Generated by All in One SEO v4.9.7.2, this is an llms.txt file, used by LLMs to index the site.

# Prof-IT Services

Enterprise Security, for every business!

## Sitemaps

- [XML Sitemap](https://pro-it.us/sitemap.xml): Contains all public & indexable URLs for this website.

## Posts

- [Blog](https://pro-it.us/blog/) - 2578 Broadway #579 New York 10025 United States Paxlaan 10 #9129 2131 PZ, Hoofddorp The Netherlands support@pro-it.us +31 20 399 1110 LinkedIn
- [Automating Azure SQL Maintenance with Azure Automation](https://pro-it.us/blog/automating-azure-sql-maintenance-with-azure-automation/) - Keeping Your Azure SQL Databases Healthy: The Power of Automation In the realm of database management, maintaining optimal performance and storage efficiency for your Azure SQL Elastic pool and databases is critical. SQL databases are the backbone of countless business applications, supporting everything from transaction processing to analytics. However, as they grow over time, they
- [Microsoft 365 Security / Necessities / Checklist](https://pro-it.us/blog/microsoft-365-security-necessities/) - Microsoft 365 is often considered safe, as it's always up to date and maintained by Microsoft. Unfortunately, this is not true! Well, at least some parts aren't. There are quite some options and products/features that should be configured to limit risk and exposure. In this post, I’m outlining the most important security settings and products, everyone should implement.
- [Platform Upgrade: Microsoft 365 agentless CSS phishing protection](https://pro-it.us/blog/platform-upgrade-microsoft-365-advanced-agentless-phishing-detection/) - Exciting news! 🎉 We've recently created this advanced CSS phishing protection, and we're making it available for everyone, for free! Using custom CSS and a server-side solution, we can swiftly detect Man-in-the-middle (MITM) Phishing attacks, which MFA does not protect against. During each login, servers validate the login session, and users are alerted by a
- [The G-Door: Microsoft 365 & the risk of unmanaged Google Doc accounts](https://pro-it.us/blog/the-g-door-microsoft-365-the-risk-of-unmanaged-google-doc-accounts/) - It’s time to secure Google Workspace—even if you’re not using it. Read about our recent discovered vulnerability, called 'G-Door', which allows users to bypass Microsoft 365 conditional access rules.
- [Automate Azure SQL Backup with Private Links leveraging PowerShell and Automation Accounts](https://pro-it.us/blog/azure-sql-backup-with-private-links/) - Azure SQL Services work great, have high availability options, built-in backup functionality, but what if someone breaks into your Azure Tenants and deletes everything!? There are (expensive) SQL backup solutions that use various CPU-intensive techniques to backup databases, but there are Azure native techniques as well by using Az.SQL. The downside is that it's difficult
- [How to Guard Against Token Theft for Microsoft 365](https://pro-it.us/blog/how-to-guard-against-cookie-token-theft-for-microsoft-365-teams/) - How to Guard Against Token Theft for Microsoft 365 Session hijacking occurs when an attacker steals a valid session token—essentially, the key to a user’s active login session. In the case of Microsoft Teams, once a user logs in, their session token remains active and allows them to continue their work without repeatedly entering their
- [M365 Account Compromise Checklist](https://pro-it.us/blog/m365-account-compromise-checklist/) - A checklist to follow for Microsoft 365 accounts that are compromised
- [Malware Analysis - Shortcuts in zip file](https://pro-it.us/blog/malware-analysis-shortcuts-in-zip-file/) - Recently, we encountered two distinct variants of a payload delivered through Google Drive, both containing a malicious shortcut. While these threats were successfully mitigated, it's crucial to understand their mechanisms and implement protective measures. In this blog, we'll dissect these threats and explore strategies for defending against them. Threat Analysis The malicious shortcuts in the
- [Identifying Duplicate Files Across All SharePoint Sites Using PowerShell](https://pro-it.us/blog/identifying-duplicate-files-across-all-sharepoint-sites-using-powershell/) - Managing a SharePoint environment can be a complex task, especially when it comes to ensuring that your storage is being used efficiently. Duplicate files across various sites and document libraries can quickly consume valuable space, slow down search results, and create confusion among users. Fortunately, with the power of PowerShell and the PnP (Patterns and
- [IT-Boost TOTP Secret Exposure](https://pro-it.us/blog/it-boost-totp-secret-exposure/) - Recently, we discovered a security issue with how IT-Boost handles TOTP secrets. IT-Boost can calculate OTP codes, making it ideal for sharing credentials within a team. When a user loses access to IT-Boost, they also lose access to the credentials and TOTP generator. However, we found that TOTP secrets may not be as secure as
- [SOAR: Block Log Analytics IP Entities on Azure Frontdoor / WAF #2](https://pro-it.us/blog/block-sentinel-log-analytics-entities-on-azure-waf-2/) - Use this function and logic app, to block abusive IP addresses using a custom rule, that hit a certain block limit on Azure WAF / Frontdoor. Leveraging Log Analytics Alerts. This greatly improves security for your origins, as threat actors won't be able to scan indefinitely (or until rate limit is reached) for vulnerabilities. In
