Topic hub / 80 guides
Entra ID, Intune and device guides
Identity and devices are where most tenants still carry on-premises habits. These guides cover the path from AD FS and Group Policy to Entra ID and Intune, and what breaks on the way.
Start here
2026-09-27NewAD FS to Entra ID: Retiring Federation with Staged Rollout, Without a Big-Bang CutoverRetire AD FS with Entra staged rollout: PHS vs PTA, rollout groups and limits, Conditional Access instead of claim rules, SAML apps, and the decommission order.Entra IDSecurityMicrosoft 3652026-09-27NewCan You Retire On-Premises Active Directory? The Cloud-Only Path with Entra ID and Intune, and What Breaks Along the WayThe readiness test for going cloud-only with Entra ID and Intune, why devices must be re-provisioned, what replaces AD services, and the last DC checklist.Entra IDIntuneWindows2026-09-27NewGroup Policy to Intune: Group Policy Analytics, the Settings Catalog, and the Policies That Do Not TranslateHow to run Group Policy analytics, sort every GPO setting into settings catalog, endpoint security, script or drop, deploy in rings, and handle coexistence.IntuneWindowsEntra IDMicrosoft 365
Services that do the work
Fixed-price engagements, quoted in writing before work begins and paid after you approve delivery. Prices are the published catalog prices.
- Managed Entra ID Identity Hygiene and Access Reviews — $3 per user · 30 days
- HR-Driven Joiner-Mover-Leaver Automation with Entra ID — From $5,950 per project · 4 weeks
- Microsoft Defender for Endpoint Deployment for Intune-Managed Devices — $3,500 per project · 15 days
- Fixing vulnerabilities on devices based on Defender for Endpoint data — $175 per hour · 5 days
- Microsoft Entra ID Single Sign-On (SSO) with Ramp Implementation — $475 per project · 5 days
- Devices monitoring — $7 per seat · 30 days
- Microsoft Entra PIM and Privileged Access Hardening — $3,950 per project · 2 weeks
- Microsoft Entra External ID Implementation — From $4,950 (scoped by app and user flows) · 3 weeks
Calculators and plan pages
- Windows 365 vs AVD — free to use, live Microsoft list prices
- Microsoft Intune Plan 1 — plan page with every term and billing option at Microsoft's list price
- Microsoft Entra ID P1 — plan page with every term and billing option at Microsoft's list price
- Windows 365 Business — plan page with every term and billing option at Microsoft's list price
All 80 guides, newest first
2026-10-14NewEvery Way to Run Windows as a Virtual Machine: Channels, Pros, Cons and CostLocal VMs, on-premises VDI, Remote Desktop Services, hosters, Azure VMs, Azure Virtual Desktop, Windows 365 and Dev Box compared: the license, the channel, pros, cons and October 2026 list prices.Windows 365Azure Virtual DesktopWindowsLicensing2026-10-11New9 Ways to Harden Microsoft 365 Business Premium, With the SettingsNine Business Premium hardening steps with the settings: Conditional Access, emergency accounts, Baseline security mode, presets, Intune, DLP and backup.Microsoft 365SecurityDefenderEntra ID2026-10-11NewAzure Virtual Desktop for a Small Business: Design, Cost, LicensingWhen AVD fits a 10 to 200-person company, the licenses you own, how to size pooled hosts, what Azure bills, and the Windows 365 comparison.Azure Virtual DesktopWindows 365AzureLicensing2026-10-11NewCISA's SCuBA Secure Configuration Baselines for Microsoft 365: What They Require, How to Check Your Tenant with ScubaGear, and What to Fix FirstWhat CISA's SCuBA secure configuration baselines require of a Microsoft 365 tenant, how to run ScubaGear and read its report, and which findings to fix first.SecurityComplianceMicrosoft 365Entra ID2026-10-11NewBusiness Central Essentials vs Premium vs Team Members: 2026 PricesBusiness Central Essentials $80, Premium $110, Team Members $8, Device $45 per month: what each may do, storage and environments, and a 20-user example.Dynamics 365LicensingCost2026-10-11Everything You Need to Know About Windows Autopilot Deployment in 2026: Prerequisites and SetupWindows Autopilot