Microsoft Cloud / Identity

Azure / Entra / Intune

Azure, Entra ID and Intune administration and troubleshooting for MFA, Conditional Access, devices, synchronization, compliance, Autopilot, RBAC and Azure networking.

Entra IDIntuneMFAConditional AccessAutopilotGraphAzure VMRBAC

4BAOI modules

22selected resources

6definitions

Tools & diagnostics

Direct access to the most relevant BAOI modules for this technology.

Troubleshooting Azure / Entra / Intune Center

Diagnostic Azure, Entra ID et Intune : authentification, MFA, Conditional Access, appareils, Entra Connect, conformité, Autopilot, applications, RBAC et network Azure.

Open → Resource Cybersecurity test

Évaluez rapidement les protections essentielles de votre environnement informatique.

Open → Troubleshooting FortiGate Center

See also:. ping from a FortiGate. See also:. FortiGate Central NAT.

Open → Troubleshooting VPN impossible to connect

Diagnostiquez un VPN qui ne se connecte pas : accès Internet, DNS, identifiants ou MFA, certificats, ports, pare-feu et paramètres du tunnel.

Open →

Dictionary

Essential concepts related to Azure / Entra / Intune.

View more →

Dictionary Entra Connect

Entra Connect is a concept or mechanism used in microsoft 365 to synchronize local Active Directory identities to Microsoft Entra ID.

View → Dictionary Entra ID

Microsoft Cloud Identity and Access Management Service, formerly Azure Active Directory.

View → Dictionary Guest User Entra ID

An external account that is invited to access an organization's resources.

View → Dictionary Entra Named Location

A definition Entra ID representing a geographical area or IP-trusted ranges.

View → Dictionary Entra Sign-in Logs

Logs of attempts to connect to Entra ID.

View → Dictionary Service Principal Azure

The tenant-local identity that represents an application, service, or automation to Microsoft Entra and Azure.

View →

Practical guides

Step-by-step tutorials and procedures.

View more →

Guide How to troubleshoot AADSTS53003 in Microsoft Entra ID

Identify the exact Conditional Access policy blocking a sign-in without creating a broad exclusion.

View → Guide How to diagnose a noncompliant Intune device

This BAOI guide provides a structured method for diagnosing an intune device that is not compliant without multiplying unnecessary changes.

View → Guide How to analyze a Conditional Access policy

This BAOI guide provides a structured method for analyzing an access policy without multiplying unnecessary changes.

View →

Troubleshooting

Related failures, errors and diagnostics.

View more →

Resource Active Directory vs Entra ID: What difference?

Active Directory Domain Services manages local Windows domains. Microsoft Entra ID is a cloud identity service for applications, Microsoft 365 and modern a…

View → Error code AADSTS53003 — Access blocked by Conditional Access

The sign-in is blocked by a Conditional Access policy.

View → Resource MFA vs 2FA: what difference?

2FA means two-factor authentication. MFA means multifactor authentication and can use two or more factors.

View → Resource GPO vs Intune: what difference?

GPOs apply settings to users and computers of an Active Directory domain. Intune manages devices and applications from the cloud with modern profiles and p…

View → Troubleshooting Microsoft 365 MFA buckle

The user is constantly re-demanded to authenticate or validate MFA.

View → Troubleshooting Conditional Access blocks an administrator

A conditional access policy prevents an admin account from logging in.

View →

Field procedures

Reusable intervention methods.

View more →

Procedure Deploy Windows Autopilot

Deploy Windows Autopilot for cloud-driven Windows provisioning by registering devices correctly, assigning an OOBE profile to a pilot group, validating Ent…

View → Procedure Deploy an Intune compliance policy

Create a Windows compliance policy in Microsoft Intune, define measurable criteria, pilot non-compliance actions and then use compliance status in Conditio…

View → Procedure Create a pilot Conditional Access policy

Create a Microsoft Entra Conditional Access strategy in report-only mode, exclude emergency accounts, target a driver group, analyze log-in logs and gradua…

View → Procedure Offboard an Intune device

Offboard an Intune-managed device by choosing Retire, Delete, Wipe, or another action according to ownership and scenario, preserving recovery information,…

View → Procedure Deploy BitLocker with key backup

Deploy BitLocker across Windows devices only after recovery information is centrally backed up to Active Directory or Microsoft Entra ID, using a pilot gro…

View → Procedure Respond to a suspected compromised Microsoft 365 account

Contain a suspected compromised Microsoft 365 account by collecting sign-in evidence, blocking access, revoking sessions, resetting credentials, reviewing…

View →

Cheat sheets

Quick references for operations.

View more →

Cheat sheet Microsoft 365 — memo administration

Microsoft 365 administration reference for Entra identity, Exchange Online, SharePoint/OneDrive, Teams, Intune, PowerShell, mail traces and security checks…

View →

Related technologies

Continue exploring with complementary topics.

Technology Microsoft 365

Microsoft 365 administration and troubleshooting for Entra ID, Exchange Online, Intune, OneDrive, SharePoint, MFA and email.

View → Technology Active Directory

Active Directory resources for domain controllers, AD DNS, GPO, Kerberos, replication, accounts and certificates.

View → Technology Windows 11 / Endpoint

Windows 11 troubleshooting for performance, Windows Update, BSOD, startup, profiles, BitLocker, drivers, networking, OneDrive and system repair.

View → Technology Cybersecurity

Defensive resources for phishing, ransomware, compromised accounts, MFA, hardening, firewalls, incidents and backup protection.

View →