"We cannot solve our problems with the same thinking we used when we created them." -Albert Einstein Cloud dude @Sparebanken Norge. Cloud Security MVP (18 years). Podcasting Microsoft cloud and related stuff: https://www.youtube.com/@bluescreenbrothershttps://bsky.app/profile/olavt.bsky.socialhttps://bsky.app/profile/olavt.bsky.social/post/3ml6ljmwurk24New AI + security episode out Alexander & Julian talk with Rod Trent (Msft) on what matters in securing genAI beyond the hype. • Identity + data security • Finding shadow AI • Sentinel + genAI • Zero Trust, KQL & admin rights For SecOps/IT/gov folks balancing speed vs control. youtu.be/9IthZ_WLe2A https://youtu.be/9IthZ_WLe2A06 May 2026 11:21 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3ml6ljmwurk24https://bsky.app/profile/olavt.bsky.social/post/3ma4atiadfs2uDocumentation of who has access to the secrets and certificates in your Azure Key Vault might for some be a requirement and other something they just should have control over. Together with Github Copilot I created this script for the job (covering both rbac and policy) https://github.com/OTvedt/Scripts-For-Sharing/blob/master/Azure/Key-Vault/KeyVault-DocumentAIM.ps116 Dec 2025 13:28 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3ma4atiadfs2uhttps://bsky.app/profile/olavt.bsky.social/post/3m526fg5v722uThe hunt for expiring certs and secrets on your Entra/Azure apps where the topic when @goodworkaround.com and I did our newest podcast. We share where to find them (some are well hidden), cmd lines and a script that help monitor and alert before they expires and cause problems youtu.be/1TjedH5o-QU https://youtu.be/1TjedH5o-QU07 Nov 2025 13:23 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3m526fg5v722uhttps://bsky.app/profile/olavt.bsky.social/post/3m6abxobeok2u@alexsolaat.bsky.social and I had a talk with Chauncey Larsen from Microsoft Surface team about #WindowsRecall, #Copilot+ and AI in #Windows Does the operative system have any impact on your AI experience? youtu.be/YXqnfTUY95c https://youtu.be/YXqnfTUY95c22 Nov 2025 17:08 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3m6abxobeok2uhttps://bsky.app/profile/olavt.bsky.social/post/3m6abxobeok2u@alexsolaat.bsky.social and I had a talk with Chauncey Larsen from Microsoft Surface team about #WindowsRecall, #Copilot+ and AI in #Windows Does the operative system have any impact on your AI experience? youtu.be/YXqnfTUY95c https://youtu.be/YXqnfTUY95c22 Nov 2025 17:08 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3m6abxobeok2uhttps://bsky.app/profile/olavt.bsky.social/post/3m526fg5v722uThe hunt for expiring certs and secrets on your Entra/Azure apps where the topic when @goodworkaround.com and I did our newest podcast. We share where to find them (some are well hidden), cmd lines and a script that help monitor and alert before they expires and cause problems youtu.be/1TjedH5o-QU https://youtu.be/1TjedH5o-QU07 Nov 2025 13:23 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3m526fg5v722uhttps://bsky.app/profile/olavt.bsky.social/post/3m3jzmqtmj22t#Entraid preview out: Convert Source of Authority of synced Active Directory groups to the cloud. Or easier said, you can now convert Active directory groups so you can change and manage them in EntraID How to w/demos shown by @goodworkaround.com and me in our newest episode youtu.be/_K3k5_A44sM https://youtu.be/_K3k5_A44sM19 Oct 2025 09:50 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3m3jzmqtmj22thttps://bsky.app/profile/olavt.bsky.social/post/3lz3z23xg622jBrand new problem with Windows Sandbox, after updates in September. The manual and PowerShell solution do not longer work, but luckily the good old "Netsh" command still work. youtu.be/XX3fdBptKqQ https://youtu.be/XX3fdBptKqQ18 Sep 2025 09:12 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lz3z23xg622jhttps://bsky.app/profile/olavt.bsky.social/post/3lwgumzekyc2iLast day before 2 weeks vacation. When coming back I will start making some more Entra App videos. I think secret and certificate will be first focus In the mean time enjoy one off our "classics" youtu.be/f5iXXi0prbA https://youtu.be/f5iXXi0prbA15 Aug 2025 12:37 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lwgumzekyc2ihttps://bsky.app/profile/olavt.bsky.social/post/3lvprpquvbk27The Microsoft Defender for Cloud Ninja training have been updated Some new: - Agentless code scanning for GitHub and Azure DevOps (preview) - Protecting Cloud Storage in the Age of AI - Microsoft AI Security Story: Protection Across the Platform - And more https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/become-a-microsoft-defender-for-cloud-ninja/160876106 Aug 2025 08:13 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lvprpquvbk27https://bsky.app/profile/olavt.bsky.social/post/3lv3zweicls2oWho are hosting a birthday party for Windows 10 today? 