[{"data":1,"prerenderedAt":1824},["ShallowReactive",2],{"sc:header-data-da":3,"sc:footer-data-da":489,"post-da--posts-2026-03-01-exchange-ad-split-permissions-hardening-d948cda78b15d":519,"authors_data":1237,"content-da-list-7b291c2dd91a4":1590,"authors_data:Thorsten Kunzi":1821},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"da":13},{"title":14,"url":15,"alt":16},"Forside","/da","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"da":21},{"title":22,"description":23},"Workplace","Intelligente, sikre og fleksible arbejdspladser bygget på Microsoft 365, der forener moderne teknologier og identitetstjenester.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"da":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"da":34},{"title":35,"url":36},"Managed Intune","/da/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"da":40},{"title":41,"url":42},"Managed Entra","/da/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"da":46},{"title":47,"url":48},"Managed Workplace","/da/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"da":52},{"title":53,"url":54},"Consulting Services","/da/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"da":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"da":64},{"title":65,"url":66},"Microsoft Entra Suite","/da/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"da":70},{"title":71,"url":72},"Microsoft Intune","/da/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"da":76},{"title":77,"url":78},"Microsoft Windows","/da/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"da":82},{"title":83,"url":84},"Windows 365 Cloud PC","/da/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"da":88},{"title":89,"url":90},"Cloud Workplace Foundation","/da/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"da":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"da":100},{"title":101,"url":102},"Microsoft 365 Copilot","/da/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"da":106},{"title":107,"url":108},"Teams","/da/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"da":112},{"title":113,"url":114},"SharePoint & Power Platform","/da/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"da":118},{"title":119,"url":120},"Exchange Online","/da/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"da":124},{"title":125,"url":126},"Information Protection & Compliance","/da/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"da":130},{"title":131,"description":132},"Azure","Sæt gang i væksten med Azure: skær ned på cloudomkostningerne, øg effektiviteten og driv innovationen med IaaS og PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"da":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"da":142},{"title":143,"url":144},"Azure Managed Services","/da/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"da":148},{"title":149,"url":150},"Azure Consulting","/da/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"da":154},{"title":155},"Scenarier",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"da":160},{"title":161,"url":162},"Planlæg din cloud","/da/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"da":166},{"title":167,"url":168},"Migrér til cloud","/da/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"da":172},{"title":173,"url":174},"Forny din forretning","/da/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"da":178},{"title":179,"url":180},"Gentænk din VMware-strategi","/da/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"da":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"da":190},{"title":191,"url":192},"Azure Foundation","/da/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"da":196},{"title":197,"url":198},"Azure AI Foundation","/da/azure/azure-ai-foundation",{"name":86,"languages":200},{"da":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"da":205},{"title":206,"url":207},"Azure Data Foundation","/da/azure/azure-data-foundation",{"name":188,"languages":209},{"da":210},{"title":211,"url":212},"Azure Container Foundation","/da/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"da":216},{"title":217,"url":218},"Managed Dark Tenant","/da/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"da":222},{"title":223,"url":224},"Cloud Adoption Framework","/da/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"da":228},{"title":229,"url":230},"Cloud Competence Center","/da/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"da":234},{"title":235,"description":236,"emergency":237},"Sikkerhed","Årvågenhed i clouden med en prisbelønnet 24/7 managed service, incident response og tidssvarende beskyttelse af din infrastruktur.",{"text":238,"href":239,"skin":240,"icon":241},"Under angreb?","/da/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"da":249},{"title":250,"url":251},"Managed Red Tenant","/da/security/managed-red-tenant",{"name":214,"languages":253},{"da":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"da":259},{"title":260,"url":261},"Sentinel Data Lake","/da/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"da":265},{"title":266,"url":267},"Security Consulting","/da/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"da":274},{"title":275,"url":276},"Cloud Security Operations Center","/da/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"da":280},{"title":281,"url":282},"Global Secure Access","/da/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"da":286},{"title":287,"url":288},"MyWorkID","/da/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"da":295},{"title":296,"url":297},"Preventive Services","/da/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"da":301},{"title":302,"url":303},"Data Security Service","/da/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"da":307},{"title":308,"url":309},"Security Copilot Agents","/da/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"da":313},{"title":314,"url":315},"Implementering af NIS2","/da/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"da":319},{"title":320,"description":321},"Produkter","Companion-produkter til et gennemført sikkert, 100 % cloud-native Microsoft-miljø, der styrker samarbejdet, netværksautentificeringen og softwarehåndteringen.