[{"data":1,"prerenderedAt":1694},["ShallowReactive",2],{"sc:header-data-da":3,"sc:footer-data-da":489,"post-da--posts-2026-01-27-exchange-active-directory-150f55880e8d67":519,"authors_data":1107,"content-da-list-7b291c2dd91a4":1461,"authors_data:​Thorsten Kunzi​":1692},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"da":13},{"title":14,"url":15,"alt":16},"Forside","/da","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"da":21},{"title":22,"description":23},"Workplace","Intelligente, sikre og fleksible arbejdspladser bygget på Microsoft 365, der forener moderne teknologier og identitetstjenester.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"da":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"da":34},{"title":35,"url":36},"Managed Intune","/da/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"da":40},{"title":41,"url":42},"Managed Entra","/da/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"da":46},{"title":47,"url":48},"Managed Workplace","/da/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"da":52},{"title":53,"url":54},"Consulting Services","/da/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"da":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"da":64},{"title":65,"url":66},"Microsoft Entra Suite","/da/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"da":70},{"title":71,"url":72},"Microsoft Intune","/da/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"da":76},{"title":77,"url":78},"Microsoft Windows","/da/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"da":82},{"title":83,"url":84},"Windows 365 Cloud PC","/da/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"da":88},{"title":89,"url":90},"Cloud Workplace Foundation","/da/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"da":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"da":100},{"title":101,"url":102},"Microsoft 365 Copilot","/da/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"da":106},{"title":107,"url":108},"Teams","/da/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"da":112},{"title":113,"url":114},"SharePoint & Power Platform","/da/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"da":118},{"title":119,"url":120},"Exchange Online","/da/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"da":124},{"title":125,"url":126},"Information Protection & Compliance","/da/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"da":130},{"title":131,"description":132},"Azure","Sæt gang i væksten med Azure: skær ned på cloudomkostningerne, øg effektiviteten og driv innovationen med IaaS og PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"da":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"da":142},{"title":143,"url":144},"Azure Managed Services","/da/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"da":148},{"title":149,"url":150},"Azure Consulting","/da/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"da":154},{"title":155},"Scenarier",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"da":160},{"title":161,"url":162},"Planlæg din cloud","/da/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"da":166},{"title":167,"url":168},"Migrér til cloud","/da/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"da":172},{"title":173,"url":174},"Forny din forretning","/da/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"da":178},{"title":179,"url":180},"Gentænk din VMware-strategi","/da/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"da":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"da":190},{"title":191,"url":192},"Azure Foundation","/da/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"da":196},{"title":197,"url":198},"Azure AI Foundation","/da/azure/azure-ai-foundation",{"name":86,"languages":200},{"da":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"da":205},{"title":206,"url":207},"Azure Data Foundation","/da/azure/azure-data-foundation",{"name":188,"languages":209},{"da":210},{"title":211,"url":212},"Azure Container Foundation","/da/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"da":216},{"title":217,"url":218},"Managed Dark Tenant","/da/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"da":222},{"title":223,"url":224},"Cloud Adoption Framework","/da/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"da":228},{"title":229,"url":230},"Cloud Competence Center","/da/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"da":234},{"title":235,"description":236,"emergency":237},"Sikkerhed","Årvågenhed i clouden med en prisbelønnet 24/7 managed service, incident response og tidssvarende beskyttelse af din infrastruktur.",{"text":238,"href":239,"skin":240,"icon":241},"Under angreb?","/da/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"da":249},{"title":250,"url":251},"Managed Red Tenant","/da/security/managed-red-tenant",{"name":214,"languages":253},{"da":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"da":259},{"title":260,"url":261},"Sentinel Data Lake","/da/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"da":265},{"title":266,"url":267},"Security Consulting","/da/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"da":274},{"title":275,"url":276},"Cloud Security Operations Center","/da/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"da":280},{"title":281,"url":282},"Global Secure Access","/da/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"da":286},{"title":287,"url":288},"MyWorkID","/da/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"da":295},{"title":296,"url":297},"Preventive Services","/da/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"da":301},{"title":302,"url":303},"Data Security Service","/da/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"da":307},{"title":308,"url":309},"Security Copilot Agents","/da/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"da":313},{"title":314,"url":315},"Implementering af NIS2","/da/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"da":319},{"title":320,"description":321},"Produkter","Companion-produkter til et gennemført sikkert, 100 % cloud-native Microsoft-miljø, der styrker samarbejdet, netværksautentificeringen og softwarehåndteringen.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"da":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Cloudbaseret softwaredistribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"da":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certifikatdistribution fra clouden",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"da":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Arbejd med dine lokale Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"da":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrér dine data fra én server til en anden",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"da":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider til Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"da":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Autentificering til dit netværk",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"da":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Find kontakter i Microsoft Teams",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"da":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-overvågning i realtid",{"name":396,"languages":397},"casestudies",{"da":398},{"title":399,"url":400,"description":401},"Cases","/da/casestudies","Pioner i clouden: din Microsoft-partner