🥳 10 Years today since it was released. Is that the reason for the extended support? Ent. Extended Security Updates (ESU) Win 10: https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates Consumer Ext Security Updates (ESU): https://support.microsoft.com/en-us/windows/windows-10-consumer-extended-security-updates-esu-program-33e17de9-36b3-43bb-874d-6c53d2e4bf4229 Jul 2025 11:47 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lv3zweicls2ohttps://bsky.app/profile/olavt.bsky.social/post/3luhnj3a4wc2iSometimes I need to hunt Azure to check if a specific group has permissions some where in all my subscriptions. With help from Co-pilot in VS Code I now have this script. Listing both "Active" and "Eligible" permissions and exporting it into a CSV file https://github.com/OTvedt/Scripts-For-Sharing/blob/master/Azure/Access_Control_(IAM)/Get-AllAzureRolesGroup.ps121 Jul 2025 09:11 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3luhnj3a4wc2ihttps://bsky.app/profile/olavt.bsky.social/post/3ltmn6turwc2cRenewed for the 18th time, still excited and nervous when waiting for that e-mail Big thanks to @alexsolaat.bsky.social, @tinastenderup.bsky.social, and the entire #MVPBuzz family10 Jul 2025 15:24 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3ltmn6turwc2chttps://bsky.app/profile/olavt.bsky.social/post/3lsvjmi66dk2dGreat news. Soon (if not already) your Defender for Office 365 will automatically detect and block email bombing attacks. https://www.bleepingcomputer.com/news/security/microsoft-defender-for-office-365-now-blocks-email-bombing-attacks/01 Jul 2025 10:49 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lsvjmi66dk2dhttps://bsky.app/profile/olavt.bsky.social/post/3lsbmauwmps2qTrying to clean up old "mistakes". Default expiration dates for new secrets in Entra App registrations were at one point set to the years 2299 and 2100. Created a script that lists these so I can clean them up. And also check if there is any with 2 years+ too expiration https://github.com/OTvedt/Scripts-For-Sharing/blob/master/Azure/Apps/Get-Apps-with-too-long-expiration.ps123 Jun 2025 12:43 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lsbmauwmps2qhttps://bsky.app/profile/olavt.bsky.social/post/3lpc2ovpw2224I am a heavy user of Windows Sandbox, but I (and many more) have had the "No network" problem. It is in fact just a good old DNS setting problem. I created a short video on how to fix it manually or with a configuration file. youtu.be/XX3fdBptKqQ https://youtu.be/XX3fdBptKqQ16 May 2025 12:45 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lpc2ovpw2224https://bsky.app/profile/olavt.bsky.social/post/3lpc2ovpw2224I am a heavy user of Windows Sandbox, but I (and many more) have had the "No network" problem. It is in fact just a good old DNS setting problem. I created a short video on how to fix it manually or with a configuration file. youtu.be/XX3fdBptKqQ https://youtu.be/XX3fdBptKqQ16 May 2025 12:45 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lpc2ovpw2224https://bsky.app/profile/olavt.bsky.social/post/3loqlqro4i22pUpdated my Entra PIM roles activation script to include the possibility of selecting for how long the roles should be active. The script will list all roles you are eligible to active and highlight the once already active https://github.com/OTvedt/Scripts-For-Sharing/blob/master/Azure/PIM/Entra/Activate-MultipleRoles.ps109 May 2025 14:03 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3loqlqro4i22phttps://bsky.app/profile/olavt.bsky.social/post/3loigepv7gk2nStruggling with Windows Sandbox not having network access? It is most likely related to DNS trouble, set it manually or create a Sandbox config file (.wsb) that configure the DNS setting during startup every time.06 May 2025 