.com/why-use-a-paw/2025-02-05T20:59:29.000Z https://blog.andykemp.com/virtual-paw-part-1-a-high-level-overview/2025-02-18T12:29:38.000Z https://blog.andykemp.com/virtual-paw-part-2-core-components/2025-02-18T12:51:49.000Z https://blog.andykemp.com/virtual-paw-part-3-deploying-the-session-hosts/2025-02-27T14:57:21.000Z https://blog.andykemp.com/virtual-paw-part-4-completing-the-basic-setup/2025-03-23T13:57:36.000Z https://blog.andykemp.com/mac-os-connecting-to-windows-365-and-avd/2025-04-04T12:52:36.000Z https://blog.andykemp.com/microsoft-surface-laptop-7th-edition/2025-04-15T11:56:50.000Z https://blog.andykemp.com/always-on-vpn-entra-join-part-1-whats-needed/2025-05-06T12:36:10.000Z https://blog.andykemp.com/always-on-vpn-part-2-certificate-templates/2025-05-06T12:36:35.000Z https://blog.andykemp.com/always-on-vpn-part-3-core-always-on-vpn-infrastructure/2025-05-06T12:36:52.000Z https://blog.andykemp.com/always-on-vpn-part-4-configure-always-on-vpn-for-entra-joined-devices/2025-05-06T12:37:21.000Z https://blog.andykemp.com/always-on-vpn-part-5-deploy-always-on-vpn-for-entra-joined-devices/2025-05-06T12:35:07.000Z https://blog.andykemp.com/using-cloud-pki-with-always-on-vpn/2025-05-09T08:45:57.000Z https://blog.andykemp.com/windows-image-prep-tool-for-microsoft-surface-laptop-7th-edition/2025-05-30T14:46:35.000Z https://blog.andykemp.com/deploying-azure-virtual-desktop-a-modular-automated-approach/2025-06-08T15:37:09.000Z https://blog.andykemp.com/openvpn-site-to-site-setup/2025-07-12T18:00:53.000Z https://blog.andykemp.com/secure-dynamic-dns-updates-to-azure-with-azurednssync/2025-07-17T13:06:25.000Z https://blog.andykemp.com/automate-your-elgato-key-light-air-with-microsoft-teams-presence/2025-08-11T14:49:43.000Z https://blog.andykemp.com/self-hosted-wordpress-made-simple/2026-02-01T12:15:36.000Z https://blog.andykemp.com/zero-trust-blog-series-a-microsoft-centric-approach/2026-01-06T10:06:52.000Z https://blog.andykemp.com/identity-the-new-perimeter-in-zero-trust/2026-01-06T10:06:18.000Z https://blog.andykemp.com/devices-the-second-pillar-of-zero-trust/2026-01-06T10:06:08.000Z https://blog.andykemp.com/applications-the-third-pillar-of-zero-trust/2026-01-06T14:30:15.000Z https://blog.andykemp.com/data-the-fourth-pillar-of-zero-trust/2026-01-06T14:30:05.000Z https://blog.andykemp.com/techblogtheme-the-ultimate-plugin-free-wordpress-theme-for-tech-bloggers/2026-02-01T13:11:32.000Z https://blog.andykemp.com/welcome-to-andy-kemp-consulting/2026-04-09T13:07:16.000Z https://blog.andykemp.com/microsoft-365-tenant-audit-sample-enterprise-report/2026-04-10T17:29:58.000Z https://blog.andykemp.com/windows-365-for-secure-work-the-device-experience-nobody-talks-about/2026-05-13T13:45:30.000Z https://blog.andykemp.com/windows-hello-for-business-is-more-than-a-login-method/2026-06-01T10:49:11.000Z https://blog.andykemp.com/behind-the-build-the-story-behind-my-new-website/2026-07-20T20:12:00.000Z https://blog.andykemp.com/microsoft-global-secure-access-more-than-just-a-vpn-replacement/2026-08-14T10:45:00.000Z https://blog.andykemp.com/from-a-blog-series-to-a-book-the-unexpected-journey-of-the-privileged-path/2026-07-28T13:15:00.000Z https://blog.andykemp.com/passkeys-the-hardest-part-nobody-talks-about/2026-07-28T09:36:00.000Z https://blog.andykemp.com/from-tier-0-to-trust-levels-rethinking-privileged-access-for-the-cloud-era/2026-07-29T16:54:00.000Z https://blog.andykemp.com/part-1-what-is-a-privileged-access-workstation/2026-08-04T20:55:00.000Z https://blog.andykemp.com/privileged-access-workstations-introduction/2026-08-04T20:09:00.000Z https://blog.andykemp.com/why-stepping-away-from-your-desk-might-be-the-most-productive-thing-you-do/2026-08-04T11:11:00.000Z https://blog.andykemp.com/when-do-you-need-a-privileged-access-workstation/2026-08-05T10:39:00.000Z https://blog.andykemp.com/building-a-modern-privileged-access-strategy/2026-08-06T20:50:00.000Z https://blog.andykemp.com/choosing-the-right-administrative-environment/2026-08-06T18:45:00.000Z https://blog.andykemp.com/hardening-a-modern-privileged-access-workstation/2026-08-06T20:40:00.000Z https://blog.andykemp.com/operating-and-maintaining-a-privileged-access-workstation/2026-08-06T20:41:00.000Z https://blog.andykemp.com/physical-privileged-access-workstations/2026-08-06T14:59:00.000Z https://blog.andykemp.com/virtual-privileged-access-workstations/2026-08-06T17:12:00.000Z https://blog.andykemp.com/authentication-assurance-introduction/2026-08-08T00:33:00.000Z