ATA Learning Tutorials

Automate SOC 2 Compliance with PowerShell and Azure

Learn how to use Azure Policy, the EPAC framework, and PowerShell to automate SOC 2 compliance evidence collection, enforce controls across subscriptions, and build a continuous audit trail.

Adam Bertram 8 min. read

Entra Workload Identity on AKS: No More Secrets

Learn how to eliminate Kubernetes secrets by configuring Entra Workload Identity on AKS using OIDC federation, with Bicep and Terraform IaC examples.

Adam Bertram 10 min. read

7 Tips for an Efficient and Secure Active Directory Setup

Learn 7 essential best practices for setting up an efficient and secure Active Directory environment, from planning your structure and applying least-privilege principles to securing domain controllers and implementing breached password protection.

Adam Bertram 4 min. read

Azure Confidential Computing: Protect Data During Processing

Protect sensitive data during processing with Azure confidential computing using secure enclaves and hardware-based encryption technologies.

Adam Bertram 8 min. read

AI

Stop GitHub Copilot From Leaking Your Enterprise Data

Learn how GitHub Copilot exposes enterprises to data leakage, insecure code, IP risks, and IDE-level attacks—and how to build a governance framework that works.

Adam Bertram 6 min. read

Avoid Entra ID Lockouts: Migrate Legacy MFA Policies

Learn how to migrate legacy MFA and SSPR policies to the unified Entra ID Authentication Methods policy, including audit, NPS extension fixes, and validation.

Adam Bertram 8 min. read

Azure

Secure Azure OpenAI Deployments for the Enterprise

Learn how to deploy Azure OpenAI securely for enterprise use: configure private endpoints, replace API keys with Managed Identities, set up content filtering policies, and build comprehensive audit logging with Azure API Management.

Adam Bertram 5 min. read

How to Survive the 2026 Secure Boot Certificate Expiry

Deploy Windows UEFI CA 2023 before the June 2026 certificate expiry. Inventory devices, update OEM firmware, and trigger enrollment via Intune or PowerShell registry settings.

Adam Bertram 6 min. read

How to Disable SMTP AUTH in Exchange Online Before December 2026

Audit SMTP AUTH usage with PowerShell, migrate devices and scripts to OAuth 2.0, and disable Basic Auth in Exchange Online before Microsoft's 2026 deadline.

Adam Bertram 7 min. read

Microsoft 365 E7: Is the $99/User Price Tag Worth It?

Evaluate whether Microsoft 365 E7's $99 price justifies Agent 365 governance using PowerShell scripts to assess Copilot usage and automation risk exposure.

Adam Bertram 7 min. read

Stop Shadow AI with Microsoft Purview

With 80% of Fortune 500 companies now using active AI agents, employees are increasingly using unapproved generative AI tools that process sensitive corporate data outside of governance controls. This post demonstrates how to use Microsoft Purview and Defender for Cloud Apps to discover shadow AI usage, classify sensitive data, enforce data loss prevention policies, and build an AI governance framework that satisfies compliance requirements.

Adam Bertram < 1 min. read