[Ninja BE Event] What Does the Ninja BE User Group Actually Do? | Nicky, Kenny & Dieter

Why would a software company give its OS deployment tool away? 2Pint co-founder Andreas Hammarskjöld on the pub ideas behind the name, DeployR Community Edition, and the line between supporting a community and marketing to it.In this episode- Where the name 2Pint comes from, and the culture it's meant to protect- How the community has scattered across platforms since the old mailing lists and forums- Why 2Pint has sponsored Workplace Ninja from the start- What 2Pint builds: bandwidth and peer-to-peer platforms, and DeployR- Why DeployR Community Edition is free and how they decide what stays free- Working with Microsoft's Windows teams instead of filling gaps- Where supporting the community ends and marketing begins- Advice for vendors thinking about sponsoringChapters00:00 Welcome: Andreas Hammarskjöld01:54 Meet 2Pint02:21 The story behind the name06:18 Why sponsor Workplace Ninja07:25 What 2Pint builds08:31 Why DeployR Community is free10:01 Working with Microsoft13:47 Community support vs marketing15:55 OS deployment and Microsoft17:58 Advice for new sponsorsGuestAndreas Hammarskjöld – Co-founder, 2Pint SoftwareWorkplace Ninja Summit 2026: IT disaster bootcamp (Wed 16 Sep 13:10, Glassaal, with Mikael Nyström) · DeployR Community→Enterprise (Tue 15 Sep 11:10, Community stage, with Michael Niehaus) · Delivery Optimization state of the union (Mon 14 Sep 16:20, Halle 36.1, with Andy Rivas)HostsFrans Oudendorp & Jose SchenardieRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #2Pint #DeployR

MSPs earn their margin when customers don't need to call. Maurice Daly (Patch My PC) and Lewis Barry (Inforcer) on standardising Microsoft 365 security across hundreds of tenants, and the mistakes they see first.In this episode- Why security fundamentals are the same for every vertical, and why MSPs need standardisation to scale- Start with Entra, then Defender for Office, then Intune: follow the attack chain- Where tenant drift really comes from, and why you can ignore what you inherit- PIM, GDAP and standing admin access in the MSP world- The most common finding: a shared global admin per tenant with its password in the documentation- What to check first when you audit a tenant- Business Premium, Secure Score and what small businesses really needChapters00:00 Welcome: Maurice Daly and Lewis Barry04:02 Security is the same for every vertical09:34 What MSPs get wrong: start with Entra13:05 Drift across hundreds of tenants18:37 PIM and standing admin access21:19 GDAP and shared admin accounts24:21 First finding in a tenant audit28:02 SMB budgets and Business Premium29:57 Is Secure Score useful?32:03 Takeaway: go talk to peopleGuestsMaurice Daly – Senior Security Architect, Patch My PC; Microsoft MVPWorkplace Ninja Summit 2026: Surviving Microsoft Security at Scale (Tue 15 Sep 11:10, Glassaal, with Lewis) · Mastering Entra ID PIM (Thu 17 Sep 08:30, Halle 36.3, with Jan Ketil Skanke) · Autopilot Unlocked (Wed 16 Sep 15:50, Glassaal, with Keeran Mistry)Lewis Barry – Intune MVP, InforcerWorkplace Ninja Summit 2026: Surviving Microsoft Security at Scale (Tue 15 Sep 11:10, Glassaal, with Maurice) · The MSP Challenge of Microsoft 365 Security at Scale (Mon 14 Sep 13:15, Community stage)HostsFrans Oudendorp & Kenny BuntinxRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #MSP #Microsoft365

Patches are bigger and there's no time left for slow rings. Andy Rivas (Microsoft, Delivery Optimization) and Andreas Hammarskjöld (2Pint Software) on getting content to devices fast without breaking the network.In this episode- Why the internet isn't an unlimited source of bandwidth, and where LEDBAT came from- Patching at AI speed: why waiting for deployment rings no longer works- What changed in Connected Cache: HTTPS content for Intune apps and Teams- Download speed, not just bandwidth, from the oil rig to the coffee shop- Is peer-to-peer still worth it when everything comes from a CDN?- The worst misconfigurations, like one global Wi-Fi network peering across the world- Using an agent to help design Delivery Optimization and Connected Cache- Rebuilding devices in place after an incidentChapters00:00 Welcome: Andy Rivas and Andreas Hammarskjöld02:47 Their joint session04:20 How much bandwidth is wasted?05:59 Patching at AI speed09:08 What changed in Connected Cache14:24 Is peer-to-peer still worth it?16:37 Common misconfigurations20:13 An agentic approach to DO design24:17 Content delivery in a disaster25:58 One metric: update velocityGuestsAndy Rivas – Microsoft, Delivery Optimization and Connected CacheWorkplace Ninja Summit 2026: Delivery Optimization state of the union (Mon 14 Sep 16:20, Halle 36.1, with Andreas) · Smarter DO and MCC Deployment: An Agentic Approach (Wed 16 Sep 11:10, Glassaal, with Ken Goossens)Andreas Hammarskjöld – Co-founder, 2Pint SoftwareWorkplace Ninja Summit 2026: DeployR (Tue 15 Sep 11:10, Community stage, with Michael Niehaus) · IT disaster bootcamp (Wed 16 Sep 13:10, Glassaal, with Mikael Nyström)HostsFrans Oudendorp & Peter DaalmansRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #DeliveryOptimization #ConnectedCache