prerequisites, licensing, the four deployment modes, Intune setup steps, the reset-versus-wipe table and a rollout order for Windows 11 devices.IntuneWindowsHow-toMicrosoft 3652026-10-11How to detect identity attacks before they cause damageDetect identity attacks in Microsoft 365 early with Entra ID Protection, Defender for Identity, Defender for Cloud Apps and Defender XDR: which plan includes each at October 2026 list prices, and what to do first.DefenderEntra IDSecurityMicrosoft 3652026-10-11NewHow to Protect Your Microsoft 365 Environment: The 2026 BaselineThe twelve controls that protect a Microsoft 365 tenant: the settings, the defaults Microsoft changed in 2025 and 2026, and what each costs per user.Microsoft 365SecurityEntra IDDefender2026-10-11NewHow to Secure an Azure Environment: 12 Controls With the SettingsTwelve Azure security controls with settings: mandatory MFA since 1 October 2025, PIM on Entra ID P2 ($10.00), Policy deny rules, Bastion, immutable backups.AzureSecurityEntra IDDefender2026-10-11NewImprove Microsoft Secure Score Without Chasing PointsGet a practical Microsoft Secure Score remediation plan that prioritizes identity, email, endpoints, sharing, and Purview controls by risk.SecurityMicrosoft 365Entra IDExchange Online2026-10-11NewIntune Endpoint Privilege Management: Licensing and a 50-User RolloutIntune Endpoint Privilege Management: what it does, the $3.00 add-on vs the $10.00 Intune Suite, prerequisites, and a seven-week rollout for 50 users.IntuneSecurityLicensing2026-10-11NewIntune for Education: Pricing, What It Includes vs Intune Plan 1, and Setup for a SchoolIntune for Education is in Microsoft 365 A3 and A5, or $0.75 per user alone: what the console does, which plan a school needs, and the setup order.IntuneEducationLicensing2026-10-11NewManaging Company Macs with Intune: Enrollment, Platform SSO, Compliance and Conditional Access, and When Jamf Is Still the AnswerManaging company Macs with Intune: ADE enrollment, Platform SSO with Entra ID, compliance and Conditional Access, Defender, and when Jamf still wins.IntuneEntra IDSecurityHow-to2026-10-11From Zero to Hero: Microsoft Intune Setup Guide for 2026Intune setup in seven steps: which plan carries it at October 2026 list prices, enrollment per platform, compliance with Conditional Access, security policies, apps, Autopilot, updates, troubleshooting and the right wipe action.IntuneSecurityMicrosoft 365How-to2026-10-11NewMicrosoft 365 Education: Tenant Setup Guide for US SchoolsEight steps to a working Microsoft 365 Education tenant: verification, domain, Entra ID, A1/A3/A5 licenses, School Data Sync, Teams for Education, Intune.Microsoft 365EducationTeamsIntune2026-10-11NewMicrosoft 365 License Rules: Devices, Shared Mailboxes, Who Needs OneWho needs a Microsoft 365 license: 5 PCs, 5 tablets and 5 phones per user, shared mailboxes under 50 GB at $0, F1 $3.00, F3 $10.00, and a 60-person total.LicensingMicrosoft 365Cost2026-10-11NewMicrosoft 365 Migration Readiness Gate: 12 Checks Before You Cut OverA 12-check readiness gate for a Microsoft 365 migration: identity, domain, licenses at list price, mail method, file limits, devices, security and pilot.Microsoft 365MigrationExchange OnlineEntra ID2026-10-11Microsoft 365 Security Audit Guide for 2026: Steps, Checklist & Best PracticesA nine-step Microsoft 365 security audit with pass criteria for identity, email, sharing, devices, apps and logging, how to read Secure Score, and a P1-to-P3 remediation order.SecurityMicrosoft 365DefenderEntra ID2026-10-11Microsoft 365 Tenant-to-Tenant Migration Guide for 2026Mergers, acquisitions, divestitures, rebranding, and tenant consolidation projects often require moving identities, mail, files, Teams, devices, security…Microsoft 365MigrationEntra IDSecurity2026-10-11NewMicrosoft Cloud PKI: Certificates for Intune Devices Without an On-Premises CAMicrosoft Cloud PKI issues Wi-Fi and VPN certificates to Intune devices without AD CS or NDES: $2.00 per user as an add-on, in Intune Suite and E5.IntuneEntra