Endpoint security Tutorials and Guides by Microsoft MVP Jannik Reinhard — Microsoft Defender for Endpoint, attack surface reduction, BitLocker, FileVault, privilege management and zero-trust device hardening.Endpoint security, Microsoft Defender configuration, and zero-trust device hardening. Every article in this category focuses on practical, configurable controls that reduce attack surface on Windows, macOS and Linux endpoints managed through Microsoft Intune.
You’ll find deep-dive guides on Microsoft Defender for Endpoint baselines, attack surface reduction (ASR) rules, account protection policies, BitLocker and FileVault deployment, privilege management with Intune Suite, restricting login to dedicated users, and integrating Defender signals into Logic Apps and SIEM pipelines. Each post is opinionated about defaults — what to turn on day one, what to phase in, and what trade-offs each control creates for the user experience.
As a dual Microsoft MVP for Security (Intune) and Microsoft Foundry, my work spans both the security-product surface and the AI agents that increasingly automate triage and remediation. Articles in this category lean on that real-world perspective: not just “how to enable a setting”, but “how this fits in your overall security posture and what attackers will try next”.
This was a no-brainer for me — I had to write a blog about Microsoft Copilot for Security. You know I like AI and I like Intune. What is better if I can blog in one post about both. I was already part of the closed preview, and I am a very big fan of this product and the potential behind it. In this blog post I will write about everything you have to know and how you can start.
This is the second guest post from my partner Recast Software.
Imagine reducing 90% of critical security vulnerabilities with a single change to your IT policy. Removing local admin rights can achieve this. IT departments face a constant influx of tickets and issues to manage. Many of these result from a need to elevate permissions, perhaps to update a piece of software or access a resource. The old way of getting around this issue was to give end users local admin permissions on their device. I know many of you are cringing just reading that—so am I. There are many, many reasons not to give end-users local admin permissions. The risks associated with local admin rights greatly outweigh the benefit of fewer tickets from end-users.
Do you know that you can deploy configurations to devices without enrolling them to Intune? No, then follow this blog how to enroll devices to Microsoft Defender for Endpoint (MDE).
In this blog I want to show you how you can onboard your devices in MDE. In the next blog I will show you what are the capabilities and features in the MDE Admin center.
To reduce the security risk of the end devices and to protect them from data loss or malicious devices, it makes sense to also deal with the management of peripherals. Intune also has an answer for this with attack surface reduction policies. We would like to take a closer look at this topic in this blog post.