til gennemarbejdede cloudløsninger med en blueprint-baseret tilgang og ekspertise i Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"da":405},{"title":406,"description":401},"Virksomhed",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"da":411},{"title":412},"Om os",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"da":417},{"title":418,"url":419},"Fakta og tal","/da/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"da":423},{"title":424,"url":425},"Kontakt og lokationer","/da/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"da":429},{"title":430,"url":431},"glueckkanja Schweiz","/da/company/switzerland",{"name":433,"languages":434},"austria",{"da":435},{"title":436,"url":437},"glueckkanja Østrig","/da/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"da":441},{"title":442},"Karriere",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"da":447},{"title":448,"url":449},"Karriereoversigt","/da/career",{"name":451,"languages":452},"company-young-professionals",{"da":453},{"title":454,"url":455},"Young Professionals","/da/young-professionals",{"name":457,"languages":458},"company-jobs",{"da":459},{"title":460,"url":461},"Ledige stillinger","/da/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"da":465},{"title":466},"Aktuelt",[468,474],{"name":469,"languages":470},"company-blog",{"da":471},{"title":472,"url":473},"Blog","/da/blog",{"name":469,"languages":475},{"da":476},{"title":477,"url":478},"Events","/da/events",[480],{"name":481,"languages":482},"career-meta",{"da":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"da":487},{"title":488,"url":425,"active":484},"Kontakt",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksDa":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"Privatlivspolitik","/da/privacy",{"title":514,"url":515},"Juridisk information","/da/imprint",{"title":517,"url":518},"Ingen cookies","/da/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":1060,"eventid":494,"extension":1079,"hideInRecent":325,"layout":1080,"meta":1081,"moment":1085,"navigation":325,"path":1103,"seo":1104,"stem":1105,"tags":494,"webcast":484,"__hash__":1106},"content_da/posts/2026-01-27-exchange-active-directory.md","​​​Exchange AD Split Permissions uden fortrydelser​",[523],"​Thorsten Kunzi​",{"type":525,"value":526,"toc":1059},"minimal",[527,532,536,543,547,574,577,581,587,602,608,611,615,651,670,675,681,690,694,710,714,721,725,735,740,745,764,768,794,798,818,826,842,856,916,920,944,961,973,986,993,997,1007,1018,1030,1034,1037,1040,1055],[528,529,531],"h3",{"id":530},"tldr-hvad-hvis-vi-fjerner-ulemperne","TLDR: hvad hvis vi fjerner ulemperne?",[533,534,535],"p",{},"Jeg har fundet en måde at tildele AD- og RBAC-rettighederne igen der, hvor Exchange-brugerne, grupperne, kontakterne og så videre ligger. Dermed skal hverken administratorer eller identity management-systemer lægge om, og netop det har efter min erfaring været årsagen til, at de fleste virksomheder aldrig fik det implementeret. Samtidig beholder vi sikkerhedsgevinsten mod lateral movement og domænekompromittering.",[533,537,538],{},[539,540],"img",{"alt":541,"src":542},"Active Directory","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_1.png",[528,544,546],{"id":545},"det-opnås-i-tre-trin","Det opnås i tre trin:",[548,549,550,564,569],"ol",{},[551,552,553,554,561],"li",{},"Implementér ",[555,556,560],"a",{"href":557,"rel":558},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions#switch-to-active-directory-split-permissions",[559],"nofollow","AD split permission-modellen",[562,563],"br",{},[551,565,566,567],{},"Giv Exchange-serverne de tabte AD-rettigheder tilbage, men kun på de relevante OU’er",[562,568],{},[551,570,571,572],{},"Tildel Exchange RBAC for at genaktivere de manglende PowerShell-cmdletter",[562,573],{},[533,575,576],{},"Alt sammen via Microsofts vejledning, AD ACL’er eller Exchange RBAC-tildelinger.",[528,578,580],{"id":579},"hvorfor-er-det-vigtigt-nu","Hvorfor er det vigtigt (nu)?",[533,582,583,584,586],{},"Emnet er stort set blevet overset eller ignoreret, siden det blev introduceret med Exchange 2010 SP1. Men standardmodellen med delte rettigheder udgør en betydelig sikkerhedsrisiko for overtagelse af Active Directory. Kombineret med at Exchange gennem de seneste år har været berygtet for remote exploits, er det på tide at handle.",[562,585],{},"\nProblemet stammer fra privilegier, der tildeles i roden af et domæne og nedarves gennem hele domænet.",[588,589,590,593,596,599],"ul",{},[551,591,592],{},"ændre rettigheder på brugere og grupper (reelt fuld adgang)",[551,594,595],{},"ændre gruppemedlemmer",[551,597,598],{},"nulstille adgangskoder på brugere",[551,600,601],{},"oprette/slette brugere og grupper",[533,603,604],{},[539,605],{"alt":606,"src":607},"Permissions","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_2.png",[533,609,610],{},"Kun bestemte højt privilegerede Tier0-brugere og -grupper er beskyttet af AdminSDHolder-processen (attributten admincount=1), og i mange miljøer findes der ubeskyttede brugere eller grupper, som kan give mulighed for at kompromittere domænet og/eller skoven eller i det mindste forvolde alvorlig skade.",[528,612,614],{"id":613},"fremtrædende-eksempler","Fremtrædende eksempler:",[588,616,617,620,640],{},[551,618,619],{},"Entra Connect Sync-kontoen, når der bruges PWHashSync",[551,621,622,623],{},"Standardgrupper\n",[588,624,625,628,637],{},[551,626,627],{},"Allowed RODC Password Replication Group sammen med EntraConnect-kontoen (hvis der findes en reel Windows RODC)",[551,629,630,631,636],{},"Se også ",[555,632,635],{"href":633,"rel":634},"https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta/",[559],"Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA) - SpecterOps",", der viser flere veje (gruppen Account Operators udgør en tilsvarende trussel)",[551,638,639],{},"Tømning af Protected Users for at skabe angrebsvektorer ved at fjerne beskyttelser",[551,641,642,643],{},"Ubeskyttede brugerdefinerede grupper eller admin-/servicekonti\n",[588,644,645,648],{},[551,646,647],{},"Skriverettigheder på GPO’er (der anvendes på domænecontrollere)",[551,649,650],{},"Håndtering af adgang til AD-backups, backupserver, PKI-skabeloner, hypervisor, ...",[533,652,653,654,656,657,662,664,665],{},"Det er meget svært med tilbagevirkende kraft at inddæmme alle disse nuværende og fremtidige potentielle veje. For den brugerdefinerede OU _ADM kan du deaktivere ACL-nedarvning, men de fleste standardobjekter må ikke flyttes fra standard-OU’en Builtin eller containeren Users og forbliver sårbare.",[562,655],{},"\nDet er langt bedre at fjerne de vidtrækkende rettigheder fra roden, hvilket sker ved at implementere Active Directory split permissions-modellen. ",[555,658,661],{"href":659,"rel":660},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions",[559],"Configure Exchange Server for split permissions | Microsoft Learn",[562,663],{},"\nOg Microsoft er enig: “…encouraged to implement Active Directory split permissions” ",[555,666,669],{"href":667,"rel":668},"https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-7-%E2%80%93-implementing-least-privilege/4366626",[559],"Active Directory Hardening Series - Part 7 – Implementing Least Privilege | Microsoft Community Hub",[671,672,674],"h2",{"id":673},"men-hvorfor-er-der-ingen-der-gør-det","Men hvorfor er der ingen, der gør det?",[533,676,677,678,680],{},"Da split permissions ikke fandtes