Part 2 of "Disabled Isn't Safe": how we took a hybrid onboarding script from Domain Admin and Global Administrator down to a standard user account, one step at a time

What a routine least-privilege project turned up when we went looking for proof, and the five-minute audit you can run in your own tenant today

Somebody on the dev team finally said it out loud in standup: “Can we stop killing my VM at ten o’clock? I’m still working.” Fair enough. The nightly auto-shutdown has been humming along at 10:00 PM Eastern for two years, saving a genuinely embarrassing amount of money, and now the…

Part 1 of a two-part series. Part 2 builds the same solution as a low-code Azure Logic App. Here’s a number that should bother you: a dev/test VM that nobody turns off runs 168 hours a week. Your team uses it for about 45 of them. You’re paying for 123…