Andy Kemp Consulting · Documentation
Guides for the tools, and how to run them well#
Microsoft 365 security, identity and migration, built from real projects in SMB and enterprise tenants.
How each tool works, what it changes in your tenant, the permissions it needs and why, and what to do when something doesn't go to plan.
Tools
Pick a tool for its guide.
New · v3
Auth-Onboard#
Passkey and MFA campaigns for Entra ID: find who's still on SMS or codes, invite them in batches in your branding, follow up automatically and report progress. Installs into your own Azure from the browser.
New · v2
AVD Deploy#
Design, check and deploy Azure Virtual Desktop into your own subscription step by step, then finish the Entra and Conditional Access setup. Runs in your browser.
New · v2
W365 Deploy#
Set up Windows 365 Cloud PCs in your own tenant step by step: the provisioning policy, user settings, groups and licences. Runs in your browser; no Azure subscription needed.
v2
Tenant Audit#
Read-only security and compliance assessment for Microsoft 365 tenants: three scoring dimensions, eight analysers, four compliance frameworks, and PDF and PowerPoint reports.
Privileged Path#
The framework from the book: a quick assessment, the Trust Levels, and privileged access workstations.
DNS Migrator#
Move DNS zones from any provider to Cloudflare cleanly, without mangling records. DNS-over-HTTPS scanning, Azure DNS export, a web UI and a PowerShell CLI.
Win11 Image Prep#
Slipstream drivers into Windows 11 ISOs, strip bloatware, choose editions and build bootable USB drives.
Legacy · v2
MFA-Onboard-Tool#
The previous, script-deployed MFA onboarding tool (SharePoint and Logic Apps). Replaced by Auth-Onboard.