før Exchange 2010 SP1, havde alle på det tidspunkt affundet sig med situationen, og det ser ud til, at sikkerhedsafdelingerne ikke fik presset det igennem, da muligheden endelig var der.",[562,679],{},"\nDet ville også have tvunget ændringer igennem i admin- og IDM-processer, som at oprette brugere eller distributionslister i AD først og derefter bruge Exchange til at “mail enable” dem.",[533,682,683,684,686],{},"Cmdletter, der ikke længere er tilgængelige eller virker:",[562,685],{},[687,688,689],"code",{},"Add-DistributionGroupMember, New-DistributionGroup, New-Mailbox, New-MailContact, New-MailUser, New-RemoteMailbox, Remove-DistributionGroup, Remove-DistributionGroupMember, Remove-Mailbox, Remove-MailContact, Remove-MailUser, Remove-RemoteMailbox, Update-DistributionGroupMember, Add-ADPermission, Remove-ADPermission ",[528,691,693],{"id":692},"eksempler-på-omlægning","Eksempler på omlægning:",[588,695,696,707],{},[551,697,698,699],{},"New-Mailbox (hvor Exchange skriver til AD) ville blive:\n",[588,700,701,704],{},[551,702,703],{},"New-ADUser (hvor adm.jdoe skriver til AD)",[551,705,706],{},"Enable-Mailbox",[551,708,709],{},"Add-ADPermission for SendAs-rettigheder skulle udføres via Active Directory Users and Computers under fanen Security og krævede ofte yderligere AD-rettigheder til almindelige administratorer.",[671,711,713],{"id":712},"vis-mig-no-regrets-løsningen","Vis mig no-regrets-løsningen",[533,715,716,720],{},[717,718,719],"strong",{},"Ansvarsfraskrivelse",": Læs og forstå de følgende links og artikler fuldt ud, afprøv først i et testmiljø, og sørg for, at AD-backups er aktuelle, og at der er etableret recovery-procedurer.",[528,722,724],{"id":723},"kortlæg-den-nuværende-brug","Kortlæg den nuværende brug",[533,726,727,730,732],{},[717,728,729],{},"Du bør først undersøge, hvilke af de berørte cmdletter der er i brug på hvilke OU’er.",[562,731],{},[687,733,734],{},"$CsvPath =\"C:\\temp\\SplitPermissionAdminAuditLog.csv\"",[533,736,737],{},[687,738,739],{},"$Cmdlets = \"Add-ADPermission\",\"Remove-ADPermission\",\"New-DistributionGroup\",\"Remove-DistributionGroup\",\"Add-DistributionGroupMember\",\"Update-DistributionGroupMember\",\"Remove-DistributionGroupMember\",\"New-Mailbox\",\"Remove-Mailbox\",\"New-RemoteMailbox\",\"Remove-RemoteMailbox\",\"New-MailUser\",\"Remove-MailUser\",\"New-MailContact\",\"Remove-MailContact\"",[533,741,742],{},[687,743,744],{},"Search-AdminAuditLog -ResultSize 99000 -Cmdlets $Cmdlets| select RunDate,Caller,ObjectModified,CmdletName,@{Name='CmdletParameters';Expression={[string]::join(\",\", ($_.CmdletParameters))}},succeeded,error | Export-Csv -Path $CsvPath -Delimiter \";\" -Encoding Unicode -NoTypeInformation",[533,746,747,750,752,755,758,761],{},[717,748,749],{},"Hurtig analyse af caller og cmdletter:",[562,751],{},[687,753,754],{},"$CSVs=Import-Csv -Path $CsvPath -Delimiter \";\"",[687,756,757],{},"$CSVs|group Caller",[687,759,760],{},"$CSVs|group CmdletName",[687,762,763],{},"Analyze the CSV for where AD permissions will be needed. Potentially optimize by moving all Exchange relevant groups into dedicated OUs.",[528,765,767],{"id":766},"aktivér-split-permissions-modellen","Aktivér split permissions-modellen",[533,769,770,777,779,780,782,785,787,790,791],{},[717,771,772,773,776],{},"Følg anvisningerne under “Switch to Active Directory split permissions” i ",[555,774,661],{"href":557,"rel":775},[559]," (IKKE RBAC split permissions)",[562,778],{},"\nKort fortalt fjerner det de farlige rettigheder fra gruppen “Exchange Windows Permissions” og fjerner samtidig Exchange som gruppemedlem.",[562,781],{},[687,783,784],{},"Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF /PrepareAD /ActiveDirectorySplitPermissions:true",[562,786],{},[717,788,789],{},"Brug blot dette for at rulle tilbage:"," ",[687,792,793],{},"/ActiveDirectorySplitPermissions:false",[528,795,797],{"id":796},"tildel-ad-rettigheder","Tildel AD-rettigheder",[533,799,800,803,805,806,808,811,813,815],{},[717,801,802],{},"Opret en brugerdefineret AD-gruppe, og gør Exchange-serverne til medlemmer.",[562,804],{},"\ntilpas OU-stien først!",[562,807],{},[687,809,810],{},"New-ADGroup -Name \"AD_Custom Exchange Split permissions replacement\" -GroupCategory Security -GroupScope DomainLocal -Path \"OU=Rights,OU=Groups,OU=T1,OU=_ADM,$((Get-ADDomain).DistinguishedName)\" -Description \"replaces the permissions lost by split permissions on relevant OUs\"",[562,812],{},[562,814],{},[687,816,817],{},"Add-ADGroupMember \"AD_Custom Exchange Split permissions replacement\" -Members \"Exchange Trusted Subsystem\"",[533,819,820,823,825],{},[717,821,822],{},"genstart Exchange-serverne, for at rettigheder via gruppen kan træde i kraft",[562,824],{},"\nJeg har lavet et script, der gør det nemt at delegere AD-rettighederne pr. use case.",[827,828,829],"blockquote",{},[533,830,831,837,838,841],{},[717,832,833],{},[834,835,836],"em",{},"INFO:"," Uden disse rettigheder vil Exchange-serveren modtage fejlen ",[687,839,840],{},"“INSUFF_ACCESS_RIGHTS”"," fra AD.",[533,843,844,853,855],{},[717,845,846,847,852],{},"Download ",[555,848,851],{"href":849,"rel":850},"https://github.com/glueckkanja/code-snippets/blob/main/ExchangeADSplitPermission/Add-ExchangeADSplitPermissionOnOU.ps1",[559],"Add-ExchangeADSplitPermissionOnOU.ps1"," fra glueckkanja GitHub",[562,854],{},"\nDet kan tildele følgende PermissionTypes:",[588,857,858,871,891,904],{},[551,859,860,863],{},[717,861,862],{},"CreateUserAndContact",[588,864,865,868],{},[551,866,867],{},"Create/delete, ResetPassword og WriteAllProperties for Users og Contacts",[551,869,870],{},"Exchange-cmdletter: New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact og de tilsvarende Remove-*",[551,872,873,876],{},[717,874,875],{},"GroupManage",[588,877,878,881,884],{},[551,879,880],{},"Create/Delete Groups, Modify Member",[551,882,883],{},"Exchange-cmdletter: New-DistributionGroup, Remove-DistributionGroup, Add-DistributionGroupMember, Update-DistributionGroupMember, Remove-DistributionGroupMember",[551,885,886,887],{},"Yderligere use cases: brugere, der administrerer de DistributionGroups, de ejer, via https://",[888,889,890],"on-prem-exchange",{},"/EAC",[551,892,893,896],{},[717,894,895],{},"UserSendAs",[588,897,898,901],{},[551,899,900],{},"Modfiy AD Permissions on Users",[551,902,903],{},"Exchange-cmdlet: Add-ADPermission",[551,905,906,909],{},[717,907,908],{},"GroupSendAs",[588,910,911,914],{},[551,912,913],{},"Modfiy AD Permissions on Groups",[551,915,903],{},[528,917,919],{"id":918},"sådan-bruger-du-scriptet","Sådan bruger du scriptet:",[533,921,922],{},[687,923,924,790,927,790,933,790,936,790,941],{},[687,925,926],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU",[928,929,930],"b",{},[687,931,932],{},"\u003COU>",[687,934,935],{},"-PermissionType",[928,937,938],{},[687,939,940],{},"\u003CGroupManage|UserSendAs|GroupSendAs|CreateUserAndContact>",[687,942,943],{},"-Trustee \"AD_Custom Exchange Split permissions replacement",[533,945,946,947,949],{},"f.eks.",[562,948],{},[687,950,951,790,954,790,958],{},[687,952,953],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=ExchangeGroups,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType",[928,955,956],{},[687,957,875],{},[687,959,960],{},"-Trustee \"AD_Custom Exchange Split permissions