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"da":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Cloudbaseret softwaredistribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"da":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certifikatdistribution fra clouden",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"da":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Arbejd med dine lokale Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"da":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrér dine data fra én server til en anden",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"da":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider til Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"da":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Autentificering til dit netværk",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"da":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Find kontakter i Microsoft Teams",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"da":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-overvågning i realtid",{"name":396,"languages":397},"casestudies",{"da":398},{"title":399,"url":400,"description":401},"Cases","/da/casestudies","Pioner i clouden: din Microsoft-partner til gennemarbejdede cloudløsninger med en blueprint-baseret tilgang og ekspertise i Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"da":405},{"title":406,"description":401},"Virksomhed",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"da":411},{"title":412},"Om os",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"da":417},{"title":418,"url":419},"Fakta og tal","/da/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"da":423},{"title":424,"url":425},"Kontakt og lokationer","/da/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"da":429},{"title":430,"url":431},"glueckkanja Schweiz","/da/company/switzerland",{"name":433,"languages":434},"austria",{"da":435},{"title":436,"url":437},"glueckkanja Østrig","/da/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"da":441},{"title":442},"Karriere",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"da":447},{"title":448,"url":449},"Karriereoversigt","/da/career",{"name":451,"languages":452},"company-young-professionals",{"da":453},{"title":454,"url":455},"Young Professionals","/da/young-professionals",{"name":457,"languages":458},"company-jobs",{"da":459},{"title":460,"url":461},"Ledige stillinger","/da/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"da":465},{"title":466},"Aktuelt",[468,474],{"name":469,"languages":470},"company-blog",{"da":471},{"title":472,"url":473},"Blog","/da/blog",{"name":469,"languages":475},{"da":476},{"title":477,"url":478},"Events","/da/events",[480],{"name":481,"languages":482},"career-meta",{"da":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"da":487},{"title":488,"url":425,"active":484},"Kontakt",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksDa":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"Privatlivspolitik","/da/privacy",{"title":514,"url":515},"Juridisk information","/da/imprint",{"title":517,"url":518},"Ingen cookies","/da/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":1194,"eventid":494,"extension":1209,"hideInRecent":484,"layout":1210,"meta":1211,"moment":1215,"navigation":325,"path":1233,"seo":1234,"stem":1235,"tags":494,"webcast":484,"__hash__":1236},"content_da/posts/2026-03-01-exchange-ad-split-permissions-hardening.md","Exchange AD Split Permissions uden fortrydelse",[523],"Thorsten Kunzi",{"type":525,"value":526,"toc":1193},"minimal",[527,532,536,543,549,568,571,578,583,587,596,611,617,620,625,661,685,689,697,706,711,727,731,737,742,747,808,813,850,853,857,872,879,895,906,910,913,959,962,971,980,983,998,1015,1028,1040,1045,1104,1108,1113,1133,1140,1164,1168,1171,1174,1189],[528,529,531],"h2",{"id":530},"tldr-hvad-hvis-vi-fjerner-ulemperne","TLDR: hvad hvis vi fjerner ulemperne?",[533,534,535],"p",{},"Jeg har fundet en måde at gentildele AD- og RBAC-rettigheder præcis dér, hvor Exchange-brugere, -grupper og -kontakter ligger, uden at det kræver ændringer for administratorer eller identity management-systemer. Efter min erfaring har netop den friktion været den primære blokering for de fleste virksomheder. Og vi beholder stadig sikkerhedsgevinsten mod lateral movement og domænekompromittering.",[533,537,538],{},[539,540],"img",{"alt":541,"src":542},"Active Directory","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_1.png",[533,544,545],{},[546,547,548],"strong",{},"Det sker i tre trin:",[550,551,553,562,565],"ol",{"style":552},"margin: 0.25rem 0",[554,555,556,557],"li",{},"Implementér ",[558,559,561],"a",{"href":560},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions#switch-to-active-directory-split-permissions","AD split permission-modellen",[554,563,564],{},"Giv Exchange-serverne de tabte AD-rettigheder tilbage, men kun på de relevante OU'er",[554,566,567],{},"Tildel Exchange RBAC for at genaktivere de manglende PowerShell-cmdlets",[533,569,570],{},"Alt sammen via Microsofts vejledning, AD-ACL'er eller Exchange RBAC-tildelinger.",[572,573],"video-frame",{"thumb":574,"alt":575,"id":576,":full-width":577},"/thumbs/thumb-exchange-ad-split-permissions-webcast.jpg","En oplægsholder sidder foran en