https://blog.andykemp.com/not-all-passkeys-provide-the-same-level-of-assurance/2026-08-11T18:11:00.000Z https://blog.andykemp.com/the-evolution-of-authentication/2026-08-11T12:43:00.000Z https://blog.andykemp.com/understanding-modern-passkeys/2026-08-11T13:32:00.000Z https://blog.andykemp.com/why-authentication-assurance-matters/2026-08-11T12:07:00.000Z https://blog.andykemp.com/authentication-strengths-in-microsoft-entra/2026-08-13T10:23:00.000Z https://blog.andykemp.com/bringing-authentication-assurance-together/2026-08-18T08:00:00.000Z https://blog.andykemp.com/building-high-assurance-administrative-accounts/2026-08-17T09:41:00.000Z https://blog.andykemp.com/choosing-the-right-authentication-for-each-trust-level/2026-08-13T10:07:00.000Z https://blog.andykemp.com/giving-saas-applications-a-fixed-egress-ip-with-microsoft-entra-private-access/2026-08-14T11:01:00.000Z https://blog.andykemp.com/temporary-access-pass-and-secure-onboarding/2026-08-13T12:49:00.000Z https://blog.andykemp.com/replacing-traditional-vpn-access-with-microsoft-entra-private-access/2026-08-19T08:00:00.000Z https://blog.andykemp.com/from-kempsoft-to-vibe-coding/2026-08-20T09:59:00.000Z https://blog.andykemp.com/i-just-need-the-app-to-send-an-email/2026-08-21T08:00:00.000Z https://blog.andykemp.com/microsoft-global-secure-access-on-macos-extending-identity-driven-access-beyond-windows/2026-08-24T08:00:00.000Z https://blog.andykemp.com/global-secure-access-on-mobile-devices/2026-08-25T13:08:00.000Z https://blog.andykemp.com/entra-internet-access-moving-web-security-to-the-identity-layer/2026-08-26T20:21:00.000Z https://blog.andykemp.com/webauthn-redirection-windows-app-macos/2026-08-26T10:00:00.000Z https://blog.andykemp.com/ews-retirement-the-exchange-deadline-you-cannot-keep-ignoring/2026-08-31T08:48:00.000Z https://blog.andykemp.com/migrating-from-a-traditional-secure-web-gateway-to-global-secure-access/2026-08-31T09:22:00.000Z https://blog.andykemp.com/what-if-other-people-could-use-it/2026-09-04T13:36:00.000Z https://blog.andykemp.com/windows-365-link-revisited-i-gave-it-another-chance/2026-09-09T18:16:00.000Z https://blog.andykemp.com/mac-or-windows-i-use-both-and-that-s-kind-of-the-point/2026-09-11T12:50:00.000Z https://blog.andykemp.com/global-secure-access-alongside-your-existing-security-stack/2026-09-16T16:15:00.000Z https://blog.andykemp.com/designing-entra-private-access-properly-don-t-rebuild-your-vpn-in-the-cloud/2026-09-21T19:18:00.000Z https://blog.andykemp.com/global-secure-access-and-privileged-access-an-architecture-i-want-to-test/2026-09-22T15:11:00.000Z https://blog.andykemp.com/what-i-learned-deploying-global-secure-access-for-real/2026-09-22T15:24:00.000Z https://blog.andykemp.com/windows-laps-more-than-password-rotation/2026-09-28T12:57:00.000Z https://blog.andykemp.com/our-conditional-access-policy-says-require-mfa-what-does-that-actually-mean/2026-09-28T13:58:00.000Z https://blog.andykemp.com/windows-laps-on-windows-11-designing-local-admin-properly/2026-09-30T09:29:00.000Z https://blog.andykemp.com/i-m-a-microsoft-mvp-that-still-feels-strange-to-say/2026-10-04T14:52:00.000Z https://blog.andykemp.com/windows-laps-intune-or-group-policy-for-windows-11/2026-10-04T13:01:00.000Z https://blog.andykemp.com/finding-my-place-reflections-after-scottish-summit/2026-10-05T11:53:00.000Z https://blog.andykemp.com/windows-laps-on-windows-server-same-technology-different-design/2026-10-06T08:00:00.000Z https://blog.andykemp.com/operating-windows-laps-deployment-isn-t-the-finish-line/2026-10-14T17:26:00.000Z https://blog.andykemp.com/deploying-the-global-secure-access-client-with-intune/2026-10-13T13:33:00.000Z https://blog.andykemp.com/i-just-needed-my-battery-to-last/2026-10-14T15:50:00.000Z https://blog.andykemp.com/understanding-traffic-forwarding-and-advanced-diagnostics/2026-10-15T08:00:00.000Z https://blog.andykemp.com/source-ip-anchoring-with-private-network-connectors/2026-10-19T16:56:00.000Z https://blog.andykemp.com/tls-inspection-and-custom-block-pages/2026-10-29T12:09:00.000Z https://blog.andykemp.com/exchange-certificates-urls-and-domains-without-the-homework/2026-11-04T22:30:00.000Z https://blog.andykemp.com/two-exchange-servers-one-ip-address/2026-11-05T16:40:00.000Z https://blog.andykemp.com/win11-image-prep-from-powershell-script-to-windows-app/2026-11-05T09:00:00.000Z https://blog.andykemp.com/scan-to-save-a-digital-business-card-people-save-in-one-tap/2026-11-06T17:00:00.000Z