replacement\"",[533,962,963],{},[687,964,965,790,967,790,971],{},[687,966,953],{},[928,968,969],{},[687,970,908],{},[687,972,960],{},[533,974,975],{},[687,976,977,790,980,790,984],{},[687,978,979],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType",[928,981,982],{},[687,983,895],{},[687,985,960],{},[533,987,988],{},[687,989,990],{},[687,991,992],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType CreateUserAndContact -Trustee \"AD_Custom Exchange Split permissions replacement\"",[528,994,996],{"id":995},"tildel-exchange-rbac","Tildel Exchange RBAC",[533,998,999,1002,1004],{},[717,1000,1001],{},"Genaktivér parameteren -BypassSecurityGroupManagerCheck for cmdletterne Add-DistributionGroupMember og Remove-DistributionGroupMember:",[562,1003],{},[687,1005,1006],{},"New-RoleGroup -Name \"SplitPermission Security Group Creation and Membership\" -Roles \"Security Group Creation and Membership\" -Members \"Organization Management\",\"Recipient Management\" -Description \"Brings back -BypassSecurityGroupManagerCheck to Add-DistributionGroupMember, but also needs AD ACL for Exchange Server on target DLs\" ",[827,1008,1009],{},[533,1010,1011,790,1015,1017],{},[717,1012,1013],{},[834,1014,836],{},[562,1016],{},"Ellers får du \"-BypassSecurityGroupManagerCheck parameter is not available\" eller \"You don't have sufficient permissions. This operation can only be performed by a manager of the group\"",[533,1019,1020,1022,1025,1027],{},[562,1021],{},[717,1023,1024],{},"Genaktivér cmdletterne New-Mailbox, New-RemoteMailbox, New-MailContact, Remove-... med de nødvendige parametre:",[562,1026],{},[687,1028,1029],{},"New-RoleGroup -Name \"SplitPermission Mail Recipient Creation\" -Roles \"Mail Recipient Creation\" -Members \"Organization Management\",\"Recipient Management\" -Description \"Brings back New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact and matching Remove-... cmdlets, but additionally Exchange needs AD ACL for Exchange Server on target OUs\"",[671,1031,1033],{"id":1032},"konklusion","Konklusion",[533,1035,1036],{},"Jeg håber, at mange flere med denne vejledning tager det vigtige skridt og sikrer deres Active Directory mod kompromittering via Exchange. Jeg er endnu ikke stødt på problemer, hverken da jeg implementerede Exchange AD split permissions-modellen eller ved den omlægning, artiklen her beskriver, hos vores kunder.",[533,1038,1039],{},"Jeg håber, at Microsoft implementerer en indbygget måde at opnå denne granulære, OU-baserede tilgang på i stedet for den nuværende alt eller intet, så den kan blive udbredt.",[533,1041,1042,1043,1048,1049,1054],{},"Da AD Tiering ligger mig meget på sinde: Log desuden ikke på Exchange-servere med Domain Admin-konti (eller nogen anden Tier0-konto), men behandl dem som Tier1 fra nu af, og implementér AD Tiering hurtigst muligt.\nSom første skridt anbefaler jeg værktøjer som ",[555,1044,1047],{"href":1045,"rel":1046},"https://www.pingcastle.com/",[559],"PingCastle"," eller ",[555,1050,1053],{"href":1051,"rel":1052},"https://www.semperis.com/purple-knight/",[559],"Purple Knight"," til at vurdere jeres AD-sikkerhed og control paths.",[1056,1057,1058],"style",{},"\ncode {\n  font-size: inherit\n}\n",{"title":1060,"searchDepth":1061,"depth":1061,"links":1062},"",2,[1063,1065,1066,1067,1068,1071,1078],{"id":530,"depth":1064,"text":531},3,{"id":545,"depth":1064,"text":546},{"id":579,"depth":1064,"text":580},{"id":613,"depth":1064,"text":614},{"id":673,"depth":1061,"text":674,"children":1069},[1070],{"id":692,"depth":1064,"text":693},{"id":712,"depth":1061,"text":713,"children":1072},[1073,1074,1075,1076,1077],{"id":723,"depth":1064,"text":724},{"id":766,"depth":1064,"text":767},{"id":796,"depth":1064,"text":797},{"id":918,"depth":1064,"text":919},{"id":995,"depth":1064,"text":996},{"id":1032,"depth":1061,"text":1033},"md","post",{"lang":1082,"seoTitle":1083,"titleClass":1084,"date":1085,"blogtitlepic":1086,"socialimg":1087,"customExcerpt":1088,"keywords":1089,"scripts":1090,"asideNav":1091,"maxContent":325,"published":484},"da","Exchange AD Split Permissions: Sikr Active Directory med least privilege","h2-font-size","2026-01-27","head-vulnerability-management","/blog/heads/head-vulnerability-management.jpg","On-premises Exchange Server-installationer er stadig udbredte, også i organisationer, der har flyttet alle postkasser til skyen. De har fortsat vidtrækkende rettigheder i Active Directory, og derfor findes der som regel en oplagt angrebsvej til at kompromittere hele AD’et og dermed store dele af virksomhedens IT. Skiftet til den såkaldte »AD split permissions«-model fjerner de kritiske rettigheder, og jeg har udviklet en løsning, der fjerner de ulemper, som hidtil har forhindret udbredelsen.","Exchange Server, Active Directory, AD split permissions, RBAC, Exchange-rettigheder, AdminSDHolder, least privilege, AD ACL, PowerShell",{"slick":325,"form":325},{"menuItems":1092},[1093,1095,1097,1099,1101],{"href":1094,"text":531},"#tldr-hvad-hvis-vi-fjerner-ulemperne",{"href":1096,"text":580},"#hvorfor-er-det-vigtigt-nu",{"href":1098,"text":674},"#men-hvorfor-er-der-ingen-der-gør-det",{"href":1100,"text":713},"#vis-mig-no-regrets-løsningen",{"href":1102,"text":1033},"#konklusion","/posts/2026-01-27-exchange-active-directory",{"title":521,"description":1060},"posts/2026-01-27-exchange-active-directory","6t3oJRhaDzM5GzP8GT1sAaaFKZqn_pZwHth7rg6_79k",{"id":1108,"extension":1109,"meta":1110,"stem":8,"__hash__":1460},"authors_data/authors.json","json",{"path":1111,"Fritz Zurhorst":1112,"Alexander Schlindwein":1118,"Sophie Luna":1124,"Nadine Klein":1132,"Karsten Kleinschmidt":1138,"Julian Wendt":1146,"Holger Bunkradt":1151,"Ralf Mania":1157,"Oliver Kieselbach":1163,"Steffen Schwerdtfeger":1169,"Gunnar Winter":1177,"Jan Petersen":1182,"Thorsten Kunzi":1187,"Moritz Pohl":1191,"Thorben Pöschus":1196,"Christoph Hannebauer":1202,"Marco Scheel":1206,"Christopher Brumm":1211,"Florian Klante":1218,"Niklas Bachmann":1223,"Nils Krautkrämer":1228,"Patrick Treptau":1234,"Peter Beckendorf":1239,"Patrick Sobau":1244,"Jörg Wunderlich":1249,"Michael Breither":1253,"Christian Kanja":1258,"Zeba Hoffmann":1264,"Jochen Fröhlich":1269,"Jan Geisbauer":1273,"Gerrit Reinke":1284,"Christian Kordel":1290,"Stephan Wälde":1294,"Carolin Kanja":1299,"Adrian Ritter":1305,"Marvin Bangert":1310,"Thorsten Pickhan":1316,"Christian Lorenz":1322,"Denis Böhm":1327,"Fabian Bader":1332,"Juan Jose Fernandez Perez":1338,"Mahschid Sayyar":1343,"Benjamin Dassow":1348,"Markus Walschburger":1353,"Jonathan Haist":1358,"Daniel Rohregger":1363,"Thomas Naunheim":1368,"Florian Stöckl":1373,"Pascal Asch":1378,"Markus Kättner":1383,"Anna Ulbricht":1390,"Annette