CMMC Level 2 Intune: Using Shared PC Mode the Right Way
A shared workstation can help your team, or it can wreck your audit trail. In a CMMC Level 2 Intune deployment, that difference usually comes down to identity, cleanup, and…
CMMC Level 2 DNS Filtering Checklist for Endpoints and Phones
One missed DNS setting can hand a phishing site a straight path to a managed device. For CMMC DNS filtering, I treat it as a practical control that lowers exposure…
A Practical CMMC Tabletop Template for Microsoft 365 Incidents
A generic tabletop won’t help me in a CMMC assessment or during a real Microsoft 365 incident. It also won’t help when an Entra ID admin starts approving MFA prompts…
CMMC Access Packages in Entra ID for Level 2 Readiness
Access control usually breaks in ordinary moments, new hires, rushed admin requests, outside contractors, and projects that never get cleaned up. When I review CMMC Level 2 gaps, those are…
Using Entra ID’s MFA Registration Campaign for CMMC Level 2
An MFA policy breaks the first time an employee has no second factor enrolled. I see that gap often when companies begin CMMC Level 2 work in Microsoft Entra ID.…
A Practical Power Apps Governance Checklist for CMMC Level 2 in Microsoft 365
A Power App can go from harmless helper to audit problem in a week. I see it happen when a team builds a quick form, connects it to live business…
CMMC Level 2 Lost Device Response Plan With Intune
Lose a laptop that handled CUI, and the clock starts before anyone finds the charger. When I build a CMMC lost device response plan, I focus on the first hour,…
CMMC Level 2 Teams External Access Policy Checklist
One open federation setting can weaken an otherwise solid CMMC boundary. I’ve seen Microsoft Teams become an untracked side door because nobody wrote down who could talk to whom, under…
Entra Connect Hardening Checklist for CMMC Level 2
One weak sync server can open a path through an otherwise solid CMMC Level 2 program. When I review hybrid identity in regulated environments, I treat Microsoft Entra Connect as…
Intune Device Cleanup Policy for Stale Endpoints in CMMC Level 2
When I review a Microsoft 365 tenant before a CMMC readiness effort, stale devices jump out fast. They fill reports with ghosts, blur asset counts, and make old access paths…