Vendor baselines are written by security people, not by the admins who run them. James Robinson (OpenIntuneBaseline) and Kenneth van Surksum (Conditional Access baseline) on building baselines people can understand, test and maintain.In this episode- Why James built the OpenIntuneBaseline, and what he learned working with CIS- How a community baseline stays trustworthy: GitHub, issues and feedback- Keeping up with constant change, and why structure and versioning beat 200 ad-hoc policies- Designing compliance policies: grace periods, user notifications, and feeding Conditional Access- Rolling out safely with deployment rings and documented exceptions- Why the OpenIntuneBaseline instead of the built-in Intune security baseline- Configs to clean up: local password compliance and old custom CSPsChapters00:00 Welcome: James Robinson and Kenneth van Surksum02:24 Why vendor baselines fall short04:54 Keeping a community baseline trustworthy08:45 Why these baselines exist11:02 Is Intune hard, or the defaults?15:55 Designing compliance policies18:20 Testing safely with rings22:47 OIB vs the built-in baseline29:38 Configs that shouldn't be there31:33 Nothing is set and forgetGuestsJames Robinson – Intune and Windows MVP, Threatscape; creator of the OpenIntuneBaselineWorkplace Ninja Summit 2026: OpenIntuneBaseline 101 (Mon 14 Sep 16:20, Halle 36.2)Kenneth van Surksum – Modern workplace consultant, Secure At WorkWorkplace Ninja Summit 2026: Compliance Policies at Scale (Thu 17 Sep 11:10, Halle 36.2) · What's Next After Phishing-Resistant MFA (Wed 16 Sep 11:10, Halle 36.3, with Erik Loef)LinksOpenIntuneBaseline: https://openintunebaseline.com/Conditional Access baseline: https://github.com/kennethvs/cabaseline202510HostsFrans Oudendorp & Kenny BuntinxRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #MicrosoftIntune #ConditionalAccess

glueckkanja runs managed services on Microsoft's stack, and builds products when Microsoft leaves a gap. CEO Christian Kanja and Stefan Schoenleber on SCEPman, Autopilot Monitor and why the community is their main audience.In this episode- Why the name became glueckkanja- Why glueckkanja focuses on community events- Managed Entra, Intune, SOC and Azure services, and why products came out of them- The products: Intune extensions, Autopilot Monitor, SCEPman and RADIUS as a service- Retiring the last on-prem Exchange server that only exists for scanners and old SMTP- First try to get Microsoft to fix a gap, then build it- A sneak peek at the next identity productChapters00:00 Welcome: Christian Kanja and Stefan01:03 Meet glueckkanja02:12 The name change03:07 Why community matters04:09 Managed services and products06:10 The product portfolio08:38 Retiring the last Exchange server10:08 SCEPman and Microsoft's own PKI13:46 What's at the booth15:43 What's next: identityGuestsChristian Kanja – Founder and CEO, glueckkanjaStefan Schoenleber – Companion products (sales, marketing, customer support), glueckkanjaWorkplace Ninja Summit 2026: Live NAC build with Intune (Wed 16 Sep 13:10, Community stage, with Constantin Heinzler)glueckkanja at the summitFabian Bader, Christopher Brumm, Constantin Heinzler, Stefan Schoenleber and Oliver KieselbachHostsFrans Oudendorp & Jose SchenardieRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #glueckkanja #SCEPman

