CloudekMicrosoft Entra
Microsoft Entra Hybrid Join Troubleshooting: Find the Failed Phase
Use dsregcmd, failure phases and current Microsoft guidance to troubleshoot Microsoft Entra hybrid join errors without guessing at fixes.
Read the guideCloudek field notes
Practical guides for cloud and Microsoft 365 teams
Clear walkthroughs for identity, email security, infrastructure and safer operations.
All guides are shown.
No guides match. Try another search or select “All guides”.
Microsoft 365 mail flow
Enhanced Filtering for Connectors in Exchange Online: Check the Mail Route First
Learn when Exchange Online Enhanced Filtering for Connectors fits, what to verify first, and how to test a change safely.
Read the guideidentity
On-Prem AD vs Hybrid vs Azure AD Join: Key Differences
Compare on-premises AD domain join, Microsoft Entra join and hybrid join. Learn how registration differs, what each model needs, and how to choose.
Read the guideidentity
Seamless SSO Kerberos Key Rollover: Safe Steps
A cautious guide to Microsoft Entra Seamless SSO Kerberos key rollover, per-forest safety, required roles, PowerShell steps, and RC4-to-AES planning.
Read the guideai-operations
Claude Code admin automation: a safe setup guide for IT admins
Claude Code admin automation, set up safely: CLAUDE.md, permission modes, sandbox, MCP, hooks, scheduled tasks, logging and cost, from Anthropic docs.
Read the guideai-operations
Codex admin automation: a safe setup guide for IT admins
How to set up Codex admin automation safely: AGENTS.md, sandbox and approval modes, MCP, scheduled tasks, what to log and the cost model, from OpenAI docs.
Read the guideai-operations
Codex vs Claude Code for admin automation: a side-by-side comparison
Codex vs Claude Code for admin automation in one table: setup files, permissions, plugins, scheduling, logging, team controls, pricing, and how to choose.
Read the guideidentity
Conditional Access Review Checklist: 12 Things to Check in Your Tenant
Twelve Conditional Access checks: break-glass accounts, report-only mode, legacy authentication, admin MFA, device compliance, guests and ownership.
Read the guideemail-security
DMARC Rollout Plan: From p=none to p=reject Without Losing Mail
A staged DMARC rollout plan from p=none to p=reject: find senders, read aggregate reports, fix alignment, then quarantine and reject safely.
Read the guideAzure cost governance
On-premises Hyper-V vs Azure VMs vs Azure Local for a 20-VM small business: a three-year cost model
Hyper-V vs Azure VMs vs Azure Local for 20 VMs over three years: verified Azure prices, labelled assumptions and what flips the answer.
Read the guideMicrosoft 365 licensing
Business Premium vs E3: 3-Year Cost, P1 vs P2
Business Premium vs E3 for 50 users over three years: USD and INR list-price cost, the add-ons E3 needs for parity, and what changes the answer.
Read the guideidentity
Microsoft Entra AADSTS Error Codes: The Ones You Will See and How to Fix Them
Fifteen common Microsoft Entra AADSTS error codes with the usual cause and first check for each, and how to read the sign-in log before changing anything.
Read the guidepowershell
Before You Run That PowerShell Script: A Safety Checklist for Admins
A practical PowerShell script safety checklist: why execution policy is not a security boundary, reading before running, -WhatIf, test tenants and signing.
Read the guideWindows Server
Windows Server Licensing Explained: Standard vs Datacenter, Hyper-V and CALs
Windows Server licensing explained: core licenses, Standard vs Datacenter for Hyper-V VMs, user and device CALs, RDS CALs and Azure Hybrid Benefit.
Read the guideai-operations
AI Agent Audit Logs: What to Record and Example Log Entries
An AI agent audit log schema, field by field, with a synthetic JSON example: actor, delegation, tool, result, approval, policy and correlation ID.
Read the guideemail-security
How to Check Email Domain Records: MX, SPF, DKIM and DMARC Lookup
Guide to email domain records: what MX, SPF, DKIM and DMARC do, how to read a lookup, and common mistakes such as the SPF 10-lookup limit and +all.
Read the guidenetworking
CIDR Notation Explained: Ranges, Masks and a /8 to /32 Cheat Sheet
CIDR notation explained with worked /24, /26, /15 and IPv6 /64 examples, a /8 to /32 mask and size cheat sheet, and free calculators to check your maths.
Read the guidemicrosoft-365
Microsoft 365 Mail Flow Troubleshooting: A Step-by-Step Order That Saves Time
Troubleshoot Microsoft 365 mail flow in a fixed order: message trace, MX, SPF, DKIM and DMARC, connectors, transport rules, quarantine and bounce codes.
Read the guidemicrosoft-365
A Microsoft 365 Tenant Security Baseline You Can Check in an Afternoon
A read-first Microsoft 365 tenant security baseline: MFA, Conditional Access, legacy authentication, admin roles, mailbox auditing and external sharing.
Read the guidehybrid-identity
Moving from On-Premises Active Directory to Microsoft Entra ID Hybrid: A Pre-Migration Checklist
A practical checklist for admins planning Microsoft Entra ID hybrid: directory cleanup, UPNs, sign-in method, sync server, devices, pilot and rollback.
