For IT admins: Intune, Entra ID, Microsoft 365, Apple, Windows
The failure, the fix, and the check that proves it worked.
Runbooks, configuration traps and guides for specific failures on managed Windows and Apple devices, Entra ID and Microsoft 365: the likely cause, the fix, and how to confirm it.
The KBY Brief
Upcoming Microsoft and Apple deadlines, new fixes and scripts, by email. Unsubscribe at any time.
News desk
Latest news
What happened, and what it means for the people who run IT. UK time.
Jump in
- Q4 2026Intune moves to macOS 15 and laterThis quarter
- November 2026SAP SuccessFactors provisioning: move from basic auth to workload identityThis month
- November 2026Intune November release: JIT registration reminder at APNs renewal and automatic JIT for eligible tenantsThis month
Trending this week
Ranked by reads this week, admin topics first
OutagesMicrosoft 365 Outage, November 2026: What Went Wrong, How Microsoft Can Fix It, and What to Do Now
13 Nov 2026 16 min- Security & OperationsMicrosoft Defender for Endpoint Device Stuck Onboarding or Inactive7 Nov 2026 12 min
- Identity and Access ManagementEntra ID AADSTS50105: User Not Assigned to Enterprise Application11 Nov 2026 7 min
- Automation & ScriptingEnding Shared Drive Permission Sprawl With Scripted Access Reviews29 Jul 2026 11 min
- Enterprise IT ManagementFixing Double-Hop Kerberos With Constrained Delegation23 Jul 2026 13 min
Latest runbooks and traps
Recovery procedures and dangerous defaults, newest first.
- RunbookHigh severity · Grafana · target 30 minutes to isolate Grafana, proxy, query or backend timeout
Grafana Dashboard Data Source Timeout
Diagnose a Grafana dashboard data-source timeout by separating panel-query cost, Grafana data proxy limits, reverse-proxy deadlines, network reachability and backend saturation before raising any timeout.
- RunbookCritical severity · Active Directory · target 40 minutes to isolate the failing replication edge
Active Directory Domain Controller Replication Failure
Diagnose Active Directory domain controller replication failure with Repadmin, DCDiag, event IDs, DNS, RPC and time evidence; avoid forest-wide repadmin /syncall until topology knowledge is consistent and the exact error is resolved.
- Config trapAzure Key Vault Access Control
Owner Role on an RBAC Key Vault Still Returns Forbidden for Secrets
Owner on an RBAC Key Vault manages the vault but cannot read secrets. Assign a data-plane role such as Key Vault Secrets User and verify.
- LexiconOpenRouter
OpenRouter
OpenRouter provides one API to reach AI models from many providers, adding a dependency that needs limits, credential and fallback planning.
Recently updated
Articles changed in the last 30 days.
- Enterprise IT ManagementPart 1: Windows Autopilot Prerequisites in Intune: Licences, Automatic Enrolment and Branding12 Nov 2026
- Enterprise IT ManagementMicrosoft 365 Group Licensing: Fixing MutuallyExclusiveViolation12 Nov 2026
- Enterprise IT ManagementBounded Enterprise IT Management Operations in Microsoft 36512 Nov 2026
- Enterprise IT ManagementExchange Online 550 5.7.708 Access Denied: Fixing Blocked Mail Flow12 Nov 2026
- Enterprise IT ManagementMicrosoft 365 Conditional Access Blocking Legacy Auth: AADSTS5300312 Nov 2026
- BusinessJensen Huang Resigns as Nvidia CEO, CFO Colette Kress Steps In: What It Means for the AI Supply Chain13 Nov 2026
Publications
- Systems EngineeringAdvanced guides on infrastructure, cloud architecture, and observability for enterprise systems.118 items6 topicsUpdated 13 Nov 2026
- The Ops PlaybookL1-L3 Support Playbooks: engineer tickets out of existence.48 items12 topicsUpdated 12 Nov 2026
- Graduate TrackProduction-focused guidance and step-by-step technical playbooks.34 items6 topicsUpdated 12 Nov 2026
- The ToolchainPractical calculators, diagnostic scenarios, and reference material.
How KBY content is made
Most KBY content is built from a topic brief and vendor documentation, checked by automated tests and published by software. Treat commands as a starting point to test, and tell us when something is wrong: we correct it on the page.
The KBY Brief
A short email about twice a week with new runbooks, configuration traps and fixes from KBY Technologies.
- Runbooks
- Config traps
- Fixes