Agents now live in the cloud, in apps and on endpoints. Heena Macwan, Venkata Pampana and Zach Dvorak from the Microsoft Intune team explain how to discover, govern and secure them, and why it starts with a healthy, managed estate.In this episode- The keynote's message: AI changes the admin's job, and agents are everywhere- Why security and IT are merging as attacks speed up- Is an agent an app or a user? Why Entra agent identities matter, and how Conditional Access extends to agents acting on a user's behalf- Project Perception and the multi-agent pattern behind it- Discovering local agents with the Intune properties catalog: app inventory plus the local AI agent entity- What an agent can actually access, and why you have to protect the full stack- Keeping apps current with Enterprise App Management and automatic app updates- What to put on your CISO's agendaChapters00:00 Welcome: Heena, Venkata and Zach03:27 The keynote: AI changes the job04:39 Agents are everywhere08:48 Is an agent a user or an app?11:44 Project Perception explained14:24 Discovering local agents with Intune16:08 What can an agent access?17:41 Apps, updates and exposure21:26 Agents as managed apps?25:48 What to tell your CISOGuestsHeena Macwan – Microsoft Intune (apps and app lifecycle)Workplace Ninja Summit 2026: Cloud-Native Windows (Thu 17 Sep 13:10, Glassaal) · From deployment to defense (Mon 14 Sep 16:20, Glassaal)Venkata Pampana – Architect, Microsoft Intune (AI and data platforms)Workplace Ninja Summit 2026: Keynote: Rethinking the Endpoint (Mon 14 Sep 10:00) · Project Perception / Adaptive Defense (Thu 17 Sep 09:50) · Questions your CISO is asking about security for AI (Thu 17 Sep 14:30, Trafohall)Zach Dvorak – Product Manager, Microsoft Intune (security for AI)Workplace Ninja Summit 2026: Questions your CISO is asking about security for AI (Thu 17 Sep 14:30, Trafohall)HostsFrans Oudendorp & Mirko ColembergRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #MicrosoftIntune #AIAgents

Why does a commercial vendor keep giving tools away? Ben Ward, Field CTO UK & Ireland at Recast Software, on Right Click Tools Community, OSDCloud and why application management is still the hard part.In this episode- Why Recast has sponsored the summit and keeps coming back- Free community tools like Right Click Tools Community Edition and OSDCloud, and what Recast gets back from them- The problem customers call about most: application management that never shows up as a budget line- The Recast portfolio, from Right Click Tools to Application Workspace and OSDCloud- What's coming in OSDCloud, and the question of community licensing- Why Windows is the easy part and applications are snowflakesChapters00:00 Welcome: Ben Ward01:25 Meet Recast Software02:40 Why Recast keeps sponsoring03:38 Free community tools05:26 Why customers call: app management06:57 The Recast portfolio09:42 OSDCloud and licensing11:56 Applications are snowflakesGuestBen Ward – Field CTO UK & Ireland, Recast SoftwareRecast at the summitDavid Segura – What's new in OSDCloud Community Edition (Tue 15 Sep 15:50, Halle 36.3) · New OSDeploy Tools (Mon 14 Sep 15:00, Trafohall)Nico Zieck – What 100 IT Pros Told Us About the Modern Workspace (Mon 14 Sep 13:40, Halle 36.1)HostsFrans Oudendorp & Jose SchenardieRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #RecastSoftware #AppManagement

Why do Windows updates and device recovery belong in one conversation? Lia Vargas (Windows recovery) and Mounica Battula (Windows Autopatch) from Microsoft explain how they keep devices current, and what happens when an update goes wrong.In this episode- Why update management and recovery are two halves of the same device lifecycle- What the Windows team changed after the July 2024 outage, and how Quick Machine Recovery delivers fixes through Windows Update- What happens when a device can't reach the network, and where Windows 365 Reserve fits- The recovery escalation ladder and Microsoft's new Windows device recovery framework blog- The customer finding that surprised the team: most admins block end users from their BitLocker recovery key- How Autopatch update readiness checks work at three levels, including hotpatch- Why Feedback Hub feedback really gets read every weekChapters00:00 Welcome: Lia Vargas and Mounica Battula02:48 Autopatch and Windows recovery teams05:04 Why updates and recovery belong together07:42 Quick Machine Recovery after July 202410:26 When a device can't connect12:28 The recovery escalation ladder13:40 Cloud-managed, hybrid and on-prem17:38 Surprise: BitLocker keys and self-service19:43 Ask Windows Anything and one admin pane22:16 Autopatch update readiness checks24:25 One ask: use Feedback HubGuestsLia Vargas – Product Manager, Windows device recovery, MicrosoftWorkplace Ninja Summit 2026: From managing updates to recovery (Tue 15 Sep 15:50, Trafohall) · Ask Windows Anything panel (Tue 15 Sep 17:00, Halle 36.2)Mounica Lakshmi Sai Battula – Senior Product Manager, Windows Autopatch, MicrosoftWorkplace Ninja Summit 2026: From managing updates to recovery (Tue 15 Sep 15:50, Trafohall) · Ask Windows Anything panel (Tue 15 Sep 17:00, Halle 36.2)HostsFrans Oudendorp & Kenny BuntinxRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #WindowsAutopatch #WindowsRecovery

