Microsoft Modern Workspace, in the open — Intune, Entra, Graph, and how it actually works underneath the portal.https://ketankamble.com/ Ketan Kamblehttps://github.com/KetanKamble3894/zero-access-agenten Wed, 29 Jul 2026 21:03:45 -0000 Wed, 29 Jul 2026 21:03:45 -0000 1440 MkDocs RSS plugin - v1.19.0 None https://ketankamble.com/ Defender / Security Entra ID How it works Intune <h1>How Intune actually decides a device is compliant</h1> <p>When you switch on a compliance policy, the portal eventually shows a green check. But what happens <em>between</em> "device enrolled" and "Conditional Access lets it in"? The answer isn't a live query — it's a check-in loop, an expiry clock, and a handoff to Entra ID.</p> https://ketankamble.com/blog/how-intune-actually-decides-a-device-is-compliant/ Wed, 29 Jul 2026 00:00:00 +0000 Ketan Kamblehttps://ketankamble.com/blog/how-intune-actually-decides-a-device-is-compliant/ How-to Intune Power BI <h1>An endpoint report from read-only snapshots</h1> <p>You don't need a live tenant connection to build a useful Power BI report. Point it at a sanitized CSV a read-only job already wrote, and the whole report stays containable — here's the wiring, end to end.</p> https://ketankamble.com/blog/an-endpoint-report-from-read-only-snapshots/ Fri, 24 Jul 2026 00:00:00 +0000 Ketan Kamblehttps://ketankamble.com/blog/an-endpoint-report-from-read-only-snapshots/ Behind the portal Intune Microsoft Graph <h1>The Graph call behind the portal click</h1> <p>Every click in the Intune and Entra portals fires a Microsoft Graph call underneath — and once you can see it, the portal stops being magic. This series decodes what the portal actually sends, and which permission each call needs.</p> https://ketankamble.com/blog/the-graph-call-behind-the-portal-click/ Wed, 22 Jul 2026 00:00:00 +0000 Ketan Kamblehttps://ketankamble.com/blog/the-graph-call-behind-the-portal-click/ Entra ID Microsoft Graph Zero-Access <h1>The Sites.Selected 403 that started it all</h1> <p>It began with a permission error that wouldn't quit. Sites.Selected looked right, the role assignment looked right — and Graph still returned 403. Chasing <em>why</em> led somewhere better than a fix: an architecture where the AI never touches a live system at all.</p> https://ketankamble.com/blog/the-sitesselected-403-that-started-it-all/ Mon, 20 Jul 2026 00:00:00 +0000 Ketan Kamblehttps://ketankamble.com/blog/the-sitesselected-403-that-started-it-all/