TL; DR: “Recommended” vs “Required” is subject to debate. Better off implementing the full list, published here.  I’ve been asked to help a few organizations recently that were all running into...

 TL ; DR: Run this.  There were some wicked vulnerabilities patched this year in the world of the Microsoft Store (aka UWP apps), and the high amount of scan detections revealed a critical mistake: Many organizations, in an...

 TL; DR: Configure the Windows SSO Feature in Settings -> Privacy & Security -> Logins and Passwords  Typically, around the same time that an organization migrates to Office365, they examine and implement several...

 TL; DR: Use a Client IT Tools policy instead of a path exclusion.  A couple of times in the past year, I’ve ran into issues with Bit9 blocking a Configuration Manager client upgrade. The strange part is that the product...