Read the guidewindows-server
Migrating Roaming Profiles and Folder Redirection from an RDS Server to Client Desktops
Migrate roaming profiles and folder redirection from an RDS server to client desktops: inventory, copy, Group Policy, pilot, cutover and rollback.
Read the guideAI Security
Your AI Can Read a Trap: Spot Prompt Injection in a Support Ticket
A simple visual guide to spotting instructions hidden in support tickets, keeping AI on task, and checking actions before they reach your systems.
Read the guidenetworking
IPv4 Subnet Calculator: Check Your Network Range at a Glance
Plan an IPv4 subnet with a calculator, understand CIDR and host ranges, and verify the result before assigning addresses to devices.
Read the guidesecurity
JWT Claims Inspector: See What Your Token Is Telling You
Learn what JWT claims mean, inspect a synthetic token safely, and understand why decoding does not verify a signature, issuer, audience, or permissions.
Read the guidesecurity
Log Secret Redactor: Before You Paste Logs into AI, Do This
Turn a short log into a cleaner review copy before asking AI or support. Try Cloudek’s free local secret redactor with a simple before-and-after example.
Read the guideSecurity
Azure MFA: Methods, Policies and Safer Sign-In
Understand Microsoft Entra MFA methods, security defaults and Conditional Access, then plan phishing-resistant sign-in, fallback and account recovery.
Read the guidepassword security
How to Share Passwords Securely with a One-Time Link
Use your approved password manager for regular access. For a one-time handoff, send a five-minute link and its unlock key separately.
Read the guideai-operations
AI Agent Audit Trail: Prove Who Asked and What Happened for Each Tool Call
An AI agent audit trail links who asked, the approved tool, target scope, result and time for each tool call. See which log fields to record.
Read the guideAI security
AI Agent Security Incidents: What Hugging Face, Mexico, and LiteLLM Actually Show
Separate documented AI-assisted incidents from viral retellings, then take practical controls for agent identity, egress, package integrity and response.
Read the guideai-security
AI Agent Identity: Don’t Borrow Your Organization’s Global Administrator Account
AI agent identity should be distinct, least-privileged, scoped to approved tools, and revocable instead of borrowing an administrator’s account.
Read the guideAI automation boundaries
AI-Generated PowerShell Needs a Preview Gate: Human Approval Before Changes
Keep AI-generated PowerShell inert until a person verifies the tenant, target, permissions, effect, and rollback using a trusted approval path.
Read the guideexchange-security
Isolating Malicious Exchange Inbox Rules: Preventing Wire Fraud & BEC Loops
A read-only investigation sequence for suspicious Exchange inbox rules, with audit correlation, bounded evidence, and no automatic rule changes.
Read the guidemicrosoft-365
Microsoft 365 Copilot Readiness: Find SharePoint Oversharing Before It Finds You
Microsoft 365 Copilot readiness means reviewing SharePoint access, broad links, owners, and governance signals—not assuming Copilot bypasses permissions.
Read the guidemicrosoft-365
Microsoft 365 License Audit: Automate Cost Reviews with Read-Only Graph API Tokens
A Microsoft 365 license audit from read-only Graph data: find license-review candidates without treating inactivity as proof a seat can be reclaimed.
Read the guidepassword security
Secure Password Generator: Create a Strong Password. Share It Once.
Generate a password in your browser, then optionally share it using a one-time link that expires in five minutes.
Read the guideAzure cost governance
SIEM Cost Reduction Without Blind Spots: An Azure Monitor Log-Routing Playbook
SIEM cost reduction that keeps detections: route, tier and retain Azure Monitor logs by measured value instead of dropping telemetry blindly.
Read the guideai-operations
The Zero-Trust Automation Boundary: Why OpsPilot Sandboxes AI PowerShell Suggestions
Why a cloud-operations assistant should convert intent into fixed, validated read queries instead of executing model-generated PowerShell scripts.
Read the guideMicrosoft Entra
Azure AD Is Now Microsoft Entra ID: What Changed and What Did Not
Azure AD was renamed Microsoft Entra ID in 2023. What changed (names, licence labels), what did not (URLs, APIs, features), and old names to retire.
Read the guideMicrosoft Entra
Can I Replace Active Directory with Azure AD (Microsoft Entra ID)?
Microsoft Entra ID (formerly Azure AD) is not a cloud copy of Active Directory. See what it replaces, what it cannot, and the realistic paths.
Read the guideMicrosoft Entra
Windows Autopilot Overview: Deployment Modes, Requirements and Entra Join
What Windows Autopilot does, how devices register and enrol through Microsoft Intune, the deployment modes, and the requirements to check first.
Read the guideMicrosoft 365
Microsoft 365 Backup: Why Retention Is Not the Same as Recovery
Microsoft 365 keeps your service running, but you are responsible for your data. Where retention falls short, what a backup adds, and how to choose one.
Read the guideMicrosoft Entra
Self-Service Password Reset (SSPR) in Microsoft Entra ID, Formerly Azure AD
Self-service password reset (SSPR) in Microsoft Entra ID, formerly Azure AD: how it works, writeback, licensing, registration and rollout steps.
