Most organisations block OneDrive syncing to non-corporate devices via the SharePoint admin center, using a policy based on the domain GUID. That works for domain-joined PCs, but it isn’t supported on non-domain-joined (e.g., AAD-joined) corporate or workplace-joined devices. Microsoft suggests using a Conditional Access policy that targets Microsoft

Azure Stack HCI - or Azure Stack Local, as its now called - has been quite the ride. Yesterday we went through what should have been a fairly routine task: upgrading the firmware on our physical Dell nodes across all stacks. Now, you’d think that with Dell and Microsoft

Many of us use Microsoft Entra Connect Sync in our environments to synchronize on-premise objects to Entra. Not long ago, Microsoft introduced Cloud Sync, which offers some different services. They even have a cool comparison tool to help you decide which one you need. But what if you need services

At my current employer, we use Microsoft Intune to manage and white‑glove-deploy our Windows endpoints in a hybrid‑join environment. Until I joined, they relied on Chocolatey to deploy and update (some) applications. With the release and maturing of WinGet some time ago, it’s now a good replacement

It’s actually pretty easy to set up “unsupported” AVD configurations for Azure Stack Local (formerly Azure Stack HCI). Suppose you have two HCI clusters: one has the resource bridge, the other doesn’t. In that case, you can’t create AVD VM templates on the cluster without the bridge,

I hit a small hiccup when trying to use vTPM in our guest VMs on Azure Stack HCI, even though the nodes support TPM 2.0. Creating a VM and enabling TPM works, but after a live or quick migration the destination nodes can’t use the VM's

Deploying external certificates to multple clusters with many roles can be a pain, especially when the Windows Domain won't listen. With this script you can deploy them to any Windows Server host (2016+ && WinRM enabled on a secure management subnet). With per use prompt <# DeployWildcard.