IDSecurity2026-10-11NewMicrosoft Entra ID Conditional Access: Real-World Design PatternsDesign Microsoft Entra ID Conditional Access with stronger admin protection, device controls, exception governance, and tested Zero Trust enforcement.Entra IDSecurityMicrosoft 3652026-10-11NewMicrosoft Entra Internet Access: Web Filtering Without a Proxy Appliance, Licensing, and SetupEntra Internet Access is $5.00 per user or in the $12.00 Entra Suite, on Entra ID P1. What it filters, the client rules, and a 100-user rollout order.Entra IDSecurityLicensing2026-10-11Microsoft Teams Governance for 2026: Secure Collaboration Without Slowing Users DownMicrosoft Teams governance is no longer just about who can create a team. In 2026, a good governance model connects Microsoft Teams, Microsoft Entra ID,…TeamsMicrosoft 365Entra IDPurview2026-10-11Microsoft 365 Phishing Attacks: 2026 Protection GuidePhishing is no longer just a suspicious email with a bad link. In Microsoft 365, attackers now target identities, tokens, Teams chats, SharePoint and…SecurityMicrosoft 365Exchange OnlineDefender2026-10-11NewSecuring Remote Work with Microsoft 365: Eight Controls, in OrderThe eight Microsoft 365 controls that secure remote and hybrid work, in order, with what Business Premium ($22.00) licenses and what needs an add-on.Microsoft 365Entra IDIntuneSecurity2026-10-11What is Azure Virtual Desktop?Azure Virtual Desktop is Microsoft's cloud-based desktop and app virtualization platform for delivering Windows 11 desktops, RemoteApps, and Microsoft 365…Azure Virtual DesktopWindows 365AzureLicensing2026-10-11NewWhy MFA Is Not Enough Anymore: Real Microsoft 365 Attack PathsSee where Microsoft 365 MFA still fails and how to reduce account takeover risk with Conditional Access, phishing-resistant auth, and OAuth controls.Entra IDSecurityMicrosoft 3652026-10-11NewWindows 10 ESU Year One Ends 13 October 2026: The Year-Two PlanWindows 10 ESU year one ends 13 October 2026; year two runs to 12 October 2027. What a managed fleet does now, in order, with the dates and licensing.WindowsIntuneEnd of SupportLicensing2026-10-11NewWindows 11 Home to Pro Upgrade for Microsoft 365 Business Tenants: The $49 Offer ExplainedWindows 11 Home cannot join Entra ID or run Autopilot. Microsoft 365 Business tenants move Home to Pro for $49 per device: who qualifies, and how.WindowsLicensingIntune2026-10-11NewWindows Autopatch for Business Premium: Scope, Setup and First MonthWindows Autopatch comes with Microsoft 365 Business Premium ($22) since April 2025: what it updates, the Intune and Entra prerequisites, how to enroll.WindowsIntuneHow-to2026-10-05NewDynamics 365 pricing guide 2026: Sales, Customer Service, Field Service, Business Central, Commerce, Customer Insights, Contact Center and Project OperationsOctober 2026 list prices for every Dynamics 365 app, per user per month on an annual term, plus the base, attach, Team Members, device and minimum-seat rules.Dynamics 365Licensing2026-10-05NewEnterprise Mobility + Security E3 vs E5: What Each Includes, What It Costs, and When Microsoft 365 E3 Already Covers ItEMS E3 vs E5: what each bundle includes, October 2026 list prices per user per month, who should buy EMS, and when Microsoft 365 E3 or E5 already covers it.LicensingMicrosoft 365Entra IDIntune2026-10-05NewEntra ID P1 vs P2 vs Entra Suite: What Each Adds, Who Needs It, and the PriceEntra ID P1 vs P2 vs Entra Suite with October 2026 list prices: what each tier adds, prerequisites, Workload ID, Cloud PKI, and which plans include them.Entra IDSecurityLicensing2026-10-05NewExchange Hybrid Coexistence Between Independent Tenants: How It Works, the Limits, and the LicensingTwo Microsoft 365 tenants cannot form an Exchange hybrid. What coexists instead: free/busy, mail routing, address book, Teams, mailbox moves, and licensing.Exchange OnlineMigrationEntra IDMicrosoft 3652026-10-05NewIntune Plan 1 vs Plan 2 vs Intune Suite: Which Endpoint Management License You NeedIntune Plan 1 vs Plan 2 vs Intune Suite: October 2026 list prices, which