Brauns":1397,"body":1403,"title":1459},"/authors",{"display_name":1113,"avatar":1114,"permalink":1115,"linkedin":1116,"imageOffsetTop":1117},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":1119,"avatar":1120,"permalink":1121,"twitter":1122,"linkedin":1123},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1125,"avatar":1126,"permalink":1127,"twitter":1128,"linkedin":1129,"imageOffsetLeft":1130,"imageOffsetTop":1131},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1133,"avatar":1134,"permalink":1135,"twitter":1136,"linkedin":1137,"imageOffsetTop":1117},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1139,"avatar":1140,"permalink":1141,"twitter":1142,"linkedin":1143,"imageOffsetTop":1144,"imageOffsetLeft":1145},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1147,"avatar":1148,"permalink":1149,"linkedin":1150},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1152,"avatar":1153,"permalink":1154,"linkedin":1155,"twitter":1156},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1158,"avatar":1159,"permalink":1160,"linkedin":1161,"twitter":1162},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1164,"avatar":1165,"permalink":1166,"linkedin":1167,"twitter":1168},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":1170,"avatar":1171,"permalink":1172,"linkedin":1173,"twitter":1174,"imageOffsetTop":1175,"imageOffsetLeft":1176},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1178,"avatar":1179,"permalink":1180,"twitter":1128,"linkedin":1181},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1183,"avatar":1184,"permalink":1185,"twitter":1128,"linkedin":1186},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":1188,"avatar":1189,"permalink":1190,"twitter":1128,"linkedin":1181,"imageOffsetTop":1117},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1192,"avatar":1193,"permalink":1194,"twitter":1128,"linkedin":1195},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1197,"avatar":1198,"permalink":1199,"twitter":1200,"linkedin":1201},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1203,"avatar":1204,"permalink":1205,"twitter":1128,"linkedin":1181,"imageOffsetTop":1117},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1207,"avatar":1208,"permalink":1209,"twitter":1210,"linkedin":1210},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1212,"avatar":1213,"permalink":1214,"twitter":1215,"linkedin":1216,"imageOffsetTop":1217},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1219,"avatar":1220,"permalink":1221,"linkedin":1222,"twitter":1128},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1224,"avatar":1225,"permalink":1226,"linkedin":1227,"twitter":1128},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1229,"avatar":1230,"permalink":1231,"twitter":1232,"linkedin":1233},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1235,"avatar":1236,"permalink":1237,"linkedin":1238,"twitter":1128},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1240,"avatar":1241,"permalink":1242,"linkedin":1243,"twitter":1128,"imageOffsetTop":1117},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1245,"avatar":1246,"permalink":1247,"linkedin":1248,"twitter":1128},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1250,"avatar":1251,"permalink":1252,"twitter":1128},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1254,"avatar":1255,"permalink":1256,"twitter":1128,"linkedin":1257},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1259,"avatar":1260,"permalink":1261,"twitter":1262,"linkedin":1263},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1265,"avatar":1266,"permalink":1267,"linkedin":1268,"twitter":1128},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1270,"avatar":1271,"permalink":1272,"twitter":1128,"linkedin":1181},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1274,"avatar":1275,"permalink":1276,"twitter":1277,"linkedin":1277,"imageOffsetTop":1117,"socials":1278},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1279,1281],{"text":472,"href":1280},"https://emptydc.com",{"text":1282,"href":1283},"Podcast","https://hairlessinthecloud.com",{"display_name":1285,"avatar":1286,"permalink":1287,"twitter":1288,"linkedin":1289},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1291,"avatar":1292,"permalink":1293,"twitter":1128,"linkedin":1181},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1295,"avatar":1296,"permalink":1297,"twitter":1298,"linkedin":1181},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1300,"avatar":1301,"permalink":1302,"twitter":1303,"linkedin":1304},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1306,"avatar":1307,"permalink":1308,"twitter":1309,"linkedin":1309},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1311,"avatar":1312,"permalink":1313,"twitter":1314,"linkedin":1315},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1317,"avatar":1318,"permalink":1319,"twitter":1320,"linkedin":1321},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1323,"avatar":1324,"permalink":1325,"linkedin":1326,"twitter":1128},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1328,"avatar":1329,"permalink":1330,"linkedin":1331,"twitter":1128},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1333,"avatar":1334,"permalink":1335,"linkedin":1336,"twitter":1337},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1339,"avatar":1340,"permalink":1341,"linkedin":1342},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1349,"avatar":1350,"permalink":1351,"linkedin":1352},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1354,"avatar":1355,"permalink":1356,"linkedin":1357},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1359,"avatar":1360,"permalink":1361,"linkedin":1362,"imageOffsetTop":1117},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1364,"avatar":1365,"permalink":1366,"linkedin":1367,"imageOffsetTop":1117},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1369,"avatar":1370,"permalink":1371,"linkedin":1372,"imageOffsetTop":1217},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1374,"avatar":1375,"permalink":1376,"linkedin":1377,"imageOffsetTop":1217},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1379,"avatar":1380,"permalink":1381,"linkedin":1382,"imageOffsetTop":1217},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1384,"avatar":1385,"permalink":1386,"linkedin":1387,"imageOffsetTop":1388,"imageOffsetLeft":1389},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1391,"avatar":1392,"permalink":1393,"linkedin":1394,"imageOffsetTop":1395,"imageOffsetLeft":1396},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1398,"avatar":1399,"permalink":1400,"linkedin":1401,"imageOffsetTop":1402,"imageOffsetLeft":1144},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1404,"Alexander Schlindwein":1405,"Sophie Luna":1406,"Nadine Klein":1407,"Karsten Kleinschmidt":1408,"Julian Wendt":1409,"Holger Bunkradt":1410,"Ralf Mania":1411,"Oliver Kieselbach":1412,"Steffen Schwerdtfeger":1413,"Gunnar Winter":1414,"Jan Petersen":1415,"Thorsten Kunzi":1416,"Moritz Pohl":1417,"Thorben Pöschus":1418,"Christoph Hannebauer":1419,"Marco Scheel":1420,"Christopher Brumm":1421,"Florian Klante":1422,"Niklas Bachmann":1423,"Nils Krautkrämer":1424,"Patrick Treptau":1425,"Peter Beckendorf":1426,"Patrick Sobau":1427,"Jörg Wunderlich":1428,"Michael Breither":1429,"Christian Kanja":1430,"Zeba Hoffmann":1431,"Jochen Fröhlich":1432,"Jan Geisbauer":1433,"Gerrit Reinke":1437,"Christian Kordel":1438,"Stephan Wälde":1439,"Carolin Kanja":1440,"Adrian Ritter":1441,"Marvin Bangert":1442,"Thorsten Pickhan":1443,"Christian Lorenz":1444,"Denis Böhm":1445,"Fabian Bader":1446,"Juan Jose Fernandez Perez":1447,"Mahschid Sayyar":1448,"Benjamin Dassow":1449,"Markus Walschburger":1450,"Jonathan Haist":1451,"Daniel Rohregger":1452,"Thomas Naunheim":1453,"Florian Stöckl":1454,"Pascal Asch":1455,"Markus Kättner":1456,"Anna Ulbricht":1457,"Annette