Security — Tutorials & Guides by Jannik Reinhard

Endpoint security Tutorials and Guides by Microsoft MVP Jannik Reinhard — Microsoft Defender for Endpoint, attack surface reduction, BitLocker, FileVault, privilege management and zero-trust device hardening.Endpoint security, Microsoft Defender configuration, and zero-trust device hardening. Every article in this category focuses on practical, configurable controls that reduce attack surface on Windows, macOS and Linux endpoints managed through Microsoft Intune.

You’ll find deep-dive guides on Microsoft Defender for Endpoint baselines, attack surface reduction (ASR) rules, account protection policies, BitLocker and FileVault deployment, privilege management with Intune Suite, restricting login to dedicated users, and integrating Defender signals into Logic Apps and SIEM pipelines. Each post is opinionated about defaults — what to turn on day one, what to phase in, and what trade-offs each control creates for the user experience.

As a dual Microsoft MVP for Security (Intune) and Microsoft Foundry, my work spans both the security-product surface and the AI agents that increasingly automate triage and remediation. Articles in this category lean on that real-world perspective: not just “how to enable a setting”, but “how this fits in your overall security posture and what attackers will try next”.