- [Balance Device Wave Groups for granular Intune deployments](https://pro-it.us/blog/balance-device-wave-groups-for-granular-intune-deployments/) - We've developed a C# Function App designed to balance devices from a main group into various Wave groups. This app can run on a recurring schedule, rebalancing devices as needed when there are changes in the number of devices due to growth or shrinkage.
- [Exchange Online External Forwarding Risk - quarantine bypass](https://pro-it.us/blog/exchange-online-external-forwarding-risk-quarantine-bypass/) - I've recently encountered an issue where malicious email was imported into the Zendesk platform, while it was successfully quarantined by Microsoft 365. In this post, I go over the options to mitigate this threat. The problem lies in the fact that forwarding takes place prior to the email being processed by Microsoft 365's spam and
- [Get Entra ID User Group Membership with PowerShell on endpoints](https://pro-it.us/blog/get-entra-id-user-group-membership-with-powershell-on-endpoints/) - Use this PowerShell script and Azure logic app to get the Entra ID Group membership of a user in a safe and secure way. I've created this solution to be able to execute certain code based on the user's group membership. Back in the day it would be easy to request the user's group memberships
- [Microsoft Sentinel: Malicious Inbox Rule V2](https://pro-it.us/blog/microsoft-sentinel-malicious-inbox-rule-v2/) - This improved Sentinel Analytics Rule can be used to detect malicious Inbox Rules used by threat actors to hide invoice fraud activity. I've used the Inbox rule currently available as a template within Sentinel, and modified it to alert on Outlook rules I encountered in the wild.
- [Azure Storage Account File Shares - Lessons learned](https://pro-it.us/blog/azure-storage-account-file-shares-lessons-learned/) - Azure File Shares do not behave the same as a SMB share hosted on a Windows Server and there are challenges when you connect from non-domain joined computers. In this blog I'll go over the lessons I learned implementing them. Feel free to shoot me a message on LinkedIn if you need help with any
- [HaloPSA Device Name Asset Tag Sync in C#](https://pro-it.us/blog/halopsa-device-name-asset-tag-sync-in-c/) - To make life a bit easier, I've written this C# .NET Core Console application to sync the asset device names to the Asset Tag so it is visible in the HaloPSA portal. The application loops through all the devices separately, so you might want to run it not too often to prevent rate limits. In
- [Synchronize SharePoint libraries on endpoints by leveraging PS, Logic Apps and Entra ID Group memberships!](https://pro-it.us/blog/sync-sharepoint-document-librarys-and-folders-with-azure-ad-group-assignments/) - Use this PowerShell script and Azure logic app to sync library's based on Azure AD Group assignments. Ever had to Sync 100 folders to 10 or more different security groups, and didn't want to create configuration profiles for each group? Or had to wait up to 8 hours before Intune finally synced the sites? Back
- [Azure App Service Pmv3 deployment & migration](https://pro-it.us/blog/azure-appservice-pmv3-deployment-migration/) - Microsoft has released a new Azure Mv3 series App Service Plan, which has double the amount of ram. In this blog I explain how to deploy and migrate your existing web apps. The M series are hosted on different servers, you won't be able to upgrade or scale to this plan. The subnet also can't
- [Streamlining Intune: Automate Changing Device Names to include Primary user UPN](https://pro-it.us/blog/streamlining-intune-changing-device-names-to-include-primary-user-upn-for-enhanced-management/) - Follow the steps in this blog to seamlessly rename your Intune devices, appending the primary assigned user's UPN along with a random suffix. I've created this Logic App that renames the devices as the Intune options are limited to the serial number and random generated values. Both are not easy to work with. I've chosen
- [[PS SCRIPT]: OneDrive Documents Redirection and Status check](https://pro-it.us/blog/ps-script-onedrive-documents-redirection-and-status-check/) - How do you ensure each endpoint is properly synced and redirected? What if important data is lost due to a misconfiguration? Run this script from RMM or Intune Proactive Remediations in the user context. Exit 1 and output are generated when issues occur. Do you need help with your Modern Workplace? Check out our service
- [SOAR: Block Sentinel IP Entities on Azure Frontdoor / WAF](https://pro-it.us/blog/block-sentinel-entities-on-azure-waf/) - Please read blog 2, using Log Analytics is more cost effective and doesn't have a 10 entity limit. https://potsolutions.nl/2023/05/20/block-sentinel-log-analytics-entities-on-azure-waf-2/ Azure Frontdoor is a powerful tool for managing web traffic, but it doesn't always provide enough protection against malicious incoming requests. In particular, it doesn't have a built-in feature for blocking IP addresses that are scanning

