Skip to content
T-Minus 365Try CloudCapsule

M365

Ditch the VPN: How Microsoft’s Global Secure Access is Changing Remote Connectivity

M365

2025 has been a rough year for VPNs. We’ve seen breaches at major vendors, clunky user experiences, and a constant flood of helpdesk tickets from frustrated users. Yet, many businesses still rely on VPNs because their legacy line-of-business applications and on-prem file shares haven’t made the move to the cloud. But what if you could […]

Vendor Integrations will Break with GDAP

M365

Checkout my latest article on this topic here!: Vendor Integrations Break with GDAP: The Fix! – (tminus365.com) Note This article assumes you have knowledge of GDAP (Granular Delegated Admin Privileges). If you do not, check out my article here: https://tminus365.com/granular-delegated-admin-privileges/ × Dismiss alert If you have a vendor that leverages an app registration or are […]

Leveraging PIM with GDAP

Azure AD

In my previous blog post, I talked about the major considerations when adding roles for GDAP relationships. In some instances, you may want to bump up security a step further and pair GDAP with PIM or privileged identity management. This would allow you to have just in time access to customer workloads for users in […]

New Commerce Contract Guidelines

M365

There has been a great deal of outreach around providing a boilerplate contract for New Commerce Experience. Liability continues to be the number one concern and there are many new considerations around licensing with NCE. In many cases you will be creating a Microsoft Addendum to your managed service agreement since we only have these […]

PSA Considerations for New Commerce Experience

M365

If you have been following along with my blog, you know I have been trying to pack in as much advice as I can around New Commerce Experience. There has been more outreach on recommendations for PSA so I want to provide an article specifically on that. Here are links to my other articles: NCE […]

Reducing New Commerce Liability

M365

I think we can all agree that one of the largest concerns of New Commerce with Microsoft is liability. In this article, I wanted to provide you a simple formula that will help you decide whether or not to put customers on annual or monthly contracts as well as some guidance for the legal contracts […]

Granular Delegated Admin Privileges

M365

Recently,  Microsoft has announced the introduction of granular delegated admin privileges, or GDAP, coming early 2022. These changes are coming to address supply chain attacks (like Nobelium). Traditionally, both distributors (Microsoft Indirect Providers/CSP Tier 1s) and MSPs (Indirect Resellers) have established Delegated Admin Privileges (DAP) with all downstream customers. This allows distributors to license customer […]

Disabling Self-Service Purchasing

M365

Microsoft has been allowing self-service purchase capabilities for end-users for over a year now. According to their FAQ, “Customers can make a self-service purchase online from the product websites or from in-app purchase prompts. Customers are first asked to enter an email address to ensure that they’re a user in an existing Azure Active Directory […]

Post Security Alerts to Teams with a Logic App

M365

We can leverage logic apps in Azure to build workflows across our 365 customers. This allows us to create triggers that cause other actions to take place. Recently, Microsoft introduced the Microsoft Graph API to our list of apps we can connect to. In this article we will primarily be focusing on the security components […]

Getting Microsoft Security Alerts in Teams

M365

Uploading 52% The purpose of this guide is to lay out the steps for configuring security alerts in a Microsoft Teams channel which is supported through the Microsoft Security Graph API. These alerts cover ALL SECURITY ALERTS that are reported in 365 and Azure. In this guide, I will be showing you how to configure the […]

Windows as a Service

M365

Uploading 52% As we move to the Modern Desktop environment from Microsoft we need to start adopting best practices for deploying devices and managing updates. Windows 10 is the last iteration of the OS that will be release and we now move into Windows as a service where devices receive their updates that mimic the […]

Setting up Microsoft 365 Data Loss Prevention

M365

Uploading 52% Data loss prevention is becoming extremely important across all business landscapes. It is a priority when it customers that fall under compliance regulations like HIPAA, FINRA, and NIST. The new M365 skus come baked with DLP and information protection features that were traditionally only available in the Enterprise plans from office365. I have […]