Microsoft 365 plans include each after July 2026, and Intune for Education.IntuneLicensingMicrosoft 3652026-10-05NewMicrosoft 365 Education Licensing: A1, A3, A5, Faculty vs Student, and the Student Use BenefitOffice 365 A1 vs Microsoft 365 A3 vs A5 for a US school: faculty and student list prices, what each tier adds, the student use benefit rule, and eligibility.Microsoft 365LicensingEducationIntune2026-10-05NewMicrosoft 365 F1 vs F3 vs Business Basic: Licensing Frontline and Kiosk WorkersMicrosoft 365 F1 vs F3 vs Business Basic: October 2026 list prices, the F1 no-mailbox rule, what F3 adds, Kiosk plus F1, and the 300-seat cap.Microsoft 365LicensingIntune2026-10-05NewWindows 11 Pro vs Pro N: The Difference, and Which to BuyWhat the N in Windows 11 Pro N removes, what breaks for a US buyer, the list price of each edition, the upgrade paths, and the one-line recommendation.WindowsLicensingIntune2026-09-27NewBYOD Phones and Microsoft 365: Intune App Protection Without Enrolling the Device (What It Protects, What Users Notice, What It Needs)Intune app protection for personal phones without enrollment: the settings that matter, Conditional Access, what users see, iOS vs Android, and licensing.IntuneSecurityMicrosoft 3652026-09-27NewEntra Private Access vs a VPN: Zero Trust Network Access for a Microsoft 365 Organization, and What It Costs per UserEntra Private Access vs a VPN for a Microsoft 365 tenant: how the client, connectors and Conditional Access work, what a VPN still does, and the per-user price.Entra IDSecurityMicrosoft 3652026-09-27NewSOC 2 on Microsoft 365: Mapping the Trust Services Criteria to Entra, Intune, Purview and Defender EvidenceHow SOC 2 criteria map to Entra, Intune, Purview and Defender evidence, what auditors export, the gaps Microsoft 365 cannot close, and Type I vs Type II.ComplianceSecurityMicrosoft 3652026-09-27NewTeams Phone vs RingCentral vs Zoom Phone vs 8x8 for a Microsoft 365 Organization: The Comparison That Matters When You Already Pay for Microsoft 365Teams Phone vs RingCentral, Zoom Phone and 8x8 when you already run Microsoft 365: what each adds, Copilot and presence integration, contact center, migration.Teams PhoneTeamsMicrosoft 365Licensing2026-09-27NewWindows 365 Cloud PC for Contractors and BYOD: When a Cloud PC Beats Shipping a Laptop, and What Decides the Cost per SeatWhen a Windows 365 Cloud PC beats shipping a contractor a laptop: data stays in the cloud, Conditional Access on the Cloud PC, Business vs Enterprise, and cost.Windows 365IntuneSecurityMicrosoft 3652026-09-20NewChanging Your Company Email Domain in Microsoft 365 After a Rebrand: The Order of OperationsHow to change your Microsoft 365 email domain after a rebrand: verify, authenticate, swap addresses and UPNs in batches, keep the old domain as an alias.Microsoft 365Exchange OnlineEntra ID2026-09-20NewGoDaddy Microsoft 365 Defederation: The Questions Small Firms Ask Before They Start (Whole Tenant, GoDaddy's Role, Downtime, Licenses, What Comes After)What GoDaddy Microsoft 365 defederation changes, why every domain converts, what GoDaddy's part is, why every user gets a new password, licenses and what comes after.MigrationMicrosoft 365Entra ID2026-09-20NewMicrosoft 365 Groups vs Security Groups vs Distribution Lists vs Dynamic Groups: Which One for Which JobWhat each group type is for, where it is created, what it can be used in, and which object to pick for a SharePoint permission, a calendar or a license.Microsoft 365Entra IDAzure2026-09-20NewRehiring a Former Employee in Microsoft 365: Restore the Old Account, Recreate It, or Start Fresh?Restore a soft-deleted user, convert a shared or inactive mailbox back, or start fresh: steps, licensing and security work for a Microsoft 365 rehire.Entra IDEnd of SupportMicrosoft 3652026-09-20NewA Risky Event Was Detected for a User: What the Entra ID Protection Alert Means, and the Response That Actually Closes ItWhat the Entra ID Protection risky-user alert means, why a risk that passed MFA can hide a real compromise, and the