Identify the VPN Server application before scoping Conditional Access
Which cloud application receives the VPN Conditional Access policy?
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 160 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Use Hyper-V Manager from a separate management computer
What distinguishes a remote management workstation from a Hyper-V host?
Read the guide
Decide whether an external Hyper-V switch should share its adapter
How should host management access be considered when creating an external virtual switch?
Read the guide
Interpret Remote Access historical reports as sessions
Why should a Remote Access report not be read as a count of distinct people?
Read the guide
Build a Hyper-V capacity envelope from the correct limits
Which published maximum applies to a planned Hyper-V workload?
Read the guide
Choose Hyper-V import identity and running-file locations
When should an imported virtual machine keep its identity or receive a new one?
Read the guide
Separate pre-logon device VPN from user VPN requirements
Which Always On VPN profile is needed before a user signs in?
Read the guide
Review accepted VPN protocols after installing or upgrading RRAS
Why should a new RRAS deployment and an upgraded server be checked separately?
Read the guide
Scope Monitoring Active Directory for Signs of Compromise in observed AD/DNS state
Microsoft states: “Law Number Five: Eternal vigilance is the price of security. - 10 Immutable Laws of Security Administration).”
Read the briefing
Validate Attractive Accounts for Credential Theft with AD/DNS evidence
Microsoft states: “Depending on the system configuration, these credentials can be extracted in the form of hashes, tickets, or even plaintext passwords.”
Read the checklist