Dustin Gullett

Windows 365 Cloud Apps. Give them the biscuit, not the kitchen — Blog My wife and I recently took a trip to Savannah, Georgia, and let me tell you, that city knows how to do food. We stumbled into this little restaurant, and…

Stop handing out the whole kitchen when users only need a biscuit.
Windows 365 Cloud Apps lets you publish individual apps from a Cloud PC. No full desktop required.

zerototrust.tech/windows-365-...

#Windows365 #Intune #CloudPC #MicrosoftSecurity #WindowsApp

Prompt Injection is the New Phishing.... Here's how GSA Can Help — Blog If your org is starting to rely on tools like ChatGPT, Copilot, Claude, or Gemini, you are probably already thinking about data leakage. However, there is another problem that shows…

Prompt injection is social engineering for GenAI.

It’s not malware. It’s wording. “Ignore all previous instructions” style prompts can push models outside guardrails and create real risk for the enterprise.

New blog: zerototrust.tech/prompt-injec...

#Microsecurity #Entra #GSA #Intune

Kiosk Chaos to Calm. Building Multi-App Assigned Access with Intune — Blog Lock down kiosks. Troubleshoot blocks fast.

Happy New Year!
New blog is live: I break down Intune multi-app kiosks (Assigned Access). Schemas, AllowedApps, StartPins, plus how to find what got blocked in AppLocker logs.

zerototrust.tech/kiosk-chaos-...

#Intune #EndpointManagement #MicrosoftSecurity

AI Agents Are Swarming Your Tenant. How Conditional Access for Agent ID Keeps Them in Check — Blog Taming AI agents with Entra Conditional Access guardrails

Hopefully you are out of your turkey coma. 🦃

AI agents are swarming your tenant, but who is securing them?

New blog. “Who Let the Agents Out? Conditional Access for Agent ID to the Rescue”

Read here - zerototrust.tech/ai-agents-ar...

#MicrosoftSecurity #SecurityCopilot #Entra #Intune

Global Secure Access and Sentinel Integration.... and brisket? — Blog Connect GSA to Sentinel: see more, guess less.

Good pairings elevate everything: Global Secure Access + Microsoft Sentinel.

Unified context. Sharper detection. Faster action (SIEM + SOAR).

I break it down here: zerototrust.tech/global-secur...
#MicrosoftSentinel #EntraID #MicrosoftSecurity #SIEM #SOAR #MVPBuzz

Guardrails for the Internet Lane: Rolling Out GSA Threat Intelligence — Blog Block risky clicks: enable Entra GSA Threat Intelligence.

I've been MIA. My son shipped to Marine boot camp and my weekends = nonstop soccer ⚽️
New blog: how to set up Entra Global Secure Access Threat Intelligence. Block risky clicks without slowing users down.

zerototrust.tech/guardrails-f...

#MicrosoftEntra #MicrosoftSecurity #GlobalSecureAccess

Come Fly the Friendly Skies - Edge Password Protection — Blog Edge password protection setup

Tired of reused passwords and forgotten logins?
Edge has your back if you know where to flip the switches.
- Stronger passwords
- Reuse warnings
- Fewer lockouts

zerototrust.tech/come-fly-the...

#MicrosoftEdge #Intune #MicrosoftSecurity

Private Access for Domain Controllers is finally here and it’s awesome!

Say goodbye to lateral movement and hello to Conditional Access checks at the Kerberos level.

Blog: zerototrust.tech/finally-priv...

#EntraID #MicrosoftSecurity #MVPBuzz #GSA

Microsoft Connected Cache is now generally available - Windows IT Pro Blog Microsoft Connected Cache for Enterprise and Education helps organizations save bandwidth during Windows 11 upgrades, Autopilot provisioning, Intune app...

Exciting news! Microsoft Connected Cache is now Generally Available!

Boost your bandwidth, speed up Windows updates, and reduce internet traffic.