response sequence that closes it.Entra IDSecurityMicrosoft 3652026-09-20NewStolen Refresh Tokens in Microsoft 365: How to Spot Residential-Proxy Token Replay in the Entra Sign-In LogsHow a stolen Outlook refresh token replayed through residential proxies looks in the Entra non-interactive sign-in log, a KQL starting point, and fixes.Entra IDSecurityMicrosoft 3652026-09-20NewWhat a Microsoft 365 Post-Incident Report Should Contain: Lessons From a Business Email Compromise CaseThe anatomy of a Microsoft 365 post-incident report, section by section, from a real business email compromise case, plus the questions yours must answer.SecurityMicrosoft 365Entra ID2026-09-20NewWindows 365 Business vs Enterprise: Licensing Prerequisites, Resizing, and What Happens to a Cloud PC When the Subscription EndsWindows 365 Business vs Enterprise at Microsoft list price: prerequisites, resizing, and what happens to a Cloud PC when the subscription ends.Windows 365LicensingIntune2026-09-14NewPasskeys and Phishing-Resistant MFA in Microsoft 365: Windows Hello for Business, FIDO2 Keys, Authenticator Passkeys and a Rollout Order for 20–500 SeatsWindows Hello for Business, FIDO2 keys and Authenticator passkeys, the Conditional Access strength that enforces them, and a 20–500-seat rollout order.SecurityEntra IDMicrosoft 3652026-09-13NewClient Access Licenses in 2026: User vs Device CALs, RDS and SQL CALs, and What Microsoft 365 Already CoversUser vs Device CALs, RDS and SQL CALs, and which Microsoft 365 seats carry CAL equivalency, with a calculator to count what your servers still need.LicensingWindows ServerMicrosoft 3652026-09-13NewGDAP Explained for Customers: What Admin Access a Microsoft Partner Asks For, and How to Review ItWhat a GDAP request from a Microsoft partner grants, why the roles are scoped and time-bound, and a five-minute review to run before you approve it.SecurityEntra IDMicrosoft 3652026-09-13NewGuest and External Users in Microsoft 365: Who Needs a License and Who Does NotB2B guests, shared channels, external access, Anyone links and Entra External ID: which outside users need a license, which are metered, and the defaults.Entra IDLicensingSecurityTeams2026-09-06NewMicrosoft 365 and Entra Price and Packaging Changes in 2026: The Dates, What Moves, and What to Check Before Your RenewalMicrosoft 365 prices rose 1 July 2026 and packaging changed by 1 August. What moved, what Entra and E7 cost now, and what to check before your renewal.Microsoft 365LicensingCostEnd of Support2026-06-16Microsoft Entra app registrations and third-party integrations in tenant-to-tenant migrationsIn a Microsoft 365 tenant-to-tenant migration, mailboxes and files are only part of the story. Identity-integrated apps, enterprise applications, SSO,…Microsoft 365Entra IDMigrationSecurity2026-06-16Microsoft Entra ID guest accounts tenant-to-tenant migrationGuest accounts are often the hidden complexity in a Microsoft 365 tenant-to-tenant migration. In 2026, the right approach is not to “move” Microsoft Entra…Microsoft 365Entra IDMigrationSecurity2026-06-16Microsoft Entra ID user accounts and groups tenant-to-tenant migrationMicrosoft Entra ID user and group objects cannot simply be “moved” from one Microsoft 365 tenant to another. In a 2026 tenant-to-tenant migration,…Microsoft 365Entra IDMigrationSecurity2026-06-16Microsoft Entra ID: A 2026 Guide to Identity and Access ManagementMicrosoft Entra ID, formerly Azure Active Directory, is the identity platform behind secure access to Microsoft 365, Azure, SaaS applications, hybrid…Entra IDSecurity2026-06-16Microsoft Entra Joined Device Tenant-to-Tenant MigrationMigrating Microsoft Entra joined Windows devices, formerly Azure AD joined devices, is not a simple tenant-side move. In 2026, successful endpoint…Microsoft 365MigrationEntra IDIntune2026-06-16NewConditional Access Policies Every Business Should HaveClose Conditional Access gaps with MFA, legacy auth blocking, device controls, guest rules, and safer Microsoft Entra ID rollout.SecurityEntra IDMicrosoft 