Skip to content
Andy Kemp Consulting

Andy Kemp Consulting · Documentation

Guides for the tools, and how to run them well.

How each tool works, what it changes in your tenant, the permissions it needs and why, and what to do when something doesn't go to plan.

Atlas, the Andy Kemp Consulting robot, reading a document

Find your tool

Grouped as in the menu on the left. Each card goes straight to the pages people use most.

Identity and privileged access

New · v3

Auth-Onboard#

Passkey and MFA campaigns for Entra ID: find who's still on SMS or codes, invite them in batches in your branding, follow up automatically and report progress. Installs into your own Azure from the browser.

Open the guide

Framework

Privileged Path#

The framework from the book: a quick assessment, the Trust Levels, and privileged access workstations.

Open the guide

Microsoft 365 security

v2

Tenant Audit#

Read-only security and compliance assessment for Microsoft 365 tenants: three scoring dimensions, eight analysers, four compliance frameworks, and PDF and PowerPoint reports.

Open the guide

Beta · v1.0

AKC AUP#

Put your acceptable use policy in front of every user and guest as Microsoft Entra Terms of Use, enforced by Conditional Access: report-only first, break-glass always left out, and a deployment record for your audit file. A Windows app.

Open the guide

Cloud desktops

New · v2

AVD Deploy#

Design, check and deploy Azure Virtual Desktop into your own subscription step by step, then finish the Entra and Conditional Access setup. Runs in your browser.

Open the guide

New · v2

W365 Deploy#

Set up Windows 365 Cloud PCs in your own tenant step by step: the provisioning policy, user settings, groups and licences. Runs in your browser; no Azure subscription needed.

Open the guide

Windows and Intune

Windows app

Win11 Image Prep#

Slipstream drivers into Windows 11 ISOs, strip bloatware, choose editions and build bootable USB drives.

Open the guide

Beta · v1.0

AKC AppDeploy#

Package, test, upload and update Win32 apps for Intune with a least-privilege account: installer recognition, a local test run, detection, the Company Portal listing, assignments, and supersedence. A Windows app.

Open the guide

Exchange and network

Windows app

Exchange Certificate Manager#

Request, renew, import and deploy Exchange certificates across every server, health-check them, and use Let's Encrypt with automatic renewal.

Open the guide

Ubuntu server

HAPMan#

Run several servers behind one public IP: a free, Entra-protected web admin for HAProxy on Ubuntu that routes by hostname, with staged changes, history, health checks and Drain for patching.

Open the guide

Web UI and CLI

DNS Migrator#

Move DNS zones from any provider to Cloudflare cleanly, without mangling records. DNS-over-HTTPS scanning, Azure DNS export, a web UI and a PowerShell CLI.

Open the guide

Legacy

Legacy · v2

MFA-Onboard-Tool#

The previous, script-deployed MFA onboarding tool (SharePoint and Logic Apps). Replaced by Auth-Onboard.

v2 documentation