bærbar computer og forklarer et slide med titlen Step 1: Active Directory Permissions fra glueckkanja. Slidet gennemgår, hvordan man implementerer Microsoft Exchange AD Split Permissions, herunder PowerShell-kommandoer til at oprette en delegeringsgruppe (New-ADGroup, Add-ADGroupMember) og tildele rettigheder via scriptet Add-ExchangeADSplitPermissionOnOU.ps1.","soNZkNRopSQ","true",[579,580,582],"div",{"style":581},"background:var(--color-gk-light-grey); margin-top:0.5rem; padding:0.5rem 1rem; font-size:0.85rem; color:var(--color-gk-dark-blue)","Webcast: Exchange AD Split Permissions uden fortrydelse. En trin-for-trin-implementeringsguide",[528,584,586],{"id":585},"hvorfor-er-det-relevant-nu","Hvorfor er det relevant (nu)?",[533,588,589,590,593,595],{},"Modellen er stort set blevet overset eller ignoreret, siden den kom med Exchange 2010 SP1. Men standardmodellen med delte rettigheder udgør en stor sikkerhedsrisiko for en overtagelse af Active Directory. Kombineret med at Exchange de seneste år har været berygtet for remote exploits, er det på tide at handle.",[591,592],"br",{},[591,594],{},"\nProblemet stammer fra rettigheder, der tildeles på roden af et domæne og nedarves gennem hele domænet.",[597,598,599,602,605,608],"ul",{"style":552},[554,600,601],{},"ændre rettigheder på brugere og grupper (reelt fuld adgang)",[554,603,604],{},"ændre gruppemedlemmer",[554,606,607],{},"nulstille adgangskoder på brugere",[554,609,610],{},"oprette/slette brugere og grupper",[533,612,613],{},[539,614],{"alt":615,"src":616},"Rettigheder","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_2.png",[533,618,619],{},"Kun visse højt privilegerede Tier 0-brugere og -grupper er beskyttet af AdminSDHolder-processen (attributten admincount=1), og i mange miljøer findes der ubeskyttede brugere eller grupper, som kan gøre det muligt at kompromittere domænet og/eller skoven eller i det mindste forvolde alvorlig skade.",[533,621,622],{},[546,623,624],{},"Fremtrædende eksempler:",[597,626,627,630,650],{"style":552},[554,628,629],{},"Entra Connect Sync-kontoen, når Password Hash Sync anvendes",[554,631,632,633],{},"Standardgrupper",[597,634,636,639,647],{"style":635},"margin: 0",[554,637,638],{},"Allowed RODC Password Replication Group sammen med Entra Connect-kontoen (hvis der findes en rigtig Windows RODC)",[554,640,641,642,646],{},"Se også ",[558,643,645],{"href":644,"target":330},"https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta","Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA) - SpecterOps",", der viser flere angrebsveje (gruppen Account Operators er en tilsvarende trussel)",[554,648,649],{},"Tømning af Protected Users for at skabe angrebsvektorer ved at fjerne beskyttelser",[554,651,652,653],{},"Ubeskyttede brugerdefinerede grupper eller admin-/servicekonti",[597,654,655,658],{"style":635},[554,656,657],{},"Skriverettigheder på GPO'er (som gælder for domænecontrollere)",[554,659,660],{},"Styring af adgang til AD-backups, backupserver, PKI-skabeloner, hypervisor, ...",[533,662,663,664,666,668,669,675,677,679,680],{},"Det er meget svært at inddæmme alle disse nuværende og fremtidige potentielle angrebsveje bagudrettet. For den brugerdefinerede _ADM-OU kan du slå ACL-nedarvning fra, men de fleste standardobjekter må ikke flyttes fra standard-OU'en Builtin eller containeren Users og forbliver dermed sårbare.",[591,665],{},[591,667],{},"\nDet er langt bedre at fjerne de kraftfulde rettigheder fra roden, hvilket sker ved at implementere Active Directory split permissions-modellen. ",[558,670,674],{"href":671,"rel":672},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions",[673],"nofollow","Configure Exchange Server for split permissions | Microsoft Learn",[591,676],{},[591,678],{},"\nOg Microsoft er enig: “…encouraged to implement Active Directory split permissions” ",[558,681,684],{"href":682,"rel":683},"https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-7-%E2%80%93-implementing-least-privilege/4366626",[673],"Active Directory Hardening Series - Part 7 – Implementing Least Privilege | Microsoft Community Hub",[528,686,688],{"id":687},"men-hvorfor-gør-ingen-det","Men hvorfor gør ingen det?",[533,690,691,692,694,696],{},"Da split permissions ikke var tilgængelige før Exchange 2010 SP1, havde alle for længst accepteret status quo, og det ser ud til, at sikkerhedsteams ikke fik skubbet modellen igennem, da den først fandtes.",[591,693],{},[591,695],{},"\nOg den ville have tvunget ændringer igennem i admin- og IDM-processer, som at oprette brugere eller distributionslister i AD først og derefter bruge Exchange til at “mail enable” dem.",[698,699,700],"blockquote",{},[533,701,702,705],{},[546,703,704],{},"Info:"," Følgende cmdlets vil ikke længere være tilgængelige eller fungere: Add-DistributionGroupMember, New-DistributionGroup, New-Mailbox, New-MailContact, New-MailUser, New-RemoteMailbox, Remove-DistributionGroup, Remove-DistributionGroupMember, Remove-Mailbox, Remove-MailContact, Remove-MailUser, Remove-RemoteMailbox, Update-DistributionGroupMember, Add-ADPermission, Remove-ADPermission",[533,707,708],{},[546,709,710],{},"Eksempler på tilpasning:",[597,712,713,724],{"style":552},[554,714,715,716],{},"New-Mailbox (hvor Exchange skriver til AD) ville blive:",[597,717,718,721],{"style":635},[554,719,720],{},"New-ADUser (hvor adm.jdoe skriver til AD)",[554,722,723],{},"Enable-Mailbox",[554,725,726],{},"Add-ADPermission til SendAs-rettigheder ville skulle udføres via AD-brugere og -computere under fanen Sikkerhed, og det kræver ofte yderligere AD-rettigheder til almindelige administratorer.",[528,728,730],{"id":729},"vis-mig-den-her-no-regrets-mulighed","Vis mig den her no-regrets-mulighed",[533,732,733,736],{},[546,734,735],{},"Disclaimer",": Læs