3652026-06-16Create an Org Chart from Microsoft Entra ID in Microsoft 365A useful org chart starts with accurate identity data. In 2026, Microsoft Entra ID, formerly Azure AD, remains the foundation for organization views…Entra IDMicrosoft 365TeamsPower Platform2026-06-16Everything You Wanted to Know About Windows Autopilot Deployment: Hybrid Microsoft Entra Join and Existing DevicesWindows Autopilot is still one of the most practical ways to provision Windows 11 devices with Microsoft Intune. In 2026, the default we recommend is…How-toIntuneWindows2026-06-16Exchange Online Tenant-to-Tenant Migration Guide for 2026Moving Exchange Online mailboxes between Microsoft 365 tenants is no longer just an export-and-import project. A successful 2026 tenant-to-tenant…Microsoft 365Exchange OnlineMigrationEntra ID2026-06-16Microsoft Teams Rooms Licensing in 2026: Basic, Pro, and Shared DevicesMicrosoft’s Teams Rooms licensing enforcement is no longer an upcoming change—it is the current requirement. In 2026, Teams Rooms devices, Surface Hub…TeamsMicrosoft 3652026-06-16How to license Windows 11 in a virtual desktop environmentWindows desktop virtualization licensing has changed significantly since the Windows 10 era. In 2026, most organizations should plan around Windows 11…Azure Virtual DesktopWindows 365WindowsMicrosoft 3652026-06-16How to Migrate from Microsoft Dynamics GP to Dynamics 365 Business Central in 2026Dynamics GP is still running critical finance operations for many organizations, but Microsoft’s published support timeline makes modernization planning…Dynamics 365MigrationHow-to2026-06-16Windows 365 in 2026: Your Cloud PC for Secure Hybrid WorkWindows 365 is no longer a new pandemic-era announcement. It is now a mature Microsoft Cloud PC service for employees, contractors, BYOD users, frontline…Windows 365IntuneAzure Virtual DesktopSecurity2026-06-16NewMicrosoft Entra ID Governance: Access Reviews, PIM, and Lifecycle WorkflowsImplement Microsoft Entra ID Governance with PIM, Access Reviews, and Lifecycle Workflows to reduce standing privilege and stale access.SecurityComplianceEntra ID2026-06-16Microsoft Forms tenant-to-tenant migration: options, limitations, and checklistMicrosoft Forms is often overlooked in Microsoft 365 tenant-to-tenant projects, but surveys, quizzes, registration forms, file-upload questions, Power…Microsoft 365MigrationEntra ID2026-06-16Move Your RDS Deployment to Azure Virtual DesktopOn-premises Remote Desktop Services still works for many organizations, but it often limits scalability, security modernization, and hybrid-work…Azure Virtual DesktopAzureWindows 365Entra ID2026-06-16Password Expiration Policy Has Expired: Microsoft 365 Guidance for 2026Forced routine password changes are no longer considered a strong security control for Microsoft 365 and Microsoft Entra ID. In 2026, the better approach…Microsoft 365Entra IDSecurity2026-06-16Deploy Quick Assist with Microsoft Intune in 2026Quick Assist is still a useful, lightweight remote support tool for Windows users, but the old Microsoft Store for Business deployment model is gone. In…IntuneWindowsMicrosoft 365Entra ID2026-06-16What is Microsoft Entra External ID?If your business runs customer-facing apps, you need a secure way for customers, partners, or citizens to sign up, sign in, reset passwords, and access…Entra IDAzureSecurity2026-06-16Microsoft Viva Engage tenant-to-tenant migrationViva Engage, formerly Yammer, is often overlooked in Microsoft 365 tenant-to-tenant projects. The content may look like a standalone social network, but…Microsoft 365MigrationEntra ID2026-06-16Zero-Touch Deployment for Windows 11: Modern Autopilot and Intune RolloutsWindows 11 deployment in 2026 should be secure, repeatable, and ready for hybrid work. With Microsoft Intune, Windows Autopilot, Windows Autopilot device…WindowsIntuneMicrosoft 365
Reading about your own tenant? Book 30 minutes with Mike, the founder, or send a note. A person answers the same business day, and every order is confirmed by a human.