Poor man’s EPM – delegate access to the LAPS password on a device basis.
(this alternative title is inspired by Jan Bakker’s “Poor man’s IGA” blog series)
All posts in category EntraID
Delegating LAPS password retrieval at device level
Posted by Daniel Kovacs on February 22, 2026
https://f12.hu/2026/02/22/delegating-laps-password-retrieval-at-device-level/
Entra App instance property lock vs SAML signing certificate – an uncommon way of self-sabotage
Recently I tried to set up ClaimXRay NG with the guidance of DSInternals, learned things, failed here and there and stumbled upon a totally-not-helpful error message: “There was an error in the uploading the private certificate and password. Please try again or contact support.” To cut to the chase: This message appeared when I was […]
Posted by Daniel Kovacs on January 29, 2026
https://f12.hu/2026/01/29/entra-app-instance-property-lock-vs-saml-signing-certificate-an-uncommon-way-of-self-sabotage/
Multitenant organization “cheat” to add group(s) to the default sync scope
Back in the days when M365 MTO was in preview, it was possible to add group(s) to the default sync scope – today, the documentation states that if you want to sync groups, “you must configure cross-tenant synchronization directly in Microsoft Entra ID”. It doesn’t say “it is impossible to add groups to the default […]
Posted by Daniel Kovacs on January 12, 2026
https://f12.hu/2026/01/12/multitenant-organization-cheat-to-add-groups-to-the-default-sync-scope/