Preserve a policy expression through ARM template evaluation
Check whether Resource Manager evaluated a function that was intended for Azure Policy.
Read the guideDSE security knowledge hubIT
IT
Knowledge
Page 17 of the DSE IT knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide IT knowledge center
Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.
DSE post stream
1,297 articlesIT
Validate the hosted identity separately in a passwordless Queue migration
DSE recommends recording the expected local principal and the expected hosted principal as two separate entries in the migration plan.
Read the guide
Check the configuration source and locale before using Defender baseline assessments
Which assessment boundaries matter before reporting Defender benchmark compliance for Windows devices?
Read the guide
Track the seven-day hold when an Intune compliance setting reports Error
Why can a device retain its earlier compliance state while one setting is in Error?
Read the guide
Protect shared Intune policies when delegating local policy creation
How can a distributed Intune team keep local create permissions from reaching centrally shared policies?
Read the guide
Choose the supported identity property for a Bicep deployment script
Separate the script resource's managed-identity property from an explicit script login.
Read the guide
Filter Azure Policy results by both assignment and definition
Avoid mixing compliance results from different uses of the same policy definition.
Read the guide
Include the private endpoint in an Azure Files site-to-site VPN plan
DSE recommends drawing the complete client-to-share path before treating the VPN as ready.
Read the guide
Review VM-extension authority before granting Log Analytics Contributor
A monitoring-role assignment can include operational control beyond reading logs.
Read the guide
Declare a global workbook time parameter before synchronizing chart brushing
Make the scope of an interactive time selection explicit.
Read the guide