Read the guideMicrosoft Entra
Azure AD Password Protection: Microsoft Entra Banned Password Lists Explained
Azure AD Password Protection is now Microsoft Entra password protection: the global and custom banned lists, scoring, on-premises agents and licensing.
Read the guideAzure security
JIT VM Access (Just-in-Time) in Microsoft Defender for Cloud Explained
How just-in-time (JIT) VM access in Microsoft Defender for Cloud, formerly Azure Security Center, closes RDP and SSH ports until a request is approved.
Read the guideMicrosoft Entra
What Are Azure AD Access Reviews? Microsoft Entra Access Reviews Explained
Azure AD access reviews are now Microsoft Entra access reviews: what can be reviewed, who reviews, how decisions apply, and what licence is needed.
Read the guideMicrosoft Entra
What Is Azure AD Privileged Identity Management (PIM)? Microsoft Entra PIM Explained
Azure AD Privileged Identity Management is now Microsoft Entra PIM: eligible vs active roles, activation controls, reviews, licensing and rollout steps.
Read the guideMicrosoft Entra
Azure AD Premium P1 vs P2: Microsoft Entra ID P1 vs P2 Compared
Azure AD Premium P1 vs P2 is now Microsoft Entra ID P1 vs P2. See which features each tier adds, which Microsoft 365 plans include them, and how to choose.
Read the guideExchange email
Shared Mailbox in Microsoft 365: Licensing, Permissions and Best Practices
What a shared mailbox in Microsoft 365 is, when it needs no licence, how Full Access, Send As and Send on Behalf work, and security best practices.
Read the guideExchange email
Microsoft 365 SMTP Relay Options: SMTP AUTH, Direct Send, Connector Relay and HVE
Compare Microsoft 365 SMTP relay options for printers and apps: SMTP AUTH, connector relay, direct send and High Volume Email, with limits and warnings.
Read the guideMicrosoft Entra
Azure Multi-Factor Authentication (Microsoft Entra MFA): Methods and Setup
Azure MFA is now Microsoft Entra multifactor authentication. See how it works, which verification methods exist, how to enable it, and what to avoid.
Read the guideMicrosoft Entra
Azure AD Security Defaults (Microsoft Entra): What They Turn On and When to Move On
Security defaults in Microsoft Entra ID, formerly Azure AD: what they enforce, who they suit, and when to switch to Conditional Access instead.
Read the guideMicrosoft Entra
What Is Azure AD Identity Protection? Microsoft Entra ID Protection Explained
Azure AD Identity Protection is now Microsoft Entra ID Protection: risk detections, user and sign-in risk, risk-based policies, reports and the P2 licence.
Read the guideMicrosoft Entra
What Is Conditional Access? Microsoft Entra Conditional Access Explained
Conditional Access in Microsoft Entra ID (Azure AD) explained: signals, decisions, common policies, licensing and how to roll them out safely.
Read the guideEmail security
Improve Email Deliverability: PTR, SPF, DKIM and DMARC Basics
Improve email deliverability with the DNS basics: reverse DNS (PTR), SPF, DKIM and DMARC, plus Microsoft 365 steps, bulk sender rules and a checklist.
Read the guideExchange email
Exchange Hybrid Deployment Prerequisites: Checklist for Exchange Online
Checklist of Exchange hybrid deployment prerequisites before running the Hybrid Configuration wizard: versions, updates, DNS, certificates, sync and ports.
Read the guideExchange email
Exchange Cutover Migration to Microsoft 365: When It Fits and How It Works
How an Exchange cutover migration to Microsoft 365 works, the mailbox limits, the steps, the MX change and when to choose hybrid or IMAP instead.
Read the guideExchange email
Email Migration Methods to Microsoft 365: Cutover, Staged, Hybrid and IMAP
Compare cutover, staged, hybrid and IMAP email migration to Microsoft 365: size limits, supported sources, coexistence, and how to choose the right method.
Read the guideMicrosoft Entra
Azure AD DS vs Self-Managed AD DS: Microsoft Entra Domain Services Compared
Compare Azure AD DS (now Microsoft Entra Domain Services) with self-managed AD DS on VMs or on-premises: features, limits, and when each fits.
Read the guideMicrosoft Entra
Hybrid Azure AD Join Prerequisites: Microsoft Entra Hybrid Join Checklist
Hybrid Azure AD join is now Microsoft Entra hybrid join. A planning checklist for prerequisites: sync, SCP, networking, unsupported scenarios and imaging.
Read the guideMicrosoft Entra
What Is Azure AD DS? Microsoft Entra Domain Services Explained
What Azure AD DS, now Microsoft Entra Domain Services, is: a managed domain with domain join, LDAP and Kerberos, how it syncs, and its limits.
Read the guideWindows security
CVE-2020-1472 Zerologon: What It Was and How to Confirm Domain Controllers Are Safe
Zerologon (CVE-2020-1472) was a critical Netlogon flaw. What it allowed, how Microsoft's enforcement phases worked, and how to confirm a domain is safe.
Read the guide