Microsoft 365 and identity engineer by trade, from Barcelona. This is my personal site: what I build, what I learn along the way, and the occasional opinion.https://enricdiaz.comen-gbhttps://enricdiaz.com/blog/not-a-portfoliohttps://enricdiaz.com/blog/not-a-portfolioThe site started as a CV with pictures. It is now my personal site, and the portfolio is one room in it.Tue, 25 Aug 2026 00:00:00 GMTnotesitehttps://enricdiaz.com/projects/app-credential-expiryhttps://enricdiaz.com/projects/app-credential-expiryEvery mature tenant carries hundreds of app registrations whose secrets and certificates expire without warning. The alerting is the easy part. The hard parts are working out who owns each application and notifying only about credentials that are actually in use, so the owner hears first, in language they understand.Wed, 15 Jul 2026 00:00:00 GMTprojectEntra IDLogic AppsAzure OpenAIPowerShellhttps://enricdiaz.com/projects/licence-usage-reporthttps://enricdiaz.com/projects/licence-usage-reportA monthly report that tells each country which seats it can reclaim, and shows the evidence behind every verdict. It began with what looked like the easiest saving of the year (around 40% of Visio and Planner seats apparently unused) and turned into a lesson about what a report should do when a data source quietly returns nothing.Wed, 01 Jul 2026 00:00:00 GMTprojectMicrosoft GraphPowerShellLicensingIntunehttps://enricdiaz.com/projects/email-security-proofpointhttps://enricdiaz.com/projects/email-security-proofpointPhishing and impersonation were reaching inboxes, so the company put a dedicated gateway in front of Exchange Online. Changing an MX record takes five minutes. The three inventories that have to exist before anyone touches it took months, and they are the part worth writing down while the migration is still under way.Mon, 01 Jun 2026 00:00:00 GMTprojectExchange OnlineProofpointMail flowPowerShellhttps://enricdiaz.com/projects/privileged-access-reporthttps://enricdiaz.com/projects/privileged-access-reportA monthly audit report of every privileged account in Entra ID and in Active Directory, with what changed since the last one. Two automations, one report, sent encrypted to the people who need to read it, and a pattern small enough to copy in a week.Fri, 01 May 2026 00:00:00 GMTprojectEntra IDPIMActive DirectoryLogic Appshttps://enricdiaz.com/projects/siem-country-routinghttps://enricdiaz.com/projects/siem-country-routingEntra ID → Event Hubs → Stream Analytics → CrowdStrike NG-SIEM, with Azure Automation keeping the user-to-country lookup fresh. Beyond filtering: each country becomes a measurable unit, with its own events, volumes and security metrics.Wed, 01 Apr 2026 00:00:00 GMTprojectEntra IDEvent HubsStream AnalyticsAzure AutomationCrowdStrikehttps://enricdiaz.com/projects/intune-device-hygienehttps://enricdiaz.com/projects/intune-device-hygieneA recurring question in device management: why does the inventory never quite match reality? Because one physical endpoint can exist as several objects across Entra ID and Intune, and nothing cleans that up by itself. Three automations keep it honest.Mon, 01 Sep 2025 00:00:00 GMTprojectIntuneEntra IDMicrosoft GraphInventoryhttps://enricdiaz.com/projects/soc-remediation-processhttps://enricdiaz.com/projects/soc-remediation-processThe security operations centre detects and analyses; the Workplace team has the hands on the devices. Without an agreed process between the two, every alert was a conversation. With one, it became a playbook, and playbooks can be automated.Sun, 01 Jun 2025 00:00:00 GMTprojectSOCDefender for EndpointCrowdStrikeProcesshttps://enricdiaz.com/projects/intune-enrollment-profileshttps://enricdiaz.com/projects/intune-enrollment-profilesAt a business school where a lecture cannot stop because a PC asks for a password, every kind of device got its own enrollment profile, baseline and slice of the application catalogue. Onboarding became a matter of picking the right profile.Sat, 01 Mar 2025 00:00:00 GMTprojectIntuneAutopilotEndpointClassroomshttps://enricdiaz.com/projects/intune-group-designhttps://enricdiaz.com/projects/intune-group-designIn Intune there is almost always more than one way to reach a result, and the documentation stops short of telling you which to pick. A design that stays maintainable as the tenant grows: how to structure groups and assignments, which targeting method to use where, and how to decide when change is allowed to land.Sat, 01 Jun 2024 00:00:00 GMTprojectIntuneEntra IDGovernanceDesignhttps://enricdiaz.com/projects/intune-clearpass-nachttps://enricdiaz.com/projects/intune-clearpass-nacNetwork access control sounds like a product you switch on. It is actually two teams meeting at one interface (a certificate carrying the Intune Device ID and a Graph query) plus a set of questions about your own maturity that decide whether the project should run at all.Fri, 01 Dec 2023 00:00:00 GMTprojectIntuneAruba ClearPassNAC802.1Xhttps://enricdiaz.com/projects/intune-connector-expiryhttps://enricdiaz.com/projects/intune-connector-expiryIntune device management depends on seven external certificates, tokens and connectors, each with its own expiry and failure mode. Miss the APNs renewal window and every iOS device has to be re-enrolled by hand. Two Logic Apps recurrences check all seven against Microsoft Graph and alert 30 days ahead, with the values and the console link needed to act on it.Tue, 01 Nov 2022 00:00:00 GMTprojectIntuneLogic AppsMicrosoft GraphMonitoring