Practical stories and lessons from building zero trust systems.https://zerotruststories.com/https://zerotruststories.com/how-to-hide-recommendations-in-windows-11-start-menu/https://zerotruststories.com/how-to-hide-recommendations-in-windows-11-start-menu/Want to hide recommendations Windows 11 shows in the Start menu? Follow these quick steps to remove recent files, apps, and suggested items.Thu, 09 Jul 2026 00:00:00 GMThttps://zerotruststories.com/how-to-use-microsoft-intune-enhanced-app-inventory-for-advanced-insights/https://zerotruststories.com/how-to-use-microsoft-intune-enhanced-app-inventory-for-advanced-insights/Learn how Microsoft Intune enhanced app inventory provides deeper Windows app insights, install scope, registry data, and multi-user support.Thu, 07 May 2026 00:00:00 GMThttps://zerotruststories.com/pimtool/https://zerotruststories.com/pimtool/PIMTool streamlines Azure AD PIM with multi‑role activation and clear visibility for admins.Fri, 01 May 2026 00:00:00 GMThttps://zerotruststories.com/monitor-intune-apple-token-expiration-with-logic-app/https://zerotruststories.com/monitor-intune-apple-token-expiration-with-logic-app/Monitor Apple token expiration in Microsoft Intune using Azure Logic Apps. Get proactive alerts to avoid MDM, VPP, and DEP outages.Tue, 21 Apr 2026 00:00:00 GMThttps://zerotruststories.com/assign-remote-tenant-groups-to-azure-roles/https://zerotruststories.com/assign-remote-tenant-groups-to-azure-roles/Learn how to securely assign remote tenant groups to Azure roles for cross-tenant access, aligned with Zero Trust and least-privilege best practices.Fri, 17 Apr 2026 00:00:00 GMThttps://zerotruststories.com/how-to-use-custom-compliance-policies-in-microsoft-intune/https://zerotruststories.com/how-to-use-custom-compliance-policies-in-microsoft-intune/Learn how to create and deploy custom compliance policies in Microsoft Intune to strengthen device security and support your Zero Trust strategy.Tue, 14 Apr 2026 00:00:00 GMThttps://zerotruststories.com/what-happens-when-you-disable-security-defaults/https://zerotruststories.com/what-happens-when-you-disable-security-defaults/Disabling security defaults in Microsoft Entra ID comes with hidden risks. This article explains what actually happens and why it matters.Thu, 09 Apr 2026 00:00:00 GMThttps://zerotruststories.com/app-permission-info/https://zerotruststories.com/app-permission-info/Reports assigned the assigned permission per app in the tenant in a user-friendly wayFri, 03 Apr 2026 00:00:00 GMThttps://zerotruststories.com/entra-backup-and-recovery/https://zerotruststories.com/entra-backup-and-recovery/Microsoft Entra backup and recovery explained: protect identities, prevent data loss, and close critical recovery gaps beyond native Microsoft capabilities.Fri, 27 Mar 2026 00:00:00 GMThttps://zerotruststories.com/app-protection-policies-for-microsoft-edge/https://zerotruststories.com/app-protection-policies-for-microsoft-edge/Learn how App Protection Policies secure Microsoft Edge on managed and unmanaged devices - without MDM and without compromising user experience.Mon, 09 Mar 2026 00:00:00 GMThttps://zerotruststories.com/tenant-info-powershell-module/https://zerotruststories.com/tenant-info-powershell-module/I struggled to get a whole sight about some tenants I managed, so I thought I would vibe code a bit :) What can it do? It gets me a plain oversight over all users, mailboxes etc. but just have a look at yourself (the HTML Report will be generated automatically, there also an optionFri, 27 Feb 2026 00:00:00 GMThttps://zerotruststories.com/intune-collect-diagnostics-deep-dive-collect-custom-logs-easily/https://zerotruststories.com/intune-collect-diagnostics-deep-dive-collect-custom-logs-easily/Learn how to use Microsoft Intune Collect Diagnostics to retrieve system and custom logs remotely. Step-by-step guide with advanced tips for troubleshooting.Thu, 19 Feb 2026 00:00:00 GMThttps://zerotruststories.com/fix-robopack-msix-deployment-issues/https://zerotruststories.com/fix-robopack-msix-deployment-issues/Fix Robopack MSIX deployment issues with this practical guide. Learn the root causes, required settings, and step-by-step solutions for successful installs.Tue, 17 Feb 2026 00:00:00 GMThttps://zerotruststories.com/get-rid-of-passwords-with-synced-passkeys-in-entra-id/https://zerotruststories.com/get-rid-of-passwords-with-synced-passkeys-in-entra-id/As the time of writing, synced passkeys are still in public preview (December 2025). Introduction I recently switched to a new iPhone and was REALLY annoyed, that my Authenticator App backup went south... Time to try synced passkeys. I use Bitwarden as my password manager but any other should be good also if it's supporting Learn how synced passkeys work in Entra ID, why they matter for passwordless security, and how they improve authentication across devices.Sun, 28 Dec 2025 00:00:00 GMThttps://zerotruststories.com/remote-device-management-herausforderungen-losungen-mit-intune/https://zerotruststories.com/remote-device-management-herausforderungen-losungen-mit-intune/Geräte-Kompatibilität und Plattform-Vielfalt 🔄Datenschutz und Compliance 🔒Benutzerakzeptanz und Schulung 👩‍💻Skalierbarkeit & Performance ⚙️Fehlerbehebung & Support 🛠️ Remote Device Management spielt in Zeiten hybrider und verteilter Arbeitsmodelle eine immer wichtigere Rolle. Mit Microsoft Intune steht Unternehmen eine leistungsstarke Lösung zur Verfügung, um mobile Endgeräte und Desktops zentral zu verwalten und abzusichern. Doch gerade die Implementierung und der Betrieb von Intune stellenMon, 26 May 2025 00:00:00 GMThttps://zerotruststories.com/windows-gerate-manuell-in-autopilot-registrieren/https://zerotruststories.com/windows-gerate-manuell-in-autopilot-registrieren/Lerne, wie du Windows-Geräte manuell in Autopilot registrieren kannst – schnell, einfach und ohne OEM-Magie.Mon, 12 May 2025 00:00:00 GMT