Announcement:
bit.ly/4f366Lj

My setup guides: Part 1: zerototrust.tech/boost-your-b...
Part 2: zerototrust.tech/intune-deliv...
#Intune

My #MVP award arrived this week! I still can't believe it. I never thought this would happen!
Life's wild right now (thanks, ⚽️ season), but I've got some exciting blogs almost ready to share.
Big thanks to everyone who supported me along the way.

#mvpbuzz #microsoftsecurity

Flipping Intune Switches - The Secret Sauce to Smarter Endpoint Security — Blog Simply device compliance with MDE.

Ever felt a little nervous flipping Intune switches? Relax it's easier (and smarter) than you think! Discover how two simple toggles boost your endpoint security and keep compliance stress-free. #MicrosoftIntune #EndpointSecurity

zerototrust.tech/flipping-int...

Congratulations to @dugullett.bsky.social on becoming a Microsoft MVP! 🥳

I learned about his IT journey, which began with mowing lawns—You know what they say, when life gives you lemon 🍋!

New episode of Diary of a SysAdmin drops Monday, July 7th! 📅

You don't want to miss this one!

Deny, Deny, Deny! A Look at EPM’s Newest Superpower - Blog Intune EPM deny rules

🚫 Elevate This! EPM Now Has Deny Rules
Microsoft recently added Deny Rules to EPM giving us the power to block specific apps (by hash, version, or publisher) from being elevated.

Full breakdown here 👇
zerototrust.tech/deny-deny-de...

#MicrosoftIntune #EPM #Intune

Your Files Called... They want Personal Data Encryption - Blog Setting up Personal Data Encryption.

Your files just got a personal bodyguard - Windows Hello.
With Personal Data Encryption in Windows 11 24H2, even admins can’t snoop.
Learn how to lock it down with #Intune

zerototrust.tech/your-files-c...

#EndpointSecurity #ZeroTrust #MicrosoftSecurity

Block Party: Taking Down Risky Apps with Zero Effort - Blog Automatic risky app blocking

Part 2 is live! Learn how to auto-block risky (score 1-5) cloud apps in Defender for Cloud Apps, keep VIPs working via scoped exceptions, and trigger instant alerts on new Shadow IT.

zerototrust.tech/block-party-...

#MicrosoftSecurity #MCAS #MDE

Bringing Defender for Cloud Apps + Defender for Endpoint Together - Blog Integrate MDCA and MDE to automatically block risky cloud apps.

Shadow IT giving you grief?
Pair Defender for Endpoint with Defender for Cloud Apps and block risky cloud apps at the device level automatically.
- Fewer surprises.
- More visibility.

Blog: zerototrust.tech/bringing-def...
#CyberSecurity #MicrosoftDefender #ShadowIT #CloudSecurity

Intune Delivery Optimization & Connected Cache – Part 2 - Blog Delivery Optimization slashes bandwidth and eases troubleshooting.

One taco run feeds the office why not updates?
Delivery Optimization + Connected Cache = LAN-speed installs, WAN chill time.

Dig into Part 2 for traffic flow, bandwidth wins & spicy troubleshooting zerototrust.tech/intune-deliv...

#Intune #DeliveryOptimization #ConnectedCache

Boost Your Bandwidth: A Friendly Guide to Delivery Optimization and Connected Cache - Blog Optimize updates with Delivery Optimization and Connected Cache in Intune.

Tired of Windows updates crushing your bandwidth?
Learn how to set up Delivery Optimization + Connected Cache in Intune like a pro.
Less strain, faster updates, happy endpoints.

zerototrust.tech/boost-your-b...

#Intune #Windows #MicrosoftConnectedCache
#DeliveryOptimization

Tired of Proxy Problems? Meet Edge for Business Protection - Blog Edge + Defender = Faster, smarter cloud app session protection.

Tired of slow, glitchy cloud app sessions?
Edge for Business + Defender = seamless, in-browser protection. No proxy. No fuss.

Dive into the setup here: zerototrust.tech/tired-of-pro...

