Managed by Mand-IT

Workplaces that work.

Intune · Azure Virtual Desktop · Microsoft 365 · Azure — assess, fix and build. As code where it counts, no drama.

kris@mand-it: ~

Terminal

Mand-IT OS terminal. Type help, ls or open bewijs. Or sudo hire kris.
kris@mand-it:~$ 
Contact

Need an Intune or AVD consultant? Let's talk.

Send a message on LinkedIn — I reply within one business day. Available for hire as a freelancer, remote and on-site in the Netherlands: for an assessment, a stubborn problem, a build project or a few days a week inside your team.

  • NameKris Mandemaker
  • CompanyMand-IT
  • LocationAlkmaar, Noord-Holland
  • AvailableAvailable immediately. Yes, really.
Send a message on LinkedIn →

Or type sudo hire kris in the terminal.

Found a vulnerability on this site? See security.txt. I respond, and I say thank you.

Settings

Settings

Language
Theme
Appearance

On a large screen you choose between Windows and macOS, on a phone between iOS and Android.

About this device

Device name
visitor-pc
Managed by
Mand-IT
Compliance
✓ Compliant
Administrator
Kris Mandemaker
Enrolled
2021 · Mand-IT

Privacy & security of this site

Trackers
✓ None
Cookies
✓ None only localStorage for language, theme and appearance
Third-party scripts
✓ None
CSP
default-src 'self' no external sources, no frames
Headers
nosniff · frame-ancestors 'none' · Referrer-Policy
Vulnerability?
/.well-known/security.txt

Check for yourself: securityheaders.com ↗ · Mozilla Observatory ↗

Recycle Bin — Unnecessary complexity

Recycle Bin

Things I throw in the bin at clients:

  • Click-opsClicking around the portal by hand and hoping you'll remember it next time.
  • Golden images from 2014Autopilot exists. Use it.
  • PowerPoint architecturePretty pictures, no pipeline.
  • "Just a quick GPO"Nothing has ever been quick with a GPO.
  • Excel as CMDBTab 3 is the truth. Or was it tab 4?
  • "Works on my machine"Your machine isn't going to production.
  • Admin rights for everyoneConvenient. Until the first phishing mail.
  • 47 Conditional Access policies without namingCA policy (3) (copy) (new) (final).
  • "We've always done it this way"Not an argument, but a warning.
  • Knowledge in one headEven when that head is mine: I document and hand over.
  • Passwords in an Excel sheetTab "Passwords", right next to tab "CMDB".
  • Service account with Global AdminPassword never expires. That is not a feature.
  • "We'll do MFA later"Later is a date that never comes. Phishing does not wait.
Zero Trust Invaders — Patch Tuesday

Zero Trust Invaders

Your AVD host pool. Five session hosts, one Defender, four pipelines. How long do you stay compliant?

Zero Trust Invaders

Phishing, malware and drift rain down on your AVD host pool. Shoot them down as Defender, keep your hosts compliant in Intune and run your pipelines when things get hot. Every third sprint ends with a boss, then it is Patch Tuesday: catch the updates instead of shooting them.

avd-image-buildGolden image: all hosts restored

← → or A/D to move · space to shoot · Enter to deploy · P to pause. On a phone: drag across the field, shooting is automatic.

Your workplace ran into a problem that won't go away on its own.Your workplace needs to be restarted. Or just managed better.Your workplace is restarting…

0% complete

Kidding. You won't see this screen on my watch.

Stop code: WORKSPACE_CONSULTANT_NOT_FOUND. Recovery options: send me a message on LinkedIn or restart.