Brauns":1458},{"display_name":1113,"avatar":1114,"permalink":1115,"linkedin":1116,"imageOffsetTop":1117},{"display_name":1119,"avatar":1120,"permalink":1121,"twitter":1122,"linkedin":1123},{"display_name":1125,"avatar":1126,"permalink":1127,"twitter":1128,"linkedin":1129,"imageOffsetLeft":1130,"imageOffsetTop":1131},{"display_name":1133,"avatar":1134,"permalink":1135,"twitter":1136,"linkedin":1137,"imageOffsetTop":1117},{"display_name":1139,"avatar":1140,"permalink":1141,"twitter":1142,"linkedin":1143,"imageOffsetTop":1144,"imageOffsetLeft":1145},{"display_name":1147,"avatar":1148,"permalink":1149,"linkedin":1150},{"display_name":1152,"avatar":1153,"permalink":1154,"linkedin":1155,"twitter":1156},{"display_name":1158,"avatar":1159,"permalink":1160,"linkedin":1161,"twitter":1162},{"display_name":1164,"avatar":1165,"permalink":1166,"linkedin":1167,"twitter":1168},{"display_name":1170,"avatar":1171,"permalink":1172,"linkedin":1173,"twitter":1174,"imageOffsetTop":1175,"imageOffsetLeft":1176},{"display_name":1178,"avatar":1179,"permalink":1180,"twitter":1128,"linkedin":1181},{"display_name":1183,"avatar":1184,"permalink":1185,"twitter":1128,"linkedin":1186},{"display_name":1188,"avatar":1189,"permalink":1190,"twitter":1128,"linkedin":1181,"imageOffsetTop":1117},{"display_name":1192,"avatar":1193,"permalink":1194,"twitter":1128,"linkedin":1195},{"display_name":1197,"avatar":1198,"permalink":1199,"twitter":1200,"linkedin":1201},{"display_name":1203,"avatar":1204,"permalink":1205,"twitter":1128,"linkedin":1181,"imageOffsetTop":1117},{"display_name":1207,"avatar":1208,"permalink":1209,"twitter":1210,"linkedin":1210},{"display_name":1212,"avatar":1213,"permalink":1214,"twitter":1215,"linkedin":1216,"imageOffsetTop":1217},{"display_name":1219,"avatar":1220,"permalink":1221,"linkedin":1222,"twitter":1128},{"display_name":1224,"avatar":1225,"permalink":1226,"linkedin":1227,"twitter":1128},{"display_name":1229,"avatar":1230,"permalink":1231,"twitter":1232,"linkedin":1233},{"display_name":1235,"avatar":1236,"permalink":1237,"linkedin":1238,"twitter":1128},{"display_name":1240,"avatar":1241,"permalink":1242,"linkedin":1243,"twitter":1128,"imageOffsetTop":1117},{"display_name":1245,"avatar":1246,"permalink":1247,"linkedin":1248,"twitter":1128},{"display_name":1250,"avatar":1251,"permalink":1252,"twitter":1128},{"display_name":1254,"avatar":1255,"permalink":1256,"twitter":1128,"linkedin":1257},{"display_name":1259,"avatar":1260,"permalink":1261,"twitter":1262,"linkedin":1263},{"display_name":1265,"avatar":1266,"permalink":1267,"linkedin":1268,"twitter":1128},{"display_name":1270,"avatar":1271,"permalink":1272,"twitter":1128,"linkedin":1181},{"display_name":1274,"avatar":1275,"permalink":1276,"twitter":1277,"linkedin":1277,"imageOffsetTop":1117,"socials":1434},[1435,1436],{"text":472,"href":1280},{"text":1282,"href":1283},{"display_name":1285,"avatar":1286,"permalink":1287,"twitter":1288,"linkedin":1289},{"display_name":1291,"avatar":1292,"permalink":1293,"twitter":1128,"linkedin":1181},{"display_name":1295,"avatar":1296,"permalink":1297,"twitter":1298,"linkedin":1181},{"display_name":1300,"avatar":1301,"permalink":1302,"twitter":1303,"linkedin":1304},{"display_name":1306,"avatar":1307,"permalink":1308,"twitter":1309,"linkedin":1309},{"display_name":1311,"avatar":1312,"permalink":1313,"twitter":1314,"linkedin":1315},{"display_name":1317,"avatar":1318,"permalink":1319,"twitter":1320,"linkedin":1321},{"display_name":1323,"avatar":1324,"permalink":1325,"linkedin":1326,"twitter":1128},{"display_name":1328,"avatar":1329,"permalink":1330,"linkedin":1331,"twitter":1128},{"display_name":1333,"avatar":1334,"permalink":1335,"linkedin":1336,"twitter":1337},{"display_name":1339,"avatar":1340,"permalink":1341,"linkedin":1342},{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347},{"display_name":1349,"avatar":1350,"permalink":1351,"linkedin":1352},{"display_name":1354,"avatar":1355,"permalink":1356,"linkedin":1357},{"display_name":1359,"avatar":1360,"permalink":1361,"linkedin":1362,"imageOffsetTop":1117},{"display_name":1364,"avatar":1365,"permalink":1366,"linkedin":1367,"imageOffsetTop":1117},{"display_name":1369,"avatar":1370,"permalink":1371,"linkedin":1372,"imageOffsetTop":1217},{"display_name":1374,"avatar":1375,"permalink":1376,"linkedin":1377,"imageOffsetTop":1217},{"display_name":1379,"avatar":1380,"permalink":1381,"linkedin":1382,"imageOffsetTop":1217},{"display_name":1384,"avatar":1385,"permalink":1386,"linkedin":1387,"imageOffsetTop":1388,"imageOffsetLeft":1389},{"display_name":1391,"avatar":1392,"permalink":1393,"linkedin":1394,"imageOffsetTop":1395,"imageOffsetLeft":1396},{"display_name":1398,"avatar":1399,"permalink":1400,"linkedin":1401,"imageOffsetTop":1402,"imageOffsetLeft":1144},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1462,"authors":1679},[1463,1481,1495,1509,1525,1538,1551,1564,1576,1592,1606,1621,1639,1650,1663],{"id":1464,"title":1465,"author":1466,"cta":494,"description":1060,"hideInRecent":484,"layout":1080,"meta":1467,"moment":1473,"path":1474,"stem":1475,"tags":1476,"webcast":484},"content_da/posts/2026-09-22-end-of-mfa-sms.md","Enden på MFA-SMS",[1139],{"lang":1082,"date":1468,"categories":1469,"blogtitlepic":1471,"customExcerpt":1472},"2026-09-21",[1470],"Security","head-conditional-access.jpg","Hvorfor virksomheder nu bør skifte til phishing-resistente og så vidt muligt passwordløse loginmetoder.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[1470,1477,1478,1479,1480],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1482,"title":1483,"author":1484,"cta":494,"description":1060,"hideInRecent":484,"layout":1080,"meta":1485,"moment":1468,"path":1489,"stem":1490,"tags":1491,"webcast":484},"content_da/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. Når brugeren er exploiten, og hvordan I stopper det",[1113,1133],{"lang":1082,"date":1468,"categories":1486,"blogtitlepic":1487,"customExcerpt":1488},[1470],"head-clickfix.jpg","ClickFix gør brugere til deres egen angriber: et falsk CAPTCHA, en copy-paste, og skadekoden kører i hukommelsen, uden at noget lander på disken. Hvordan Microsoft Defender opdager angrebet, hvor detektionen når sine grænser, og hvordan I lukker hullet med et RunMRU-hunt og fire beskyttelseslag.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1492,1493,1494],"Defender","SOC","Endpoint Security",{"id":1496,"title":1497,"author":1498,"cta":494,"description":1060,"hideInRecent":484,"layout":1080,"meta":1499,"moment":1468,"path":1503,"stem":1504,"tags":1505,"webcast":484},"content_da/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin og hverdag på samme computer? Game Over.",[1274],{"lang":1082,"date":1468,"categories":1500,"blogtitlepic":1501,"customExcerpt":1502},[1470],"head-game-over-en.jpg","Hvorfor én tenant ikke rækker for CIO'er, og hvorfor den anden sjældent bliver tænkt med. Managed Red Tenant adskiller arkitektonisk det administrative arbejde fra kontormiljøet, Managed Dark Tenant holder virksomheden handlekraftig, hvis forsvaret alligevel falder. Hvad det betyder for driftsmodellen, SOC-signalet og dokumentationspligterne efter NISG 2026.