Joël Prins

Joël Prins

@intothecloud.eu

👶🏼 Father at first ✝️ Believer ⚽️ Liverpool FC 🔴 🧑‍💻Intune | Entra ID | Defender | Microsoft 365 🔗intothecloud.eu | Modern Endpoint Management

564 followers295 following45 posts

We get lost in passkey tech details, but users just want a login that's faster and easy to use. Can WIIFM speed up adoption? Thoughts from CloudHour, plus Jan Bakker’s piece on upgrades on passkey onboarding: open.substack.com/pub/intothec... #Passkeys #MicrosoftEntra #MFA

open.substack.comWhat is weird about the whole authentication discussionWe talk phishing resistance and device binding. Users just want to log in faster. Why passkey adoption is a UX problem, not a security one.

Microsoft adds Entra ID roles fast: 8 new ones in 2026 already🛡️ New roles = new permission surfaces. Govern early or manage chaos later, especially with AI agents in the mix. How do you track role drift? Learn from the Teams era: govern early or manage chaos later, especially now in the AI era.

PIM Manager just shipped a major update. 🚀 I planned to build the Configure wizard next. But I realized PIM for Groups behaves fundamentally differently than roles. If I ignored that, I’d be building a tool that only works for half the product. Here is what changed 👇

View full thread

What's in this update: ✅ Full PIM for Groups support (Owner vs Member policies) ✅ Security Gap Detection ✅ Smart Sync (Delta Queries) ✅ Multi-workload Architecture Repo is now PUBLIC 💻 Huge thanks to everyone who provided feedback! 🙌

I wrote a detailed deep-dive about the architecture, the hybrid delta/full sync approach, and the logic gaps I found. It's an absolute information bomb on the architecture and logic. Read the full blog here: intothecloud.eu/p/pi... #EntraID #PIM #MicrosoftGraph #CloudSecurity

intothecloud.euYou’re not managing PIM if you can’t see PIM for GroupsAre "Unmanaged Groups" bypassing your Entra ID PIM policies? Discover the security gap in PIM for Groups and how to detect it with the new PIM Manager.

PIM Manager just shipped a major update. 🚀 I planned to build the Configure wizard next. But I realized PIM for Groups behaves fundamentally differently than roles. If I ignored that, I’d be building a tool that only works for half the product. Here is what changed 👇

The "Unmanaged Groups" Blind Spot 🚩 While digging, I found a refined security gap. Groups can have isRoleAssignable: true, but no PIM policy attached. They bypass PIM entirely. No activation limits. No MFA. Only permanent privileged access. PIM Manager now identifies these automatically.

Under the hood: Delta Queries ⚡ I didn't know Graph Delta Queries existed until I started this. I was fetching everything on every refresh. Thousands of calls. Now? 500+ calls dropped to ~10. It’s a massive win performing huge optimizations.

Stop struggling, start managing; PIMManager is here. PIM in Entra shouldn’t mean clickops, scripts, and audit spreadsheets. Yet that’s how most RBAC and PIM audits still work today. Manual, fragmented, and error-prone. That’s why I started building PIMManager. 🧵 #Entra #PIM #RBAC #Security

Practice what you preach. Use what you advise, be consistent, make actions visible. When words and deeds align, trust grows and ownership follows. Full post on LinkedIn. #Leadership #Ownership #TeamCulture

Trust → Empowers. Give context, let them think & do, and keep accountability. Better choices, more energy, real ownership. Full post on LinkedIn. #Leadership #PeopleDevelopment

Ask juniors what their idea was - on wins and misses. Surface assumptions, learn out loud, tighten the frame when needed. Full post on LinkedIn. #Leadership

𝐂𝐥𝐨𝐮𝐝𝐇𝐨𝐮𝐫: where the Microsoft EMS community slows down to learn fast. Every 1st Wed @ 8 PM (AMS). Short news, key topics & an open round-table—stories, lessons, failures, next steps. ➡️ discord.gg/VBqRHKqNat 📅 Next Wed 20:00 (AMS) #MicrosoftEMS #Security

discord.ggJoin the Microsoft EMS Community Discord Server!This server is all about getting closer to the Microsoft Enterprise Mobility + Security community! | 2552 members

10 years in IT taught me as much about people as tech. A leader who listens and acts builds stronger teams. The series starts Tuesday. Check my LinkedIn for the full post.

