For IT admins: Intune, Entra ID, Microsoft 365, Apple, Windows
The failure, the fix, and the check that proves it worked.
Runbooks, configuration traps and guides for specific failures on managed Windows and Apple devices, Entra ID and Microsoft 365: the likely cause, the fix, and how to confirm it.
The KBY Brief
Upcoming Microsoft and Apple deadlines, new fixes and scripts, by email. Unsubscribe at any time.
Jump in
- Q4 2026Intune moves to macOS 15 and laterThis quarter
- November 2026SAP SuccessFactors provisioning: move from basic auth to workload identityThis month
- November 2026Intune November release: JIT registration reminder at APNs renewal and automatic JIT for eligible tenantsThis month
Trending this week
Ranked by reads this week, admin topics first
Security & OperationsMicrosoft Defender for Endpoint Device Stuck Onboarding or Inactive
7 Nov 2026 12 min- Identity and Access ManagementEntra ID AADSTS50105: User Not Assigned to Enterprise Application11 Nov 2026 7 min
- Automation & ScriptingEnding Shared Drive Permission Sprawl With Scripted Access Reviews29 Jul 2026 11 min
- Device ManagementKandji vs Jamf Pro: Pilot Both MDMs on Real Macs and Score Them12 Nov 2026 10 min
- Identity and Access ManagementEntra ID AADSTS7000215: Invalid Client Secret Provided12 Nov 2026 10 min
Latest runbooks and traps
Recovery procedures and dangerous defaults, newest first.
- RunbookHigh severity · Grafana · target 30 minutes to isolate Grafana, proxy, query or backend timeout
Grafana Dashboard Data Source Timeout
Diagnose a Grafana dashboard data-source timeout by separating panel-query cost, Grafana data proxy limits, reverse-proxy deadlines, network reachability and backend saturation before raising any timeout.
- RunbookCritical severity · Active Directory · target 40 minutes to isolate the failing replication edge
Active Directory Domain Controller Replication Failure
Diagnose Active Directory domain controller replication failure with Repadmin, DCDiag, event IDs, DNS, RPC and time evidence; avoid forest-wide repadmin /syncall until topology knowledge is consistent and the exact error is resolved.
- Config trapAWS Identity
Service-Linked Role Calls Fail AccessDenied When IAM or an SCP Blocks Creation
Why AWS service calls fail AccessDenied when IAM or an SCP blocks a service-linked role, and how to diagnose and fix it safely.
- LexiconMicrosoft Teams Rooms
Microsoft Teams Rooms
A concise definition of Microsoft Teams Rooms, its dependencies and the checks that matter when operating shared meeting-room devices.
Recently updated
Articles changed in the last 30 days.
- Enterprise IT ManagementPart 1: Windows Autopilot Prerequisites in Intune: Licences, Automatic Enrolment and Branding12 Nov 2026
- Enterprise IT ManagementMicrosoft 365 Group Licensing: Fixing MutuallyExclusiveViolation12 Nov 2026
- Enterprise IT ManagementBounded Enterprise IT Management Operations in Microsoft 36512 Nov 2026
- Enterprise IT ManagementExchange Online 550 5.7.708 Access Denied: Fixing Blocked Mail Flow12 Nov 2026
- Enterprise IT ManagementMicrosoft 365 Conditional Access Blocking Legacy Auth: AADSTS5300312 Nov 2026
- Enterprise IT ManagementFixing Double-Hop Kerberos With Constrained Delegation10 Nov 2026
Publications
- Systems EngineeringAdvanced guides on infrastructure, cloud architecture, and observability for enterprise systems.116 items6 topicsUpdated 12 Nov 2026
- The Ops PlaybookL1-L3 Support Playbooks: engineer tickets out of existence.48 items12 topicsUpdated 12 Nov 2026
- Graduate TrackProduction-focused guidance and step-by-step technical playbooks.34 items6 topicsUpdated 12 Nov 2026
- The ToolchainPractical calculators, diagnostic scenarios, and reference material.
How KBY content is made
Most KBY content is built from a topic brief and vendor documentation, checked by automated tests and published by software. Treat commands as a starting point to test, and tell us when something is wrong: we correct it on the page.
The KBY Brief
A short email about twice a week with new runbooks, configuration traps and fixes from KBY Technologies.
- Runbooks
- Config traps
- Fixes