u/Conditional_Access

Yes use the built-in Microsoft tool, but one thing I used to do on these projects (because the end-customer would struggle to decide), is run the tree command on the directory you need to migrate, then get AI to categorise that into appropriate SharePoint site names.

Fire that off to the customer for approval/modifications and this should hopefully shave weeks off your project.

Are you willing to discuss/describe the problem here?

We might know, or be able to get it in front of the right person.

Lewis from inforcer here.

We heard the feedback from partners and prospects on this exact problem. We knew that for MSPs who manage many tenants with low user counts, the per-tenant pricing model wasn't economically attractive enough, so we introduced some new SKUs and methods:

• Standard = For M365 Business Basic/Standard customers
• Premium = For M365 Business Premium or above

Also, you can now pay per-user/month.

We work with partners to give them the best possible price for their setup.

Not just you 😂

Microsoft, Anthropic, Meta, Open AI are all struggling to find ways to make a profit from this thing.

I made a simple tool to help with part of this problem:

https://lewis-barry.github.io/RMM-Blocker/

For a softer approach, start with the network blocking indicators.

Hah, yes it is. What I meant by that is, we're not building a third-party agent. The telemetry we can get from MDE's AV and EDR is so rich that we want that context to stay within your Microsoft tenant so the rest of the stack (and our response capability) benefits from it (Defender for Office 365 + Entra ID etc.).

Correct, the Pax8 Marketplace announcement was this week at Beyond EMEA 🎉

OP is asking about EDR too which we don't have today, but we're working on expanding TDR coverage to include endpoints. Telemetry collection and response will fully leverage MS XDR.

There is also this: https://learn.microsoft.com/sharepoint/sync-health?tabs=windows

There is so much more in Business Premium beyond a few Microsoft Managed CA policies that justify the price tag.

Block Chrome, get them to justify why Edge is needed :D

The blocking service in the Edge Management portal just deploys applocker. You can play around with this site I put together which uses App Control for Business instead: https://lewis-barry.github.io/RMM-Blocker/browsers.html

Kelvin sets traps for bot and monitors their activity.

Here is one he did earlier: https://www.reddit.com/r/msp/comments/1vbtx1o/im_looking_for_a_new_rmmpsastack_provider/

I tried this exercise in the last MSP I worked at and concluded that there still isn't anything else out there that considers all the necessary items of MSP project management like ConnectWise does.

I cannot understand why no other product has tried to solve this problem.

I'm speaking as me, with my vendor hat off, no affiliation with CW whatsoever.

I spent one entire weekend once Googling and trialling about 15 different solutions and none of them manage to combine billable time, hours, and tasks/milestones in a way that makes sense for a services business. The ones that look nice have no finance options at all, and the ones that do have very limited ways of working out how much something costs, none of which makes sense for how we worked.

The inforcer TDR offering launched in September, and it is available as a standalone item.

(Not here to pitch, go figure out what's best for you 🙂)

View -> Show -> Text Flow ?

You're welcome to drop in the WinAdmins discord and ask, plenty of good folk who'll help you out.

AI tools run as the end-user. Your AV/EDR is protecting the device, and while the user is signed in, it's protecting what actions come the AI tool. That includes calls and visits to URLs, and anything it downloads.

The protection strategy here is not different to what you should already be doing. Unless part of your strategy is to block ungoverned AI tools running locally.

Not sure why you're being downvoted. This to my knowledge is the only commercially available solution that attempts to make native WDAC usable. And Kim and Tom are amazing at it.

Nope. Windows Hello counts as MFA and refreshes the PRT. Being asked to do MS Auth MFA every 3 days was inconvenient for no upside.

I hate to break it to you, but nobody is going to buy a vibe-coded tool who's website has no information about the people who made it, or what the company is.

Your 404 page has a missing logo on the bottom too.

Conditional Access session timeouts on Entra Joined, Intune enrolled Windows devices, every 3 days... with Windows Hello working fine.

I did one with Andrew before this year's RoB.

Always down to chat Microsoft Security!

No, the anchor policy stays assigned, then this new multi-phase release is targeted. There are no other Feature Update policies.

Not seeing this behaviour in my tenant.

Using Autopatch for everything. The FU deferrals are set to 0 days in the Autopatch group settings, and the anchor policy for FU is set to 25H2.

All I did yesterday was create a new FU type "Create Autopatch multi-phase release" set to 26H2 and selected my AP groups, and within a few hours the test devices got the update since it was set to immediate and all other rings show the number of devices expecting it and the dates it will happen.

Nothing has updated to 26H2 that isn't in the test group.

Yes it's in Autopatch. Just created the multi-phase release!