Articles In Support

By Ed Bratter, Posted in Infrastructure, Security, Support

You wake up one morning, grab your coffee, and sign in to Microsoft Outlook (or any other app secured by Microsoft Entra ID). You enter your username and password, approve the usual MFA prompt, and expect to see your inbox. Instead, you get an unfamiliar screen: "Let's keep your account secure." If you're seeing this, keep reading to learn what's going on and what to do about it. For many organizations, this prompt started appearing in September 2026. It's the first phase of Microsoft's plan to retire S... read more.

• October 15, 2026

By Ken Phelan, Posted in Infrastructure, Security, Support

A few weeks ago I wrote a post called "It's Not the Model." The short version: frontier AI is finding vulnerabilities at industrial scale, the capability will land on every platform eventually, and the scarce resource isn't the model — it's the ability to absorb what the model finds. The reactions came in two flavors. Half the room heard "the sky is falling." The other half said "the sky was always falling, why are we talking about it now?" Both halves are wrong, and it's worth being precise about w... read more.

• September 03, 2026

By Ed Bratter, Posted in Infrastructure, Support

Microsoft Autopilot is a cloud-based solution that is used to provision new Windows devices and provides an alternative to the older imaging technology. When coupled with Intune, Autopilot enables vendors to drop-ship new machines directly to end users. The user then initiates an out-of-box provisioning experience by powering on the device, connecting it to the network, and signing in with their Entra ID credentials. Autopilot facilitates the build and performs an Entra join, or hybrid join, and enables an... read more.

• July 27, 2026

By Ed Bratter, Posted in Infrastructure, Support

Modern mobile device management solutions like Microsoft Intune are becoming more popular because they allow people to use their personal iPhones or iPads to access organizational data while giving the organization a controlled way to protect its assets on those devices. For bring-your-own-device scenarios, the goal is not to take over the user’s phone. Instead, Intune helps create a practical balance: users keep personal privacy and familiar device ownership, while IT can apply the right level of man... read more.

• July 23, 2026

By Steve Gold, Posted in Security, Support

Written with contributions from Bert Amodol and Jason Santamaria.  Turning every conversation into a word salad of acronyms wasn’t bad enough. Now, we’re taking words that have one meaning and assigning a different meaning. This must stop! First, it was “agent.” This always meant a piece of software that was installed on a computer. Now it means an autonomous system that can take goals, plan steps and carry out actions across multiple systems. Second is “Governance.&rdqu... read more.

• June 05, 2026

By Kamran Ahmad, Posted in Infrastructure, Support, Virtualization

Recently, I was upgrading a customer's StoreFront deployment from version 1912 to version 2402 LTSR CU1 on a Windows Server 2019. During the process, I encountered an issue where I could not uninstall StoreFront on the second server in the StoreFront server group. The following error message was displayed: I tried the steps in this Citrix article, which had a similar error message, but that did not work. After some digging, I realized Citrix services were still present. I followed the steps below to r... read more.

• January 03, 2025

By Ed Bratter, Posted in Infrastructure, Support

Many look forward to the Fall when Apple releases its newest version of iOS with the new features and toys it presents. One of this year’s improvements offers a vastly simplified process for enrolling personal (BYOD) devices into a mobile device management (MDM) solution such as Intune. The current method requires installing both the Company Portal and the Microsoft Authenticator app, and requires a dance through a maze of screens and jumping between applications to successfully enroll a dev... read more.

• November 04, 2024

By Kamran Ahmad, Posted in Infrastructure, Support

This blog contains contributions from Technical Architect, Kamran Ahmad, and System Engineer Level 1, Doug Lampone. We recently assisted a client with a Microsoft OneDrive issue where users were not automatically signed into OneDrive through Azure RemoteApp or Azure Virtual Desktop. The client's resources were hosted on Windows 11 version 22H2 running OneDrive 24.166.0818.0003. To come up with a solution to this problem, we worked with Microsoft support and captured logs. We found the follow... read more.

• October 07, 2024

By Ed Bratter, Posted in Infrastructure, Support

If you are responsible for creating Entra Conditional Access policies, you may have noticed that Microsoft has put the “Require approved client app” control on the soon-to-be-extinct list. Instead, the newer “Require app protection policy” control should be used. Microsoft stated that the older control will stop being enforced in March 2026, so it will be as if it does not exist (more information can be found here: Migrate approved client app to application protection policy in Co... read more.

• July 24, 2024

By Josue Molina, Posted in Infrastructure, Support, Virtualization

I recently stumbled upon a Citrix Windows KMS license activation bug that I thought would be good to share along with a workaround. The bug appeared after I created machines from a Windows Server 2022 Datacenter Azure Edition virtual machine template using Citrix Machine Creation Services (MCS). The Windows Server 2022 Datacenter Azure Edition version was 21H2 (OS Build 20348.2322). The machines are created just fine, but when trying to log in to a virtual desktop, I noticed the “Activate Windows&rdq... read more.

• July 23, 2024