## Pages

- [Home](https://pro-it.us/) - Microsoft 365 phishing protection Our advanced phishing detection works on any device, for all users, and protects against modern Man In The Middle phishing attacks, which regular MFA does not protect against. Phish login demo is shown in the video, confirmed by the red background. This check is performed each time a user signs in,
- [MSP](https://pro-it.us/msp/) - Leverage our white-labeled Modern Workplace Services to improve the environment of your clients. Prof-IT's standardized Managed M365 Intune environment suits every business, and is scoped to mobile, physical devices and virtual environments such as AVD or W365. Several platform features can be enabled/disabled per tenant, such as: Auto-disable Entra ID shared mailbox accounts to decrease
- [Modern Workplace Services](https://pro-it.us/modern-workplace/) - Project One-time Microsoft 365 project deployment. Microsoft 365 Modern Workplace Intune & Entra Services Phish-Resistant Sessions Contact us Managed Advanced security and device management. Microsoft 365 Modern Workplace Intune & Entra Services Phish-Resistant Sessions Device Monitoring & Maintenance Third-Party Application Patching & Vulnerability Management Email analytics & compliance Microsoft Sentinel Security Orchestration Automation and Response
- [Contact](https://pro-it.us/contact/) - 2578 Broadway #579 New York 10025 United States Paxlaan 10 #9129 2131 PZ, Hoofddorp The Netherlands support@pro-it.us +31 20 399 1110 LinkedIn
- [Modern Workplace Services Details](https://pro-it.us/modern-workplace-services-details/) - Experience a Secure and Efficient Modern Workplace. Built on the robust foundation of the Microsoft 365 platform and fortified with security features from our cutting-edge automation engine, our modern workplace services are designed to provide your users with a stable and user-friendly environment. Within this environment, we ensure that all your valuable data is not
- [Knowledge Base](https://pro-it.us/knowledge-base/)
- [Prof-IT Services](https://pro-it.us/services/) - Managed Off-site Backup & DR Managed backup of your endpoints, servers, and Office 365 environment. Optionally, we can provide Disaster Recovery services to guarantee uninterrupted uptime for your IT environment. Secure your data today, safeguarding against potential losses tomorrow. (MSIX) Packaging Allow us to streamline your application deployment process by packaging your applications for seamless
- [Development](https://pro-it.us/development/)
- [Privacy Policy](https://pro-it.us/privacy-policy/) - Prof-IT Services (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by Prof-IT Services. This Privacy Policy applies to our website, and its associated subdomains (collectively, our “Service”) alongside our application, Prof-IT Services. By accessing or using our Service, you signify

