Shadow IT GuyField notes, how-tos and honest takes on Microsoft 365, Entra ID, Intune, security tools and IT operations.https://shadowitguy.com/Block legacy authentication with Conditional Accesshttps://shadowitguy.com/articles/block-legacy-auth-conditional-access/https://shadowitguy.com/articles/block-legacy-auth-conditional-access/Build a tenant-wide Conditional Access policy that blocks legacy authentication, test it in report-only mode, then turn it on.Sun, 11 Oct 2026 00:00:00 GMTHow-ToEntra IDConditional AccessSecurityPowerShellShadow IT GuySet up emergency access accounts you can trusthttps://shadowitguy.com/articles/emergency-access-accounts/https://shadowitguy.com/articles/emergency-access-accounts/How to build and protect two break-glass Global Administrator accounts so a bad Conditional Access policy or an MFA outage never locks you out of your tenant.Sun, 11 Oct 2026 00:00:00 GMTBest PracticeEntra IDConditional AccessSecurityShadow IT GuyGet-MgUser returns blank Department and other propertieshttps://shadowitguy.com/articles/get-mguser-blank-properties/https://shadowitguy.com/articles/get-mguser-blank-properties/Why Get-MgUser leaves Department, AccountEnabled and other columns empty, and the one parameter that fixes it.Sun, 11 Oct 2026 00:00:00 GMTField NoteEntra IDPowerShellShadow IT Guy