Most breaches don't need clever hacking: someone logs in with real credentials. Sami Laiho and Mikael Nyström (Truesec incident response) on why, what to do in the first hour, and which security measures are pure theater.In this episode- Why 'they don't hack, they log in' is how most incidents really start- Windows 11 isn't secure by default until you configure and harden it- Attackers specialise in one weakness and try it everywhere- The first hour after the phone rings: assume breach, don't reboot, pull cables, cut outbound internet- A recovery plan fits on one page, and IT needs a 'wartime' mode- The controls that matter most: privileged access workstations, no password reuse, no admin rights for developers- Why remote tools are risky and RDP gives you logs- Security theater: BitLocker as your main control and expensive 'AI' firewallsChapters00:00 Welcome: Sami Laiho and Mikael Nyström05:02 They don't hack, they log in07:35 Is Windows 11 secure by default?16:19 The first hour after the call20:09 A recovery plan on one page22:26 One control: separate admin devices23:53 Admin rights and developers28:56 Security theater33:08 Why does your DC need internet?36:52 The hilarious history of WindowsGuestsSami Laiho – Microsoft MVP, AdminizeWorkplace Ninja Summit 2026: 11 Ways to Hack Windows 11 (Tue 15 Sep 14:30, Trafohall) · Hilarious History of Windows (Tue 15 Sep 17:00, Trafohall) · Keynote: Cybersecurity from Disabler to Enabler (Wed 16 Sep 09:50, Trafohall)Mikael Nyström – Incident response (CSIRT), TruesecWorkplace Ninja Summit 2026: IT disaster bootcamp (Wed 16 Sep 13:10, Glassaal, with Andreas Hammarskjöld) · You Don't Get Hacked — They Log In (Thu 17 Sep 13:10, Trafohall)HostsFrans Oudendorp & Peter DaalmansRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #CyberSecurity #IncidentResponse

Itay Peled (Project Perception) and Yuri Diogenes (Defender for Cloud) on the two sides of AI in security: using AI to defend, and securing the AI everyone is deploying. Recorded live at Workplace Ninja Summit 2026 with Frans Oudendorp and Alex Verboon.In this episode- Why "AI for security" and "security for AI" are different problems that you can't solve separately- Exposure management for agents: an agent that was never meant to be internet-facing can still be reachable through an attack path- Prompt injection and indirect prompt injection as the big threat to agents, and why MITRE ATLAS is worth knowing- How attackers use AI today: more scale, and digging deeper than they could before- Agent sprawl: start with an inventory through AI security posture management, and give every agent an identity in Entra so Conditional Access applies- Agent 365 as the control plane, Defender as the security view, and why data classification has to be in place before you point an agent at SharePoint- Project Perception is read-only today: it recommends and explains, and a human takes the action- Careers: admins and analysts won't be replaced but will need new skills, and why soft skills and in-person networking still matterChapters00:00 Welcome: Itay Peled and Yuri Diogenes01:52 AI for security vs. security for AI04:55 Exposure management for AI agents06:37 Prompt injection and MITRE ATLAS09:13 How attackers use AI today10:24 Agent inventory and agent identities13:07 Agent 365, Defender and data protection17:55 Human in the loop: when the agent is wrong19:08 Will AI replace admins and analysts?25:06 Yuri's 35 books, soft skills and networking29:56 What Itay wants asked at the AMAGuestsItay Peled – Microsoft Security Research, working on Project Perception, Microsoft's agentic SOCWorkplace Ninja Summit 2026: Project Perception / agentic SOC · Threat landscape · Microsoft Security AMAYuri Diogenes – Microsoft, customer experience engineering for Defender for Cloud and exposure managementWorkplace Ninja Summit 2026: AI-SPM & Threat Detection · Proactive Security Posture ManagementHostsFrans Oudendorp & Alex VerboonRecorded at Workplace Ninja Summit 2026 in Baden, Switzerland.Follow the Workplace Ninja SummitWebsite: https://summit.wpninjas.globalLinkedIn: https://www.linkedin.com/company/wpninjasummitX: https://x.com/wpninjasummitInstagram: https://www.instagram.com/wpninjasummit/#WPNinjaSummit #AISecurity #MicrosoftDefender