Chris Sonko tech blog

  • Backing up Intune configuration

    For a project I’m working on, I needed a way to copy Intune configurations from one tenant to another one. I mainly wanted to copy things like configuration profiles, compliance policies and app protection policies. When setting up a brand new tenant in Intune, these policies and configurations can be quite tedious to configure if…

  • My CompTIA Security+ experience

    I recently cleared the Security+ exam from CompTIA and wanted to give my perspective on my certification experience as someone only used to Microsoft exams. Security+ is a vendor agnostic cybersecurity certification that covers a broad range of security topics including threat analysis, risk mitigation, security controls for applications, networks and devices, and relevant security…

  • Intune devices failing compliance due to “machine risk score”

    I recently encountered a compliance issue for an Intune enrolled device. This issue only pertained to one of several enrolled devices.  As you can see, this device failed the Microsoft Defender for Endpoint compliance policy setting called “Require the device to be at or under the machine risk score”. This is how my compliance policy was…

  • Blocking downloads in SharePoint using Conditional Access policies

    Many companies work towards improving their security posture by taking extra measures to protect their data. One of these measures is to control where company data can be stored. Much of it might be stored in SharePoint, which is widely used by organizations, and you might not want to allow this data to be downloaded…