og forstå de følgende links og artikler fuldt ud, afprøv det i et testmiljø først, og sørg for, at AD-backups er aktuelle, og at genoprettelsesprocedurer er på plads.",[738,739,741],"h3",{"id":740},"kortlæg-den-nuværende-brug","Kortlæg den nuværende brug",[533,743,744],{},[546,745,746],{},"Du bør først undersøge, hvilke af de berørte cmdlets der bruges på hvilke OU'er:",[748,749,750,758,760,766,768],"code-block",{},[751,752,753,757],"span",{},[751,754,756],{"style":755},"color:var(--color-gk-orange)","$CsvPath"," = \"C:\\temp\\SplitPermissionAdminAuditLog.csv\"",[591,759],{},[751,761,762,765],{},[751,763,764],{"style":755},"$Cmdlets"," = \"Add-ADPermission\",\"Remove-ADPermission\",\"New-DistributionGroup\",\"Remove-DistributionGroup\",\"Add-DistributionGroupMember\",\"Update-DistributionGroupMember\",\"Remove-DistributionGroupMember\",\"New-Mailbox\",\"Remove-Mailbox\",\"New-RemoteMailbox\",\"Remove-RemoteMailbox\",\"New-MailUser\",\"Remove-MailUser\",\"New-MailContact\",\"Remove-MailContact\"",[591,767],{},[751,769,770,773,774,778,779,773,782,784,785,788,789,773,792,773,795,773,797,800,801,804,805],{},[751,771,772],{"style":755},"Search-AdminAuditLog"," ",[751,775,777],{"style":776},"color:var(--color-gk-mid-blue)","-ResultSize"," 99000 ",[751,780,781],{"style":776},"-Cmdlets",[751,783,764],{"style":755}," | ",[751,786,787],{"style":755},"Select-Object"," RunDate,Caller,ObjectModified,CmdletName,@{Name='CmdletParameters';Expression={[string]::join(\",\", ($\\_.CmdletParameters))}},succeeded,error | ",[751,790,791],{"style":755},"Export-Csv",[751,793,794],{"style":776},"-Path",[751,796,756],{"style":755},[751,798,799],{"style":776},"-Delimiter"," \";\" ",[751,802,803],{"style":776},"-Encoding"," Unicode ",[751,806,807],{"style":776},"-NoTypeInformation",[533,809,810],{},[546,811,812],{},"Hurtig analyse af caller og cmdlets:",[748,814,815,831,833,841,843],{},[751,816,817,820,821,773,824,773,826,773,828,830],{},[751,818,819],{"style":755},"$CSVs"," = ",[751,822,823],{"style":755},"Import-Csv",[751,825,794],{"style":776},[751,827,756],{"style":755},[751,829,799],{"style":776}," \";\"",[591,832],{},[751,834,835,784,837,840],{},[751,836,819],{"style":755},[751,838,839],{"style":755},"Group-Object"," Caller",[591,842],{},[751,844,845,784,847,849],{},[751,846,819],{"style":755},[751,848,839],{"style":755}," CmdletName",[533,851,852],{},"Analysér CSV-filen for at finde ud af, hvor AD-rettighederne bliver nødvendige. Du kan eventuelt optimere ved at flytte alle Exchange-relevante grupper ind i dedikerede OU'er.",[528,854,856],{"id":855},"aktivér-split-permissions-modellen","Aktivér split permissions-modellen",[533,858,859,860,863,864,868],{},"Følg Microsofts vejledning ",[546,861,862],{},"\"Switch to Active Directory split permissions\""," i\n",[558,865,674],{"href":866,"rel":867},"https://learn.microsoft.com/en-us/exchange/configure-exchange-server-for-split-permissions",[673],[869,870,871],"em",{},"(IKKE RBAC split permissions)",[533,873,874,875,878],{},"Kort fortalt fjerner den de farlige rettigheder fra gruppen ",[546,876,877],{},"\"Exchange Windows Permissions\""," og fjerner samtidig Exchange som medlem af gruppen.",[748,880,881],{},[751,882,883,773,886,773,889,773,892],{},[751,884,885],{"style":755},"Setup.exe",[751,887,888],{"style":776},"/IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF",[751,890,891],{"style":776},"/PrepareAD",[751,893,894],{"style":776},"/ActiveDirectorySplitPermissions:true",[579,896,898,899,901,902],{"style":897},"background:#f4f4f4; border-left:4px solid var(--color-gk-petrol); border-radius:0 6px 6px 0; padding:0.75rem 1rem; margin:1rem 0; font-size:0.88rem; color:#000520;","\n  ",[546,900,704],{}," For at rulle tilbage bruger du blot ",[903,904,905],"code",{},"/ActiveDirectorySplitPermissions:false",[738,907,909],{"id":908},"tildel-ad-rettigheder","Tildel AD-rettigheder",[533,911,912],{},"Opret en brugerdefineret AD-gruppe, og gør Exchange-serverne til medlemmer.",[748,914,915,921,923,773,926,929,930,933,934,937,938,773,940,773,943,946,947,949,929,952,955,956],{},[751,916,917],{},[751,918,920],{"style":919},"color:var(--color-black-40)","# adjust OU Path first!",[591,922],{},[751,924,925],{"style":755},"New-ADGroup",[751,927,928],{"style":776},"-Name"," \"AD_Custom Exchange Split permissions replacement\" ",[751,931,932],{"style":776},"-GroupCategory"," Security ",[751,935,936],{"style":776},"-GroupScope"," DomainLocal ",[751,939,794],{"style":776},[546,941,942],{},"\"OU=Rights,OU=Groups,OU=T1,OU=_ADM,$((Get-ADDomain).DistinguishedName)\"",[751,944,945],{"style":776},"-Description"," \"replaces the permissions lost by split permissions on relevant OUs\"",[591,948],{},[751,950,951],{"style":755},"Add-ADGroupMember",[751,953,954],{"style":776},"-Members"," \"Exchange Trusted Subsystem\"\n",[751,957,958],{"style":919},"# reboot Exchange servers for permissions via group to work",[533,960,961],{},"Jeg har lavet et script, der gør det nemt at delegere AD-rettighederne pr. use case.",[698,963,964],{},[533,965,966,967,970],{},"Uden disse rettigheder ville Exchange-serveren få fejlen ",[903,968,969],{},"“INSUFF_ACCESS_RIGHTS”"," fra AD.",[533,972,973,974,979],{},"Download ",[558,975,978],{"href":976,"rel":977},"https://github.com/glueckkanja/code-snippets/blob/main/ExchangeADSplitPermission/Add-ExchangeADSplitPermissionOnOU.ps1",[673],"Add-ExchangeADSplitPermissionOnOU.ps1"," fra glueckkanjas GitHub",[533,981,982],{},"Scriptet kan tildele følgende PermissionTypes:",[533,984,986,989,991,992,994],{"style":985},"background:#f5f5f5;padding:0.5rem 1rem;margin:0.25rem 0;border-left:3px solid #d8d8d8;",[546,987,988],{},"CreateUserAndContact",[591,990],{},"Create/delete, ResetPassword og