Azure / Entra / Intune
Administration and troubleshooting Azure, Entra ID and Intune: MFA, Conditional Access, devices, synchronization, compliance, Autopilot, RBAC and Azure network
Azure / Entra / Intune Center
Azure, Entra ID and Intune diagnostics for sign-ins, Conditional Access, device compliance, Graph, licensing, networking and RBAC.
ResourceCybersecurity test
Evaluate your cybersecurity level with the BOAI test and identify priority vigilance points in your computer environment
ResourceFortiGate Center
FortiGate Diagnostic Center: VPN, IPsec, SD-WAN, routing, firewall, NAT, DNS, HA, interfaces and FortiOS commands
ResourceVPN impossible to connect
Diagnose a VPN that cannot be connected: Internet access, DNS, authentication, certificates, ports, and routing
Knowledge hubHome
Free tools, procedures, diagnostics, scripts, dictionary and practical resources for IT technicians, system administrators and SMEs
IT dictionaryEntra Connect
Entra Connect is a concept or mechanism used in microsoft 365 to synchronize local Active Directory identities to Microsoft Entra ID
IT dictionaryEntra ID
Microsoft Cloud Identity and Access Management Service, formerly Azure Active Directory.
IT dictionaryEntra Named Location
A definition Entra ID representing a geographical area or IP-trusted ranges.
IT dictionaryGuest User Entra ID
An external account that is invited to access an organization's resources.
IT dictionaryEntra Sign-in Logs
Logs of attempts to connect to Entra ID.
IT dictionaryMicrosoft Entra Cloud Sync
a cloud-first identity synchronization service that uses lightweight on-premises agents to provision Active Directory identities into Microsoft Entra ID
ResourceHow to troubleshoot AADSTS53003 in Microsoft Entra ID
Identify the exact Conditional Access policy blocking a sign-in without creating a broad exclusion.
ResourceHow to diagnose a noncompliant Intune device
This BOAI guide provides a structured method for diagnosing an intune device that is not compliant without multiplying unnecessary changes
ResourceHow to analyze a Conditional Access policy
This OOAI guide provides a structured method for analyzing an access policy without multiplying unnecessary changes
ResourceHow to decode a JWT locally without exposing the token
Read a JWT header and payload for troubleshooting while remembering that decoding never validates the signature.
ResourceActive Directory vs Entra ID: What difference?
Active Directory Domain Services manages local Windows domains. Microsoft Entra ID is a cloud identity service for applications, Microsoft
ResourceAADSTS53003 — Access blocked by Conditional Access
The sign-in is blocked by a Conditional Access policy.
ResourceGPO vs Intune: what difference?
GPOs apply settings to users and computers of an Active Directory domain. Intune manages devices and applications from the
TroubleshootingMicrosoft 365 MFA buckle
The user is constantly re-demanded to authenticate or validate MFA
ResourceMFA vs 2FA: what difference?
2FA means two-factor authentication. MFA means multifactor authentication and can use two or more factors
TroubleshootingConditional Access blocks an administrator
A conditional access policy prevents an admin account from logging in
ProcedureCreate a pilot Conditional Access policy
Controlled procedure to create a pilot policy
ProcedureDeploy Windows Autopilot
Prepare a traditional Windows Autopilot pilot, register hardware correctly and verify profile assignment, Entra join, Intune enrollment and required apps.
ProcedureDeploy an Intune compliance policy
Controlled procedure for deploying an intune compliance policy
ProcedureOffboard an Intune device
Controlled procedure to overboard an intune device
ProcedureDeploy BitLocker with key backup
Controlled procedure to deploy bitlocker with key backup
ProcedureSecure administrator access
Set up nominal accounts, MFA, separation of usage and procedures, emergency
ResourceMicrosoft 365 — memo administration
Microsoft 365 reference for Entra sign-ins, Graph, Exchange Online, message tracing, Teams, Intune and device checks.
ResourceDNS — memo form
DNS record types, resolver checks, delegation, caching and commands for diagnosing name resolution.
ResourceBackup & VSS — Cheat sheet
Backup verification, VSS writers and providers, recovery objectives, backup chains and restore testing.
Knowledge hubMicrosoft 365
Microsoft 365 administration and troubleshooting: Entra ID, Exchange Online, Intune, One (2005), SharePoint, MFA and courier
Knowledge hubActive Directory
Resources for Active Directory: Domain Controllers, DNS AD, GPO, Kerberos, replication, accounts and certificates
Knowledge hubWindows 11 / Endpoint
Windows 11 troubleshooting: slow, Windows Update, BSOD, boot, profiles, BitLocker, drivers, network, One-In-Nation, and system repair
Knowledge hubCybersecurity
Defensive resources for phishing, ransomware, compromised accounts, MFA, hardening,19th, incidents and protection of backups