Скачать или смотреть Autopilot EMERGENCY: Plug the hole

If you use Autopilot for Windows deployment, you've probably seen the chatter about a potential security gap that has been uncovered.

Maurice Daly and Sandy Zeng wrote a great piece on this, so I decided to walk everyone through the problem, how it works, create some potential fixes.

Autopilot & The Perceived Tenant Security Risk
https://msendpointmgr.com/2024/03/25/...

ORIGINAL POST by John Macrum:
https://powerstacks.com/how-to-bypass...

Join the official Discord server
  / discord  

Read more at
https://www.getrubix.com

Chapters
0:00:00 - No time for burritos!
0:00:45 - An Autopilot hole
0:01:28 - A "legitimate" Autopilot device
0:02:31 - The profile JSON
0:03:17 - Soooo... what's the issue?
0:04:20 - Meet my personal PC
0:05:22 - Side-stepping the restriction
0:07:13 - Here comes the sneaky part
0:08:13 - Oh no!
0:08:55 - CHAOS!
0:09:20 - Here are the gaps... let's start plugging them
0:09:53 - Be careful with assignments and converting
0:11:41 - Group Tags, people!
0:13:43 - To the graph...
0:14:12 - Use a conditional access policy
0:15:31 - Try again, hacker!
0:17:36 - MFA can't hurt...
0:18:00 - Don't forget compliance
0:18:51 - Remember, Autopilot is not a security tool


#intune #autopilot #windows10 #windows11 #microsoftgraph #azureadministrator #azure #powershellscripting #powershell #activedirectory #bitlocker #windows365 #zerotrust #certificate #entra #microsoftdefender #copilot