WriteAllProperties for brugere og kontakter",[591,993],{},[995,996,997],"small",{},"Exchange-cmdlets: `New-Mailbox`, `New-RemoteMailbox`, `New-MailUser`, `New-MailContact` og tilsvarende `Remove-*`",[533,999,1001,1004,1006,1007,1009],{"style":1000},"background:#f5f5f5;padding:0.5rem 1rem;margin:0.25rem 0;border-left:3px solid #d8d8d8",[546,1002,1003],{},"GroupManage",[591,1005],{},"Opret/slet grupper, ændr medlemmer",[591,1008],{},[995,1010,1011,1012,1014],{},"Exchange-cmdlets: `New-DistributionGroup`, `Remove-DistributionGroup`, `Add-DistributionGroupMember`, `Update-DistributionGroupMember`, `Remove-DistributionGroupMember`",[591,1013],{},"Desuden: brugere, der administrerer de DistributionGroups, de ejer, via EAC",[533,1016,1017,1020,1022,1023,1025],{"style":1000},[546,1018,1019],{},"UserSendAs",[591,1021],{},"Ændr AD-rettigheder på brugere",[591,1024],{},[995,1026,1027],{},"Exchange-cmdlet: `Add-ADPermission`",[533,1029,1030,1033,1035,1036,1038],{"style":1000},[546,1031,1032],{},"GroupSendAs",[591,1034],{},"Ændr AD-rettigheder på grupper",[591,1037],{},[995,1039,1027],{},[533,1041,1042],{},[546,1043,1044],{},"Sådan bruger du scriptet:",[748,1046,1047,773,1049,1052,1053,1056,1057,1060,1061,1064,1066,773,1068,1070,1071,1073,1074,1060,1076,773,1078,1070,1080,1082,1083,1060,1085,773,1087,1089,1090,1092,1093,1060,1095,773,1097,1089,1099,1101,1102,1060],{},[751,1048,978],{"style":755},[751,1050,1051],{"style":776},"-TargetOU"," \u003COU> ",[751,1054,1055],{"style":776},"-PermissionType"," \u003CGroupManage|UserSendAs|GroupSendAs|CreateUserAndContact> ",[751,1058,1059],{"style":776},"-Trustee"," \"AD_Custom Exchange Split permissions replacement\"\n",[751,1062,1063],{"style":919},"# For example",[591,1065],{},[751,1067,978],{"style":755},[751,1069,1051],{"style":776}," \"OU=ExchangeGroups,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" ",[751,1072,1055],{"style":776}," GroupManage ",[751,1075,1059],{"style":776},[751,1077,978],{"style":755},[751,1079,1051],{"style":776},[751,1081,1055],{"style":776}," GroupSendAs ",[751,1084,1059],{"style":776},[751,1086,978],{"style":755},[751,1088,1051],{"style":776}," \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" ",[751,1091,1055],{"style":776}," UserSendAs ",[751,1094,1059],{"style":776},[751,1096,978],{"style":755},[751,1098,1051],{"style":776},[751,1100,1055],{"style":776}," CreateUserAndContact ",[751,1103,1059],{"style":776},[738,1105,1107],{"id":1106},"tildel-exchange-rbac","Tildel Exchange RBAC",[533,1109,1110],{},[546,1111,1112],{},"Genaktivér parameteren -BypassSecurityGroupManagerCheck for cmdlet'erne Add-DistributionGroupMember og Remove-DistributionGroupMember:",[748,1114,1115],{},[751,1116,1117,773,1120,1122,1123,1126,1127,1129,1130,1132],{},[751,1118,1119],{"style":755},"New-RoleGroup",[751,1121,928],{"style":776}," \"SplitPermission Security Group Creation and Membership\" ",[751,1124,1125],{"style":776},"-Roles"," \"Security Group Creation and Membership\" ",[751,1128,954],{"style":776}," \"Organization Management\",\"Recipient Management\" ",[751,1131,945],{"style":776}," \"Brings back -BypassSecurityGroupManagerCheck to Add-DistributionGroupMember, but also needs AD ACL for Exchange Server on target DLs\"",[698,1134,1135],{},[533,1136,1137,1139],{},[546,1138,704],{}," Ellers får du \"-BypassSecurityGroupManagerCheck parameter is not available\" eller \"You don't have sufficient permissions. This operation can only be performed by a manager of the group\"",[533,1141,1142,1144,1147,1149],{},[591,1143],{},[546,1145,1146],{},"Genaktivér New-Mailbox, New-RemoteMailbox, New-MailContact, Remove-... cmdlets med de nødvendige parametre:",[591,1148],{},[748,1150,1151,773,1153,1155,1156,1158,1159,1129,1161,1163],{},[751,1152,1119],{"style":755},[751,1154,928],{"style":776}," \"SplitPermission Mail Recipient Creation\" ",[751,1157,1125],{"style":776}," \"Mail Recipient Creation\" ",[751,1160,954],{"style":776},[751,1162,945],{"style":776}," \"Brings back New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact and matching Remove-... cmdlets, but additionally Exchange needs AD ACL for Exchange Server on target OUs\"",[528,1165,1167],{"id":1166},"konklusion","Konklusion",[533,1169,1170],{},"Jeg håber, at denne guide hjælper flere organisationer med at tage det vigtige skridt og sikre deres Active Directory mod kompromittering via Exchange. Med min erfaring fra implementeringer af Exchange AD Split Permissions-modellen hos flere kunder har jeg ikke stødt på problemer, og indførelsen er forløbet uden bump.",[533,1172,1173],{},"Jeg håber også, at Microsoft indfører en indbygget, OU-baseret tilgang til at opnå denne granularitet i stedet for den nuværende alt-eller-intet-model, hvilket ville gøre en bred udbredelse betydeligt lettere.",[533,1175,1176,1177,1182,1183,1188],{},"En bemærkning om AD Tiering: Log ikke på Exchange-servere med Domain Admin eller andre Tier 0-konti. Behandl Exchange-servere som Tier 1, og implementér AD Tiering hurtigst muligt. Som første skridt anbefaler jeg ",[558,1178,1181],{"href":1179,"rel":1180},"https://www.pingcastle.com/",[673],"PingCastle"," eller ",[558,1184,1187],{"href":1185,"rel":1186},"https://www.semperis.com/purple-knight/",[673],"Purple Knight"," til at vurdere jeres AD-sikkerhed og identificere control path-eksponeringer.",[1190,1191,1192],"style",{},"\ncode {\n  font-size: inherit\n}\n",{"title":1194,"searchDepth":1195,"depth":1195,"links":1196},"",2,[1197,1198,1199,1200,1204,1208],{"id":530,"depth":1195,"text":531},{"id":585,"depth":1195,"text":586},{"id":687,"depth":1195,"text":688},{"id":729,"depth":1195,"text":730,"children":1201},[1202],{"id":740,"depth":1203,"text":741},3,{"id":855,"depth":1195,"text":856,"children":1205},[1206,1207],{"id":908,"depth":1203,"text":909},{"id":1106,"depth":1203,"text":1107},{"id":1166,"depth":1195,"text":1167},"md","post",{"lang":1212,"seoTitle":1213,"titleClass":1214,"date":1215,"blogtitlepic":1216,"socialimg":1217,"customExcerpt":1218,"keywords":1219,"scripts":1220,"asideNav":1221,"maxContent":325,"published":325},"da","Exchange