#MicrosoftSecurity #DefenderForCloudApps #EdgeForBusiness #EndpointManagement

@joeloveless.com I need to get my CM environment back up and running. I've been slacking. 😀

Intune Primary User Mix Up - Blog Script fixes primary‑user chaos in Intune

Tired of one tech “owning” every Intune device? Use my quick PowerShell cleanup script and put the right users back in charge fast!

zerototrust.tech/intune-prima...
#Intune #SysAdmin #PowerShell #EndpointManagement #MicrosoftGraph

Need-to-Know Entra Device Group Info? This Script Has Your Back - Blog Identify device users fast with this Intune-friendly PowerShell script.

Tired of mystery devices in your Entra groups?
This PowerShell script helps you quickly identify users tied to each device. Perfect for pilot rollouts.

#MicrosoftIntune #MicrosoftGraph #Intune

zerototrust.tech/need-to-know...

Saving the World from AI Action Figure Mayhem (With a Little Help from Entra Internet Access) - Blog Web filtering made fun and simple.

You won’t believe what your team is creating online...

Learn how to control the madness (and still spark innovation) with Entra Internet Access!

zerototrust.tech/saving-the-w...

#CyberSecurity #MicrosoftEntra #ZeroTrust

Save the Meatloaf! Why Protected Actions Matter in Entra - Blog Protected Actions save more than meatloaf.

Conditional Access meltdown.
Smoked meatloaf on the line.
Protected Actions to the rescue?
Turns out Entra can save more than just your tenant. New blog up now!

zerototrust.tech/save-the-mea...

#EntraID #ZeroTrust #MicrosoftSecurity

This Is Not Just Another LAPS Post…Promise! - Blog LAPS gets a cleanup upgrade

Not another LAPS post… no, seriously.

Learn how a sneaky new Intune setting shuts down lingering PowerShell sessions run with LAPS creds without scripts or hacks.

Fewer attack paths. Less duct tape. More peace of mind.

zerototrust.tech/this-is-not-...

#Intune #LAPS #MicrosoftSecurity

Access Reviews: Spring Cleaning for Your Entra Groups - Blog Spring clean your Entra groups with Access Reviews and keep access tidy.

Spring cleaning isn’t just for closets, it’s time to clean up your group memberships too!
Check out my latest post on using Microsoft Entra Access Reviews to keep your access tidy and secure:

zerototrust.tech/access-revie...

#MicrosoftEntra #AccessReviews #EntraID #IdentityGovernance

The Ultimate Microsoft 365 Upgrade You Didn’t Know You Already Paid For! (But Wait, There’s More!) - Blog It slices; it dices. Okay, not really. But the M365 Traffic Profile does speed up your apps and fend off cyber threats

Already have Entra ID P1 or P2? Then you're sitting on a hidden gem: the M365 Traffic Profile!

- Faster 365 apps
- Protection from AITM attacks
- Fewer IT headaches
But wait, there's more: zerototrust.tech/the-ultimate...

#Microsoft365 #EntraID #ModernWorkplace #MicrosoftSecurity

Entra Password Protection Smarter Security, Fewer Pop-Tarts - Blog Implement Entra Password Protection

Entra Password Protection is more than just blocking weak passwords, it’s a game changer for security. Learn how to protect your org from password spray attacks while keeping your snack stash safe.

Read now: zerototrust.tech/entra-passwo...

#MicrosoftSecurity #EntraID #Poptarts

GPO Migrations: A Love Story (Kind of) - Blog Simplifying GPO migrations to Intune.

Migrating GPOs to Intune? Don't bring the clutter!
1. Use Group Policy Analytics
2. Color-code decisions (Green = migrated, Red = left behind)

Make the move smarter, not harder! Full guide here:
zerototrust.tech/gpo-migratio...

#Intune #GPOMigration #ModernManagement

How to Tame Your M365 Baselines Without Losing Your Mind! - Blog Today, I wanted to dive into a topic that’s both intriguing and slightly nerdy M365 Security Baselines in Intune! When I posted about Windows 10 Baselines, my friend Thiago Beier…

Ever wondered about automating your M365 Security Baselines in Intune? I took the plunge here’s I create, export, and even handle some tricky JSONs!

Check out the full story and snag some handy JSON files here 👉 zerototrust.tech/how-to-tame-...

#Intune #MicrosoftSecurity #M365