## Categories

- [Azure](https://pro-it.us/blog/category/azure/)
- [Azure WAF](https://pro-it.us/blog/category/azure-waf/)
- [AzureAD](https://pro-it.us/blog/category/azuread/)
- [Device Management](https://pro-it.us/blog/category/device-management/)
- [Modern Workplace](https://pro-it.us/blog/category/modern-workplace/)
- [PSA](https://pro-it.us/blog/category/psa/)
- [Microsoft 365](https://pro-it.us/blog/category/microsoft-365/)
- [Security](https://pro-it.us/blog/category/security/)
- [EntraID](https://pro-it.us/blog/category/entraid/)
- [Automation](https://pro-it.us/blog/category/automation/)

## Tags

- [app service](https://pro-it.us/blog/tag/app-service/)
- [automation](https://pro-it.us/blog/tag/automation/)
- [Azure](https://pro-it.us/blog/tag/azure/)
- [Azure Automation](https://pro-it.us/blog/tag/azure-automation/)
- [Azure File Shares](https://pro-it.us/blog/tag/azure-file-shares/)
- [Azure WAF](https://pro-it.us/blog/tag/azure-waf/)
- [C#](https://pro-it.us/blog/tag/c/)
- [clone](https://pro-it.us/blog/tag/clone/)
- [Frontdoor](https://pro-it.us/blog/tag/frontdoor/)
- [HaloPSA](https://pro-it.us/blog/tag/halopsa/)
- [Intune](https://pro-it.us/blog/tag/intune/)
- [mv3](https://pro-it.us/blog/tag/mv3/)
- [namingconvention](https://pro-it.us/blog/tag/namingconvention/)
- [odopen](https://pro-it.us/blog/tag/odopen/)
- [P*mv3](https://pro-it.us/blog/tag/pmv3/)
- [Powershell](https://pro-it.us/blog/tag/powershell/)
- [renamedevices](https://pro-it.us/blog/tag/renamedevices/)
- [Sentinel](https://pro-it.us/blog/tag/sentinel/)
- [SharePoint Mapping](https://pro-it.us/blog/tag/sharepoint-mapping/)
- [SharePoint Syncing](https://pro-it.us/blog/tag/sharepoint-syncing/)
- [Storage Accounts](https://pro-it.us/blog/tag/storage-accounts/)
- [WAF](https://pro-it.us/blog/tag/waf/)
- [web app](https://pro-it.us/blog/tag/web-app/)
- [OneDrive](https://pro-it.us/blog/tag/onedrive/)
- [ModernWorkPlace](https://pro-it.us/blog/tag/modernworkplace/)
- [RMM](https://pro-it.us/blog/tag/rmm/)
- [Microsoft 365](https://pro-it.us/blog/tag/microsoft-365/)
- [security](https://pro-it.us/blog/tag/security/)
- [devicemanagement](https://pro-it.us/blog/tag/devicemanagement/)
- [spam](https://pro-it.us/blog/tag/spam/)
- [phish](https://pro-it.us/blog/tag/phish/)
- [malware](https://pro-it.us/blog/tag/malware/)
- [vulnerability](https://pro-it.us/blog/tag/vulnerability/)
- [it-boost](https://pro-it.us/blog/tag/it-boost/)
- [SharePointOnline](https://pro-it.us/blog/tag/sharepointonline/)
- [DuplicateFiles](https://pro-it.us/blog/tag/duplicatefiles/)
- [FileManagement](https://pro-it.us/blog/tag/filemanagement/)
- [sql](https://pro-it.us/blog/tag/sql/)
- [Azure SQL](https://pro-it.us/blog/tag/azure-sql/)
- [googledocs](https://pro-it.us/blog/tag/googledocs/)
- [IDP](https://pro-it.us/blog/tag/idp/)
- [g-door](https://pro-it.us/blog/tag/g-door/)