AD Split Permissions: Sikr Active Directory med least privilege","h2-font-size","2026-03-01","head-exchange-ad-split-permissions","/blog/heads/head-exchange-ad-split-permissions.jpg","Selv organisationer, der har flyttet alle deres postkasser til skyen, kører ofte stadig Exchange-servere on-premises, og dermed en undervurderet sikkerhedsrisiko for Active Directory. Modellen »AD Split Permissions« fratager Exchange de brede AD-rettigheder, som angribere kan udnytte til at kompromittere hele domænet. Indtil nu er udbredelsen først og fremmest strandet på de procesændringer, modellen pålægger administratorerne. Denne artikel viser, hvordan du kommer elegant over netop den forhindring: et script, der målrettet gentildeler de tabte AD-rettigheder, men kun på de relevante OU'er, så det vante admin-workflow bevares, mens du stadig får den fulde sikkerhedsgevinst.","Exchange Server, Active Directory, AD split permissions, RBAC, Exchange-rettigheder, AdminSDHolder, least privilege, AD ACL, PowerShell",{"slick":325,"form":325},{"menuItems":1222},[1223,1225,1227,1229,1231],{"href":1224,"text":531},"#tldr-hvad-hvis-vi-fjerner-ulemperne",{"href":1226,"text":586},"#hvorfor-er-det-relevant-nu",{"href":1228,"text":688},"#men-hvorfor-gør-ingen-det",{"href":1230,"text":730},"#vis-mig-den-her-no-regrets-mulighed",{"href":1232,"text":1167},"#konklusion","/posts/2026-03-01-exchange-ad-split-permissions-hardening",{"title":521,"description":1194},"posts/2026-03-01-exchange-ad-split-permissions-hardening","-0_7SSTyRnUvpyYd2FqIKPjq-i0dqoVZ1KV9WTQ8gtI",{"id":1238,"extension":1239,"meta":1240,"stem":8,"__hash__":1589},"authors_data/authors.json","json",{"path":1241,"Fritz Zurhorst":1242,"Alexander Schlindwein":1248,"Sophie Luna":1254,"Nadine Klein":1262,"Karsten Kleinschmidt":1268,"Julian Wendt":1276,"Holger Bunkradt":1281,"Ralf Mania":1287,"Oliver Kieselbach":1293,"Steffen Schwerdtfeger":1299,"Gunnar Winter":1307,"Jan Petersen":1312,"Thorsten Kunzi":1317,"Moritz Pohl":1320,"Thorben Pöschus":1325,"Christoph Hannebauer":1331,"Marco Scheel":1335,"Christopher Brumm":1340,"Florian Klante":1347,"Niklas Bachmann":1352,"Nils Krautkrämer":1357,"Patrick Treptau":1363,"Peter Beckendorf":1368,"Patrick Sobau":1373,"Jörg Wunderlich":1378,"Michael Breither":1382,"Christian Kanja":1387,"Zeba Hoffmann":1393,"Jochen Fröhlich":1398,"Jan Geisbauer":1402,"Gerrit Reinke":1413,"Christian Kordel":1419,"Stephan Wälde":1423,"Carolin Kanja":1428,"Adrian Ritter":1434,"Marvin Bangert":1439,"Thorsten Pickhan":1445,"Christian Lorenz":1451,"Denis Böhm":1456,"Fabian Bader":1461,"Juan Jose Fernandez Perez":1467,"Mahschid Sayyar":1472,"Benjamin Dassow":1477,"Markus Walschburger":1482,"Jonathan Haist":1487,"Daniel Rohregger":1492,"Thomas Naunheim":1497,"Florian Stöckl":1502,"Pascal Asch":1507,"Markus Kättner":1512,"Anna Ulbricht":1519,"Annette Brauns":1526,"body":1532,"title":1588},"/authors",{"display_name":1243,"avatar":1244,"permalink":1245,"linkedin":1246,"imageOffsetTop":1247},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":1249,"avatar":1250,"permalink":1251,"twitter":1252,"linkedin":1253},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1255,"avatar":1256,"permalink":1257,"twitter":1258,"linkedin":1259,"imageOffsetLeft":1260,"imageOffsetTop":1261},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1263,"avatar":1264,"permalink":1265,"twitter":1266,"linkedin":1267,"imageOffsetTop":1247},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1269,"avatar":1270,"permalink":1271,"twitter":1272,"linkedin":1273,"imageOffsetTop":1274,"imageOffsetLeft":1275},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1277,"avatar":1278,"permalink":1279,"linkedin":1280},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1282,"avatar":1283,"permalink":1284,"linkedin":1285,"twitter":1286},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1288,"avatar":1289,"permalink":1290,"linkedin":1291,"twitter":1292},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1294,"avatar":1295,"permalink":1296,"linkedin":1297,"twitter":1298},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":1300,"avatar":1301,"permalink":1302,"linkedin":1303,"twitter":1304,"imageOffsetTop":1305,"imageOffsetLeft":1306},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1308,"avatar":1309,"permalink":1310,"twitter":1258,"linkedin":1311},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1313,"avatar":1314,"permalink":1315,"twitter":1258,"linkedin":1316},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":523,"avatar":1318,"permalink":1319,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},"people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1321,"avatar":1322,"permalink":1323,"twitter":1258,"linkedin":1324},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1326,"avatar":1327,"permalink":1328,"twitter":1329,"linkedin":1330},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1332,"avatar":1333,"permalink":1334,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1336,"avatar":1337,"permalink":1338,"twitter":1339,"linkedin":1339},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1341,"avatar":1342,"permalink":1343,"twitter":1344,"linkedin":1345,"imageOffsetTop":1346},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1348,"avatar":1349,"permalink":1350,"linkedin":1351,"twitter":1258},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1353,"avatar":1354,"permalink":1355,"linkedin":1356,"twitter":1258},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1358,"avatar":1359,"permalink":1360,"twitter":1361,"linkedin":1362},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1364,"avatar":1365,"permalink":1366,"linkedin":1367,"twitter":1258},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1369,"avatar":1370,"permalink":1371,"linkedin":1372,"twitter":1258,"imageOffsetTop":1247},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1374,"avatar":1375,"permalink":1376,"linkedin":1377,"twitter":1258},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1379,"avatar":1380,"permalink":1381,"twitter":1258},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1383,"avatar":1384,"permalink":1385,"twitter":1258,"linkedin":1386},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1388,"avatar":1389,"permalink":1390,"twitter":1391,"linkedin":1392},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1394,"avatar":1395,"permalink":1396,"linkedin":1397,"twitter":1258},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1399,"avatar":1400,"permalink":1401,"twitter":1258,"linkedin":1311},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1403,"avatar":1404,"permalink":1405,"twitter":1406,"linkedin":1406,"imageOffsetTop":1247,"socials":1407},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1408,1410],{"text":472,"href":1409},"https://emptydc.com",{"text":1411,"href":1412},"Podcast","https://hairlessinthecloud.com",{"display_name":1414,"avatar":1415,"permalink":1416,"twitter":1417,"linkedin":1418},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1420,"avatar":1421,"permalink":1422,"twitter":1258,"linkedin":1311},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1424,"avatar":1425,"permalink":1426,"twitter":1427,"linkedin":1311},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1429,"avatar":1430,"permalink":1431,"twitter":1432,"linkedin":1433},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1435,"avatar":1436,"permalink":1437,"twitter":1438,"linkedin":1438},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1440,"avatar":1441,"permalink":1442,"twitter":1443,"linkedin":1444},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1446,"avatar":1447,"permalink":1448,"twitter":1449,"linkedin":1450},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1452,"avatar":1453,"permalink":1454,"linkedin":1455,"twitter":1258},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1457,"avatar":1458,"permalink":1459,"linkedin":1460,"twitter":1258},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1462,"avatar":1463,"permalink":1464,"linkedin":1465,"twitter":1466},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1468,"avatar":1469,"permalink":1470,"linkedin":1471},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1473,"avatar":1474,"permalink":1475,"linkedin":1476},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1478,"avatar":1479,"permalink":1480,"linkedin":1481},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1483,"avatar":1484,"permalink":1485,"linkedin":1486},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1488,"avatar":1489,"permalink":1490,"linkedin":1491,"imageOffsetTop":1247},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1493,"avatar":1494,"permalink":1495,"linkedin":1496,"imageOffsetTop":1247},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1498,"avatar":1499,"permalink":1500,"linkedin":1501,"imageOffsetTop":1346},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1503,"avatar":1504,"permalink":1505,"linkedin":1506,"imageOffsetTop":1346},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1508,"avatar":1509,"permalink":1510,"linkedin":1511,"imageOffsetTop":1346},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1513,"avatar":1514,"permalink":1515,"linkedin":1516,"imageOffsetTop":1517,"imageOffsetLeft":1518},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1520,"avatar":1521,"permalink":1522,"linkedin":1523,"imageOffsetTop":1524,"imageOffsetLeft":1525},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1527,"avatar":1528,"permalink":1529,"linkedin":1530,"imageOffsetTop":1531,"imageOffsetLeft":1274},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1533,"Alexander Schlindwein":1534,"Sophie Luna":1535,"Nadine Klein":1536,"Karsten Kleinschmidt":1537,"Julian Wendt":1538,"Holger Bunkradt":1539,"Ralf Mania":1540,"Oliver Kieselbach":1541,"Steffen Schwerdtfeger":1542,"Gunnar Winter":1543,"Jan Petersen":1544,"Thorsten Kunzi":1545,"Moritz Pohl":1546,"Thorben Pöschus":1547,"Christoph Hannebauer":1548,"Marco Scheel":1549,"Christopher Brumm":1550,"Florian Klante":1551,"Niklas Bachmann":1552,"Nils Krautkrämer":1553,"Patrick Treptau":1554,"Peter Beckendorf":1555,"Patrick Sobau":1556,"Jörg Wunderlich":1557,"Michael Breither":1558,"Christian Kanja":1559,"Zeba Hoffmann":1560,"Jochen Fröhlich":1561,"Jan Geisbauer":1562,"Gerrit Reinke":1566,"Christian Kordel":1567,"Stephan Wälde":1568,"Carolin Kanja":1569,"Adrian Ritter":1570,"Marvin Bangert":1571,"Thorsten Pickhan":1572,"Christian Lorenz":1573,"Denis Böhm":1574,"Fabian Bader":1575,"Juan Jose Fernandez Perez":1576,"Mahschid Sayyar":1577,"Benjamin Dassow":1578,"Markus Walschburger":1579,"Jonathan Haist":1580,"Daniel Rohregger":1581,"Thomas Naunheim":1582,"Florian Stöckl":1583,"Pascal Asch":1584,"Markus Kättner":1585,"Anna Ulbricht":1586,"Annette