08:05 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3loigepv7gk2nhttps://bsky.app/profile/olavt.bsky.social/post/3logccwnwus2nNew private Microsoft accounts gets more safe with passkeys as default. You get both that nice and easy passwordless experience and enhancing the security https://thehackernews.com/2025/05/microsoft-sets-passkeys-default-for-new.html How to enable on your exiting account? (personal and work account) https://support.microsoft.com/en-us/account-billing/signing-in-with-a-passkey-09a49a86-ca47-406c-8acc-ed0e3c852c6d05 May 2025 11:47 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3logccwnwus2nhttps://bsky.app/profile/olavt.bsky.social/post/3lnryhbtrwc2gSecurity from chip to cloud are the topic on #BlueScreenBrothers latest episode. Focused on #Microsoft Surface, but the advices should be followed on any hardware vendors equipment. @alexsolaat.bsky.social youtu.be/s8Awpscsgjk https://youtu.be/s8Awpscsgjk?si=mI-ZCJKgzlIqEPxR27 Apr 2025 09:58 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lnryhbtrwc2ghttps://bsky.app/profile/olavt.bsky.social/post/3llyewqi75s2jDuring #MVPSummit @alexsolaat.bsky.social meetup with @microsoft.com Surface Program managers Frank Buchholz and Chauncey Larson. They recorded a podcast about AI technologies and Microsoft Surface Check it out here: youtu.be/JTluLkcE5m4 #MVPBuzz https://youtu.be/JTluLkcE5m404 Apr 2025 12:07 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3llyewqi75s2jhttps://bsky.app/profile/olavt.bsky.social/post/3llegoy7ldk2b@alexsolaat.bsky.social and Anders are meeting up with Briand Sanderson (Microsoft) again during the Microsoft MVP Summit. And in this episode there is lovely mix of old time #Mainframe and modern #CloudPC #MVPBuzz #MVPSummit youtu.be/2bmIXQtPWlA https://youtu.be/2bmIXQtPWlA27 Mar 2025 13:45 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3llegoy7ldk2bhttps://bsky.app/profile/olavt.bsky.social/post/3llblmvn6hs2bA brand new episode out: With Briand Sanderson (Microsoft), @alexsolaat.bsky.social and Anders Kristiansen (Storebrand) exploring the latest trends, risks, and ethical dilemmas Discover how to stay safe and secure in the digital age, from browser extensions to AI tools. youtu.be/C2DOccFC2RU https://youtu.be/C2DOccFC2RU26 Mar 2025 10:35 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3llblmvn6hs2bhttps://bsky.app/profile/olavt.bsky.social/post/3ll7aacekz22vNeeded to figure out if I had any Azure Classic Admins left (unsupported since 31.August 2024) in my subscriptions Found a script (wmatthyssen.com) and modified it to suit my taste: https://github.com/OTvedt/Scripts-For-Sharing/blob/master/Azure/Access_Control_(IAM)/Classic-AdminRoles/Find-ClassicAdmins.ps1 More info from Microsoft here: https://learn.microsoft.com/nb-no/azure/role-based-access-control/classic-administrators?tabs=azure-resource-graph#prepare-for-co-administrators-retirement25 Mar 2025 12:06 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3ll7aacekz22vhttps://bsky.app/profile/olavt.bsky.social/post/3lj5qdysqbc2fNew episode out! @goodworkaround.com and I am looking in to #Azure cross tenant use of managed identities without having to use shared #secrets or #certificates that expire Check it out, and follow our channel for more exiting nerdy stuff! youtu.be/oV9jHjNyqfk https://youtu.be/oV9jHjNyqfk27 Feb 2025 10:59 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lj5qdysqbc2fhttps://bsky.app/profile/olavt.bsky.social/post/3lj5qdysqbc2fNew episode out! @goodworkaround.com and I am looking in to #Azure cross tenant use of managed identities without having to use shared #secrets or #certificates that expire Check it out, and follow our channel for more exiting nerdy stuff! youtu.be/oV9jHjNyqfk https://youtu.be/oV9jHjNyqfk27 Feb 2025 10:59 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lj5qdysqbc2fhttps://bsky.app/profile/olavt.bsky.social/post/3lhln6rf2tc26@goodworkaround.com and I are exploring Managed identities through demonstrations and real-life examples using logic apps and automation accounts. The tasks of setting and verifying access permission are also thoroughly explored Check it out here(and follow for more) https://www.youtube.com/watch?v=spb-OaBG5mM07 Feb 2025 12:49 +0000at://did:plc:vrsxtbnnkupcl6o6m4xvimwp/app.bsky.feed.post/3lhln6rf2tc26