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[1470,1506,1507,1508],"Privileged Access","Zero Trust","NIS2",{"id":1510,"title":1511,"author":1512,"cta":494,"description":1513,"hideInRecent":484,"layout":1080,"meta":1514,"moment":1515,"path":1520,"stem":1521,"tags":1522,"webcast":484},"content_da/posts/2026-08-08-isg-germany-2026.md","Fire gange Leader. glueckkanja i ISG-undersøgelsen Tyskland 2026",[1300],"ISG har omdøbt sin undersøgelse i år. Microsoft Cloud Ecosystem blev til Microsoft AI and Cloud Ecosystem, og med navnet har målestokken flyttet sig: Det, der vurderes, er ikke længere, hvem der indfører Microsoft-platforme, men hvem der driver Copilot, agenter og AI-workloads kontrollerbart. Den nye målestok har ikke ændret noget ved vores position. ISG Provider Lens®-undersøgelsen Tyskland 2026 positionerer os som Leader i fire kvadranter: Microsoft Productivity and Business Process Services og Azure Managed Services, hver gang i både Large Market og Mid Market. Efter 2021, 2023, 2024 og 2025 er det den femte Leader-placering i Tyskland, i Schweiz kom springet ind i Leader-kvadranten to uger tidligere.",{"lang":1082,"date":1515,"categories":1516,"blogtitlepic":1518,"customExcerpt":1519},"2026-08-08",[1517],"Corporate","head-isg-de-2026.png","ISG Provider Lens®-undersøgelsen 2026 positionerer glueckkanja i Tyskland som Leader i fire kvadranter: Microsoft Productivity and Business Process Services og Azure Managed Services, hver gang i både Large og Mid Market. Undersøgelsen hedder nu Microsoft AI and Cloud Ecosystem, og målestokken har flyttet sig: Det, der vurderes, er, hvem der driver AI- og agent-workloads kontrollerbart.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1523,1524],"Award","ISG",{"id":1526,"title":1527,"author":1528,"cta":494,"description":1529,"hideInRecent":484,"layout":1080,"meta":1530,"moment":1531,"path":1535,"stem":1536,"tags":1537,"webcast":484},"content_da/posts/2026-07-31-isg-switzerland-2026.md","Fra Rising Star til Leader. glueckkanja i ISG-undersøgelsen Schweiz 2026",[1300],"I 2024 stiftede vi glueckkanja Switzerland AG og flyttede ind i et kontor i zentroom på Bahnhofplatz 10b i Bern. I 2025 placerede ISG os som Rising Star på det schweiziske marked, som den leverandør, analytikerne tror kan tage springet ind i Leader-kvadranten. Nu er springet dokumenteret: ISG Provider Lens®-undersøgelsen 2026 positionerer os i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inden for områderne Azure Managed Services og Microsoft Productivity and Business Process Services.",{"lang":1082,"date":1531,"categories":1532,"blogtitlepic":1533,"customExcerpt":1534},"2026-07-31",[1517],"head-isg-ch-2026.png","ISG Provider Lens®-undersøgelsen 2026 positionerer glueckkanja i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inden for områderne Azure Managed Services og Microsoft Productivity and Business Process Services. To år efter markedsindtrædelsen i Bern, et år efter Rising Star-udmærkelsen.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1523,1524],{"id":1539,"title":1540,"author":1541,"cta":494,"description":1060,"hideInRecent":484,"layout":1080,"meta":1542,"moment":1543,"path":1547,"stem":1548,"tags":1549,"webcast":484},"content_da/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Hvad OpenAI/Hugging-Face-hændelsen afslører, og hvad den ikke gør",[1274],{"lang":1082,"date":1543,"categories":1544,"blogtitlepic":1545,"customExcerpt":1546},"2026-07-24",[1470],"head-outbreak.jpg","En AI-agent bryder ud af sit testmiljø, finder en zero-day og hacker en anden virksomhed. Det lyder som et filmmanuskript, men skete faktisk i juli 2026. Tid til en nøgtern placering: med lidt psykologi, to security-veteraner og spørgsmålet om, hvad det betyder for jeres forsvar.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1550,1493,1507],"AI",{"id":1552,"title":1553,"author":1554,"cta":494,"description":1555,"hideInRecent":484,"layout":1080,"meta":1556,"moment":1557,"path":1561,"stem":1562,"tags":1563,"webcast":484},"content_da/posts/2026-07-22-isg-cybersecurity-2026.md","Leader og Rising Star. glueckkanja i ISG's Cybersecurity-undersøgelse 2026",[1300],"Ny i kvadranten og straks Leader: ISG Provider Lens®-undersøgelsen \"Cybersecurity – Services and Solutions 2026\" positionerer glueckkanja som Leader inden for Next-Gen SOC/MDR Services for mellemstore virksomheder i Tyskland. I det samlede marked for Next-Gen SOC/MDR Services udnævner ISG os til Rising Star, altså den leverandør, som analytikerne tror kan tage springet ind i Leader-kvadranten inden for de næste 12 til 24 måneder.",{"lang":1082,"date":1557,"categories":1558,"blogtitlepic":1559,"customExcerpt":1560},"2026-07-22",[1517],"head-isg-cybersecurity-2026.png","ISG Provider Lens®-undersøgelsen Cybersecurity 2026 udnævner glueckkanja til Leader i kvadranten Next-Gen SOC/MDR Services (Midmarket). I det samlede marked for Next-Gen SOC/MDR Services er vi Rising Star. ISG fremhæver vores vækst over gennemsnittet, vores dybe Microsoft-security-ekspertise og et 24/7-SOC drevet fra Tyskland.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1523,1524,1470],{"id":1565,"title":1566,"author":1567,"cta":494,"description":1568,"hideInRecent":484,"layout":1080,"meta":1569,"moment":1570,"path":1573,"stem":1574,"tags":1575,"webcast":484},"content_da/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: Hvad AI virkelig skal have for at kunne arbejde",[1300],"En produktionsvirksomhed vil vide, hvilke af dens 14.000 SKU'er der faktisk er profitable. Svaret ligger i tre systemer, der aldrig har udvekslet et enkelt datapunkt med hinanden. Indtil for kort tid siden kostede det tre afdelinger, to uger og en del god vilje at få det. Siden begyndelsen af 2026 kan en AI besvare det spørgsmål på minutter: søge data igennem, skabe sammenhænge, producere en anbefaling. Forudsat at den har adgang.",{"lang":1082,"date":1570,"categories":1571,"blogtitlepic":1572},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1550,131],{"id":1577,"title":1578,"author":1579,"cta":494,"description":1580,"hideInRecent":484,"layout":1080,"meta":1581,"moment":1582,"path":1586,"stem":1587,"tags":1588,"webcast":484},"content_da/posts/2026-07-01-onboarding-process.md","Kontrakten er skrevet under: Sådan forløber din onboarding hos os",[1391],"Hvordan forløber jeres onboarding egentlig? Det er et spørgsmål, vi støder på igen og igen i samtaler med ansøgere, for mange har oplevet, at en onboarding kan gå hakkende. Derfor er det så meget desto vigtigere for os, at du får en god fornemmelse helt fra begyndelsen.",{"lang":1082,"date":1582,"categories":1583,"blogtitlepic":1584,"customExcerpt":1585},"2026-07-01",[1517],"Onboarding_Blogheader","Kontrakten er skrevet under, det første store skridt er taget. Men hvad sker der nu? Vi tager dig med bag kulisserne i vores onboarding, fra PreBoarding til den første uge i teamet.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1589,1590,1591],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1593,"title":1594,"author":1595,"cta":494,"description":1596,"hideInRecent":484,"layout":1080,"meta":1597,"moment":1598,"path":1602,"stem":1603,"tags":1604,"webcast":484},"content_da/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: vi er blandt de få",[1300],"I Microsofts partner-økosystem findes der en lang række anerkendelser, og alligevel skiller Frontier Partner Badge sig ud fra de øvrige udmærkelser i sin anlæg. Man kan ikke ansøge om det, det tildeles på Microsofts eget initiativ til en eksklusiv kreds af partnere, som skal overbevise i flere discipliner parallelt i stedet for at brillere i en enkelt. Microsoft vurderer dokumenteret kompetence inden for Cloud & AI Platforms, AI Business Solutions og Security i lige høj grad og henvender sig dermed til virksomheder, der ikke opfatter AI som en påbygning på eksisterende IT, men som resultatet af en gennemgående arkitektur, der bærer fra identiteten over endpointet og helt ind i produktiv AI-drift.",{"lang":1082,"date":1598,"categories":1599,"blogtitlepic":1600,"customExcerpt":1601},"2026-06-26",[1517],"head-frontier-partner-badge.jpg","Microsoft AI Cloud Partner Program har for nylig fået en ny topudmærkelse, Frontier Partner Badge. Microsoft tildeler den udelukkende til en eksklusiv kreds af partnere verden over, som leverer bæredygtige AI-projekter på hele Microsoft-stakken, fra arbejdspladsen over cloud-platformen og security og helt ind i selve AI-anvendelsen, og som har dokumenteret det i praksis. I DACH-området tæller den gruppe kun en håndfuld virksomheder, og vi er en af dem.