“Functionality may vary” - Microsoft’s quiet way of saying “use at your own risk.” 🪟 Windows 10 stays allowed in Intune after Oct 14 2025 - but not 𝘨𝘶𝘢𝘳𝘢𝘯𝘵𝘦𝘦𝘥. Devices still enroll, yet policy behavior may drift. 💡 Grace time, not a steady state. #Intune #Windows10 #ZeroTrust 1/2

🧠 Security as Mindset 🧠 Zero Trust is evolving, and today’s digital boundaries are more dynamic than ever. That’s why Microsoft’s Secure Future Initiative deserves your attention. (1/2)📖⬇️

Joël Prins reposted

Joël Prins reposted

A new dedicated resource application to enable Active Directory to Microsoft Entra ID sync using Microsoft Entra Connect Sync or Cloud Sync is coming 😱 In the announcement the mentioned reason is "upcoming security hardening"... 6bf85cfa-ac8a-4be5-b5de-425a0d0dc016 #EntraID

❗ New Blog Post! ❗ I've just published my first blog on securing access to the Windows 365 Cloud PC. 🖥️🔒 Discover a solution to secure your digital workspace while allowing access from BYOD devices! 👉 www.intothecloud.eu/... #Windows365 #CyberSecurity #Microsoft

intothecloud.euLet's secure the cloud PC!Intro With the announcement that we are able to connect via the Windows App to our Windows 365 Cloud PC's from the major platforms (Windows, iOS/iPadOS, MacOS, and Android), it's time to give our users access in a controlled and secure manner! In this blog, I will try to

🚨Join us in tomorrows Spotlight session!

Joël Prins@intothecloud.eu

🚨 Join us on Dec 12th at 1 PM for 'Spotlight: Securing your M365 config with Maester'! 🚨 🔒 Learn best practices for securing your Microsoft 365 config. 💬 The Maester core team will be present for an AMA. 📅 Save the date! 👉 tinyurl.com/maesterems #M365Security #TechCommunity #CyberSecurity

Joël Prins reposted

Unidirectional clipboard for Azure Virtual Desktop and Windows 365: Azure Virtual Desktop and Windows 365 have emerged as powerful solutions for enabling remote work and enhancing productivity. One crucial aspect is clipboard redirection, which allows users to… https://bit.ly/3Vwy7Cm #WindowsITPro

🚨 Join us on Dec 12th at 1 PM for 'Spotlight: Securing your M365 config with Maester'! 🚨 🔒 Learn best practices for securing your Microsoft 365 config. 💬 The Maester core team will be present for an AMA. 📅 Save the date! 👉 tinyurl.com/maesterems #M365Security #TechCommunity #CyberSecurity

tinyurl.comJoin the Microsoft EMS Community Discord Server!Join the Enterprise Mobility + Security Community! Chat or ask questions about all things Intune, Entra or XDR! | 2239 members

Joël Prins reposted

💡If you have pinned your #windows365 cloudPC to the taskbar and run into "Windows app cannot start right now" error: Open the full Windows App and accept the EULA. I run into the "issue" today, but it is possible the new EULA has been around for a while. #windows11 #mvpbuzz

Joël Prins reposted

In case you missed it, back in October we published a brand new guide for deploying phishing-resistant passwordless in your organization with Entra ID: aka.ms/Passwordless... ! This is the outcome of a ton of effort across Microsoft, please use it to begin your journey!

aka.msGet started with a phishing-resistant passwordless authentication deployment in Microsoft Entra ID - Microsoft Entra IDDetailed guidance for planning the prerequisites to deploy passwordless and phishing-resistant authentication for organizations that use Microsoft Entra ID.

2/2 If you're looking for another awesome spot to connect and interact with others [Microsoft EMS Community](discord.gg/msems) It's a fantastic place to engage in real-time conversations or ask for help, join fun events, and make new friends. 🎉 Come join us and let's keep the good vibes going! 💬✨

discord.ggJoin the Microsoft EMS Community Discord Server!Join the Enterprise Mobility + Security Community! Chat or ask questions about all things Intune, Entra or XDR! | 2161 members

🚀 From an MSP perspective! 🚀 What do you think should be the default licenses for Microsoft 365? Share your thoughts and let's spark a discussion! 💬✨ Note: This is purely out of curiosity and not intended as advice.

I'll start; For SMB, a Business premium with MDO P2 because of the Malicious url click detection. For Enterprise, E3 with MDO P2 and MDE P1. Should be a good start to have a solid strength.

Joël Prins reposted

🎯 Are you a Microsoft customer and don't know where to start on your Zero Trust journey? Or maybe you have some Microsoft Security products and want to improve your standing and close any gaps.

Joël Prins reposted

Did you know that if your organization is using #Microsoft365 / #office365 or #Azure then you are also ALREADY using the #Entra identity platform? Those services are built to use #EntraID as their identity provider (IDP), which is why identity based security controls can scale across them

Curious about how my first working week will be over here! To see if people are moving over to Bluesky 🦋 instead of X. And of course how the Microsoft community progresses over here, hoping for exiting times! 💪🏽

Joël Prins reposted

If you are new here at Bluesky, it could be a good idea to add a name, picture and some info before you start mass-following people.. It will increase the chance of a follow back 🧐 #followback #community