Notes
Working notes on Azure cost and security, Microsoft 365, automation and ISO 27001. Written from running all of it for one small company.
All notes
IT documentation best practices small business advice keeps missing
The three pages that actually get consulted, where to keep them, and where the ISO 27001 requirement and usefulness diverge.
Microsoft 365, Entra and Intune
Microsoft 365 guest user cleanup: 340 externals, 12 of whom you can name
Where guests come from, why last sign-in is the wrong signal, and the review that removes access without removing a live client contact.
EU AI Act SaaS compliance: transparency now, high-risk later than you think
What applies today, what the Digital Omnibus deferred, and which ISO 27001 artefacts already cover part of it.
PowerShell exit codes: scheduled scripts that fail loudly
Why a script that always exits 0 has decorative monitoring, and three specific traps that produce a silent success.
An Azure tagging strategy people will actually follow
Four tags, enforcement through Azure Policy rather than reminders, and what to do when the report says untagged 61 percent.
Azure RBAC review: finding the Owners who left in 2022
Identity not found rows, Owner at subscription scope, guests with standing access, and a review cadence that satisfies an auditor.
Cyber Essentials vs ISO 27001 vs SOC 2: which one the customer asked for
What each certification covers, UK versus US buyer expectations, and a sequencing decision that saves months.
IT team of one: what to do first when everything is priority one
A triage order that holds under pressure, what to automate, what to outsource, and how to say no in a way that sticks.
Microsoft 365, Entra and Intune
Privileged identity management small business tenants can actually run
Why standing Global Admin is the problem even with four admins, eligible versus active, and approval workflows when the approver is the requester.
Joiner mover leaver automation with Graph: the script that never forgets
What a leaver process must actually do, the order that avoids a disconnected mailbox, and why the report is the point.
Azure snapshot cost: a museum of disks nobody visits
Incremental versus full snapshot billing, the ones backup tools leave behind, and retention as a decision rather than an accident.
Azure storage account public access: how to find the one you forgot about
The account setting and the container setting are different things, and SAS tokens expiring in 2099 are their own category of problem.