README.TXT

iphase.dk - Michael Mardahl, MVP

Personal Tech Blog

Welcome to my corner of the internet, styled

as Norton Commander for DOS -- because real

sysadmins never left the command line.

I write about Microsoft Entra ID, Intune,

Windows 365, Azure, and everything in between.

[2026-03-14] No VPN, No Internet: Building a Windows Firewall Kill Switch for FortiClient with Intune

[2026-01-10] Passkeys and the Personal Phone Problem - An MFA Update for 2026

[2026-01-08] ConsentFix - The Quickfix

[2025-12-30] Unlocking Self-Service Account Recovery (SSAR) in Microsoft Entra

[2024-02-02] 2 for 1 - Mail Enable Unlicensed Admin Accounts - 2024 Edition

See ABOUT.TXT for more about me.

See CONTACT.TXT to get in touch.

See LINKS.TXT for resources.

Struggling with the DOS view? Press F4 or

click "F4 Read" to switch to a comfortable

reading layout with larger text and a

dyslexia-friendly font. Press F4 again

or Escape to return here.

Navigate: Arrow keys, Enter, Backspace

Function keys: F1=Help F3=Home F4=ReadMode

F5=About F7=Posts F8=Contact

F10=LinkedIn

Welcome to my corner of the internet, styled as Norton Commander for DOS — because real sysadmins never left the command line.

Microsoft MVP — Security, Identity & Access, Modern Work

I write about Microsoft Entra ID, Intune, Windows 365, Azure, and everything in between.

2026-03-14 No VPN, No Internet: Building a Windows Firewall Kill Switch for FortiClient with Intune
How to prevent Windows 11 machines from accessing the internet when not connected to your corporate FortiClient VPN — using Windows Firewall and Intune Endpoint Security policies.
2026-01-10 Passkeys and the Personal Phone Problem – An MFA Update for 2026
An update on MFA in 2026: Microsoft's mandatory MFA enforcement, passkey types (synced vs device-bound), addressing personal phone resistance, and self-enrollment capabilities.
2026-01-08 ConsentFix - The Quickfix
How to protect your tenant from the ConsentFix OAuth attack by pre-creating and locking down service principals for vulnerable Microsoft first-party apps using PowerShell.
2025-12-30 Unlocking Self-Service Account Recovery (SSAR) in Microsoft Entra
A step-by-step guide to configuring Self-Service Account Recovery (SSAR) in Microsoft Entra ID, enabling users to regain access through government ID verification and biometric liveness checks.
2024-02-02 2 for 1 - Mail Enable Unlicensed Admin Accounts - 2024 Edition
How to save on Exchange Online licensing for admin accounts by using plus addressing or distribution list redirection to receive admin mail without purchasing additional licenses.