2022.12.13
Year-end 2022: hybrid identity and desktop lessons that stuck
2022 year-end lessons: passwordless progress, AVD vs Citrix honesty, landing zones, token theft, and the generative AI governance wake-up.
2022 field notes.
12 notes from 2022. Product names and recommendations reflect that year — not today's catalog. Current notes (2024–)
Archive
// pre-2024 field notes// 2022 · 12 posts · archive year page
2022// 12 posts
2022.11.30
The ChatGPT moment: what IT leaders should do this month
ChatGPT November 2022 IT response: data leakage policy, approved tools, shadow AI, and a sober 90-day plan before the hype cycle eats governance.
2022.10.18
Token theft and session hijack: defenses for a Microsoft estate in 2022
Token theft defenses 2022: CA continuous access, device compliance, admin protection, legacy auth, and detection when cookies and tokens walk away.
2022.09.20
Azure Arc hybrid management: when it earns its keep
Azure Arc 2022 field notes: servers, Kubernetes, policy at scale, and when Arc is platform leverage versus dashboard sprawl.
2022.08.16
Microsoft Purview and the compliance center: a practitioner field guide
Microsoft Purview 2022 field guide: information protection, DLP, retention, eDiscovery — what to configure first without boiling the ocean.
2022.07.19
Exchange hybrid residual risk, two years after ProxyLogon
Exchange hybrid residual risk 2022: last servers, internet publish, CU discipline, and why “temporary hybrid” remains a security program.
2022.06.14
Windows 11 enterprise deployment reality in mid-2022
Windows 11 enterprise deployment 2022: hardware blocks, app compat, Autopilot, VDI images, and why rings still beat big-bang OS flips.
2022.05.17
Conditional Access hardening wave: what we enforce in 2022
Conditional Access hardening 2022: authentication strengths, legacy auth zero, device filters, continuous access evaluation, and VIP-safe rollout rings.
2022.04.12
AVD vs Citrix in 2022: a decision matrix that survives procurement
Azure Virtual Desktop vs Citrix 2022 decision matrix: multi-session Windows, FSLogix, HDX needs, cost models, and when hybrid brokers still win.
2022.03.15
Enterprise-scale landing zones without the theater
Azure landing zones 2022: management groups, platform vs app landing, policy, connectivity, and how mid-market avoids CAF cargo-cult while staying governable.
2022.02.15
Hybrid work year two: make Office 365 path optimization permanent
Hybrid work networking 2022: forced-tunnel debt, Teams media, split tunnel permanence, Secure Web Gateway conflicts, and measuring quality after the emergency.
2022.01.18
Passwordless and FIDO2 in the enterprise: a rollout that survives helpdesk
Passwordless FIDO2 enterprise rollout field notes: Conditional Access, Windows Hello, security keys, break-glass, and phishing-resistant MFA without locking out the business.