Category: Uncategorized
-
Edge SSO, Work or School Accounts, and Subscription Activation (Enterprise OS)
How We Got Here: Sigh. Enterprise Activation is a topic I have now spent the past year writing about…April 2024, Enterprise Activation Broken by Windows Update.Retired article: September 2024, Work or School Accounts Break Enterprise Activation Part 1Retired article: November 2024, Work or School Accounts Break Enterprise Activation Part 2Retired article: December 2024, Work or…
-
Retired: Detecting & Automatically Removing Secondary “Work Or School” Accounts: Part 3
This Article Has Been Retired! Warning: I have chosen to “retire” this article. As time has marched on, and more information has been revealed, the blogs in this series have slowly become less and less up-to-date, and frankly, more and more of the information I was told as gospel has proved flawed or muddied. As…
-
PowerShell DCR Log Analytics for Windows Endpoints Part 1.2: Admin Inventory Overview
Introduction: Following my initial article in the series, this article will cover an overview of the Admin Inventory component of this collector / workbook with a primary focus on what this tool does for you and how the data is visualized in the workbooks. In this section we will cover… Prior Knowledge Requirement: I don’t want to…
-
PowerShell DCR Log Analytics for Windows Endpoints Part 1.1: Application Inventory Overview
Introduction: Following my initial article in the series, this article will cover an overview of the Application Inventory component of this collector / workbook with a primary focus on what this tool does for you and how the data is visualized in the workbooks. In this section we will cover… Prior Knowledge Requirement: I don’t…
-
PowerShell DCR Log Analytics: Part 2.9 – Modifying the Collection Script to Ingest New Data
In the last part of this series, we took a look at how the collection script works. In this part, we will look at how you can modify it to collect a new piece of data. While I would prefer you to simply follow along, the final result script created in this guide will be SampleCollectionScriptV4.ps1 which…
-
Auditing Other Logon/Logoff Events for Log Analytics
Some of my up-and-coming PowerShell based Log Analytics guides make use of Windows Event logs for data gathering. While the Event Log has a ton of useful information by default, some events only log when enabled via additional policy. One such policy is the Auditing of Other Logon/Logoff Events. This policy enables a multitude of…
Azure to the Max 