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1523,1605,1550],"Microsoft Partner",{"id":1607,"title":1608,"author":1609,"cta":494,"description":1610,"hideInRecent":484,"layout":1080,"meta":1611,"moment":1612,"path":1616,"stem":1617,"tags":1618,"webcast":484},"content_da/posts/2026-06-09-vair-run.md","160 kilometer for en god sag",[1398],"Søndag morgen, klokken 8:30, Holbeinsteg ved Main. Elleve kolleger i ens NinjaCat-shirts, klar til Frankfurter Runden. Regn, lyn og torden inklusive. At løbe for en god sag var motivation nok til at snøre løbeskoene på trods af det dårlige vejr.",{"lang":1082,"date":1612,"categories":1613,"blogtitlepic":1614,"customExcerpt":1615},"2026-06-08",[1517],"frankfurter-runden.png","Elleve kolleger, 16 omgange, 160 kilometer, et tordenvejr og en podieplacering: glueckkanja var med til Frankfurter Runden 2026 og donerede for hver løbet omgang til VAIR e.V., der bygger en inkluderende sports- og kulturpark i Offenbach.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1619,1589,1620],"Top Arbeitgeber","Soziales Engagement",{"id":1622,"title":1623,"author":1624,"cta":494,"description":1625,"hideInRecent":484,"layout":1080,"meta":1626,"moment":1627,"path":1631,"stem":1632,"tags":1633,"webcast":484},"content_da/posts/2026-04-10-incident-to-intelligence.md","Anatomien af en ukendt AMOS Stealer: fra alert til immunitet på timer",[1379],"Når en alert udløses i vores SOC, begynder uret at løbe: ikke kun for den berørte kunde, men for alle organisationer under vores beskyttelse. Det farligste øjeblik i det moderne trusselslandskab er Intelligence Gap, tidsvinduet mellem den første anvendelse af en ny malwarevariant og den dag, branchen hører om den.",{"lang":1082,"date":1627,"categories":1628,"blogtitlepic":1629,"customExcerpt":1630},"2026-04-10",[1470],"head-amos-stealer.png","En hidtil udokumenteret AMOS Stealer-variant kompromitterede et macOS-endpoint. Ingen kendte hashes, ingen C2-data i offentlige databaser. Vores SOC skilte seks obfuskeringslag ad, udtrak alle indikatorer og rullede beskyttelsen ud til alle SOC-kunder inden for timer, endnu før branchen overhovedet havde set samplet.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1634,1635,1636,1637,1638],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1640,"title":1641,"author":1642,"cta":494,"description":1643,"hideInRecent":484,"layout":1080,"meta":1644,"moment":1645,"path":1648,"stem":1649,"tags":494,"webcast":484},"content_da/posts/2026-03-21-microsoft-edge-corporate-browser.md","Derfor bør Edge være jeres eneste corporate browser",[1170],"Valget af browser er en strategisk beslutning i virksomhedsmiljøer, fordi det direkte påvirker, hvor meget sikkerhed og hvor stort et administrationsarbejde I reelt har. Google Chrome var længe den nærliggende mulighed, men Microsoft Edge har udviklet sig til en browser, der griber direkte ind i den eksisterende stak, især når Microsoft 365 er i brug, og administrationen kører gennem Intune.",{"lang":1082,"date":1645,"blogtitlepic":1646,"customExcerpt":1647},"2026-03-21","head-microsoft-edge-default-browser.jpg","Ingen virksomhed har for alvor valgt Chrome; den var der bare, med sin egen sync-logik, sin egen kontohåndtering og sin egen politikflade. Microsoft Edge griber derimod direkte ind i den infrastruktur, der alligevel kører: Entra ID, Intune, Defender. Dette indlæg viser, hvordan skiftet ser ud, hvordan Chrome omdirigeres til en landingpage via en Intune-politik, og hvad der falder væk, når man holder op med at drive to browsere parallelt.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1651,"title":1652,"author":1653,"cta":494,"description":1654,"hideInRecent":484,"layout":1080,"meta":1655,"moment":1656,"path":1660,"stem":1661,"tags":1662,"webcast":484},"content_da/posts/2026-03-20-stryker-attack-intune-privilege.md","Én admin-konto var alt, hvad der skulle til.",[1274],"Onsdag den 11. marts 2026. Medarbejdere på Stryker-kontorer i 79 lande tændte deres computere og fandt dem tomme. Login-skærme erstattet af et logo. Firmabærbare, arbejdstelefoner, private enheder tilmeldt virksomhedens BYOD-program, alle slettet samtidig, natten over. Ingen ransomware, ingen malware-signaturer, intet, som et endpoint-detection-værktøj kunne have opdaget.",{"lang":1082,"date":1656,"categories":1657,"blogtitlepic":1658,"customExcerpt":1659},"2026-03-20",[1470],"head-stryker.jpg","Den 11. marts 2026 slettede Handala enheder i 79 lande, og alt, hvad der skulle til, var en kompromitteret Intune-admin-konto. Ingen malware, ingen exploit, kun legitime management-værktøjer vendt mod deres ejere. Hvad der skete, hvorfor det virkede, og hvilke to arkitektoniske huller der skal lukkes.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[71,1506,1507],{"id":1664,"title":1665,"author":1666,"cta":494,"description":1667,"hideInRecent":484,"layout":1080,"meta":1668,"moment":1669,"path":1673,"stem":1674,"tags":1675,"webcast":484},"content_da/posts/2026-03-16-ai-agent-hackathon.md","Seks agenter. Fire uger. Rigtig drift.",[1300],"Hvor mange timer bruger jeres IT-afdeling om ugen på opgaver, som en agent kunne klare på minutter?",{"lang":1082,"date":1669,"categories":1670,"blogtitlepic":1671,"customExcerpt":1672},"2026-03-16",[1517],"head-ai-agent-hackathon.jpg","Seks virksomheder, fire ugers byggefase, seks fungerende AI Agents. Det var den første glueckkanja AI Agent Hackathon. Kiekert, Dr. Oetker, Eckes-Granini, igefa og lila logistik har bygget agenter i Copilot Studio, som kører produktivt i dag. Her er, hvad der kom ud af det, og hvordan formatet fungerer.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1550,1676,1677,1678],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1680,"Fritz Zurhorst":1681,"Nadine Klein":1682,"Jan Geisbauer":1683,"Carolin Kanja":1687,"Anna Ulbricht":1688,"Annette Brauns":1689,"Pascal Asch":1690,"Steffen Schwerdtfeger":1691},{"display_name":1139,"avatar":1140,"permalink":1141,"twitter":1142,"linkedin":1143,"imageOffsetTop":1144,"imageOffsetLeft":1145},{"display_name":1113,"avatar":1114,"permalink":1115,"linkedin":1116,"imageOffsetTop":1117},{"display_name":1133,"avatar":1134,"permalink":1135,"twitter":1136,"linkedin":1137,"imageOffsetTop":1117},{"display_name":1274,"avatar":1275,"permalink":1276,"twitter":1277,"linkedin":1277,"imageOffsetTop":1117,"socials":1684},[1685,1686],{"text":472,"href":1280},{"text":1282,"href":1283},{"display_name":1300,"avatar":1301,"permalink":1302,"twitter":1303,"linkedin":1304},{"display_name":1391,"avatar":1392,"permalink":1393,"linkedin":1394,"imageOffsetTop":1395,"imageOffsetLeft":1396},{"display_name":1398,"avatar":1399,"permalink":1400,"linkedin":1401,"imageOffsetTop":1402,"imageOffsetLeft":1144},{"display_name":1379,"avatar":1380,"permalink":1381,"linkedin":1382,"imageOffsetTop":1217},{"display_name":1170,"avatar":1171,"permalink":1172,"linkedin":1173,"twitter":1174,"imageOffsetTop":1175,"imageOffsetLeft":1176},{"id":1108,"extension":1109,"meta":1693,"stem":8,"__hash__":1460},{},1791383909034]