Brauns":1587},{"display_name":1243,"avatar":1244,"permalink":1245,"linkedin":1246,"imageOffsetTop":1247},{"display_name":1249,"avatar":1250,"permalink":1251,"twitter":1252,"linkedin":1253},{"display_name":1255,"avatar":1256,"permalink":1257,"twitter":1258,"linkedin":1259,"imageOffsetLeft":1260,"imageOffsetTop":1261},{"display_name":1263,"avatar":1264,"permalink":1265,"twitter":1266,"linkedin":1267,"imageOffsetTop":1247},{"display_name":1269,"avatar":1270,"permalink":1271,"twitter":1272,"linkedin":1273,"imageOffsetTop":1274,"imageOffsetLeft":1275},{"display_name":1277,"avatar":1278,"permalink":1279,"linkedin":1280},{"display_name":1282,"avatar":1283,"permalink":1284,"linkedin":1285,"twitter":1286},{"display_name":1288,"avatar":1289,"permalink":1290,"linkedin":1291,"twitter":1292},{"display_name":1294,"avatar":1295,"permalink":1296,"linkedin":1297,"twitter":1298},{"display_name":1300,"avatar":1301,"permalink":1302,"linkedin":1303,"twitter":1304,"imageOffsetTop":1305,"imageOffsetLeft":1306},{"display_name":1308,"avatar":1309,"permalink":1310,"twitter":1258,"linkedin":1311},{"display_name":1313,"avatar":1314,"permalink":1315,"twitter":1258,"linkedin":1316},{"display_name":523,"avatar":1318,"permalink":1319,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},{"display_name":1321,"avatar":1322,"permalink":1323,"twitter":1258,"linkedin":1324},{"display_name":1326,"avatar":1327,"permalink":1328,"twitter":1329,"linkedin":1330},{"display_name":1332,"avatar":1333,"permalink":1334,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},{"display_name":1336,"avatar":1337,"permalink":1338,"twitter":1339,"linkedin":1339},{"display_name":1341,"avatar":1342,"permalink":1343,"twitter":1344,"linkedin":1345,"imageOffsetTop":1346},{"display_name":1348,"avatar":1349,"permalink":1350,"linkedin":1351,"twitter":1258},{"display_name":1353,"avatar":1354,"permalink":1355,"linkedin":1356,"twitter":1258},{"display_name":1358,"avatar":1359,"permalink":1360,"twitter":1361,"linkedin":1362},{"display_name":1364,"avatar":1365,"permalink":1366,"linkedin":1367,"twitter":1258},{"display_name":1369,"avatar":1370,"permalink":1371,"linkedin":1372,"twitter":1258,"imageOffsetTop":1247},{"display_name":1374,"avatar":1375,"permalink":1376,"linkedin":1377,"twitter":1258},{"display_name":1379,"avatar":1380,"permalink":1381,"twitter":1258},{"display_name":1383,"avatar":1384,"permalink":1385,"twitter":1258,"linkedin":1386},{"display_name":1388,"avatar":1389,"permalink":1390,"twitter":1391,"linkedin":1392},{"display_name":1394,"avatar":1395,"permalink":1396,"linkedin":1397,"twitter":1258},{"display_name":1399,"avatar":1400,"permalink":1401,"twitter":1258,"linkedin":1311},{"display_name":1403,"avatar":1404,"permalink":1405,"twitter":1406,"linkedin":1406,"imageOffsetTop":1247,"socials":1563},[1564,1565],{"text":472,"href":1409},{"text":1411,"href":1412},{"display_name":1414,"avatar":1415,"permalink":1416,"twitter":1417,"linkedin":1418},{"display_name":1420,"avatar":1421,"permalink":1422,"twitter":1258,"linkedin":1311},{"display_name":1424,"avatar":1425,"permalink":1426,"twitter":1427,"linkedin":1311},{"display_name":1429,"avatar":1430,"permalink":1431,"twitter":1432,"linkedin":1433},{"display_name":1435,"avatar":1436,"permalink":1437,"twitter":1438,"linkedin":1438},{"display_name":1440,"avatar":1441,"permalink":1442,"twitter":1443,"linkedin":1444},{"display_name":1446,"avatar":1447,"permalink":1448,"twitter":1449,"linkedin":1450},{"display_name":1452,"avatar":1453,"permalink":1454,"linkedin":1455,"twitter":1258},{"display_name":1457,"avatar":1458,"permalink":1459,"linkedin":1460,"twitter":1258},{"display_name":1462,"avatar":1463,"permalink":1464,"linkedin":1465,"twitter":1466},{"display_name":1468,"avatar":1469,"permalink":1470,"linkedin":1471},{"display_name":1473,"avatar":1474,"permalink":1475,"linkedin":1476},{"display_name":1478,"avatar":1479,"permalink":1480,"linkedin":1481},{"display_name":1483,"avatar":1484,"permalink":1485,"linkedin":1486},{"display_name":1488,"avatar":1489,"permalink":1490,"linkedin":1491,"imageOffsetTop":1247},{"display_name":1493,"avatar":1494,"permalink":1495,"linkedin":1496,"imageOffsetTop":1247},{"display_name":1498,"avatar":1499,"permalink":1500,"linkedin":1501,"imageOffsetTop":1346},{"display_name":1503,"avatar":1504,"permalink":1505,"linkedin":1506,"imageOffsetTop":1346},{"display_name":1508,"avatar":1509,"permalink":1510,"linkedin":1511,"imageOffsetTop":1346},{"display_name":1513,"avatar":1514,"permalink":1515,"linkedin":1516,"imageOffsetTop":1517,"imageOffsetLeft":1518},{"display_name":1520,"avatar":1521,"permalink":1522,"linkedin":1523,"imageOffsetTop":1524,"imageOffsetLeft":1525},{"display_name":1527,"avatar":1528,"permalink":1529,"linkedin":1530,"imageOffsetTop":1531,"imageOffsetLeft":1274},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1591,"authors":1808},[1592,1610,1624,1638,1654,1667,1680,1693,1705,1721,1735,1750,1768,1779,1792],{"id":1593,"title":1594,"author":1595,"cta":494,"description":1194,"hideInRecent":484,"layout":1210,"meta":1596,"moment":1602,"path":1603,"stem":1604,"tags":1605,"webcast":484},"content_da/posts/2026-09-22-end-of-mfa-sms.md","Enden på MFA-SMS",[1269],{"lang":1212,"date":1597,"categories":1598,"blogtitlepic":1600,"customExcerpt":1601},"2026-09-21",[1599],"Security","head-conditional-access.jpg","Hvorfor virksomheder nu bør skifte til phishing-resistente og så vidt muligt passwordløse loginmetoder.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[1599,1606,1607,1608,1609],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1611,"title":1612,"author":1613,"cta":494,"description":1194,"hideInRecent":484,"layout":1210,"meta":1614,"moment":1597,"path":1618,"stem":1619,"tags":1620,"webcast":484},"content_da/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. Når brugeren er exploiten, og hvordan I stopper det",[1243,1263],{"lang":1212,"date":1597,"categories":1615,"blogtitlepic":1616,"customExcerpt":1617},[1599],"head-clickfix.jpg","ClickFix gør brugere til deres egen angriber: et falsk CAPTCHA, en copy-paste, og skadekoden kører i hukommelsen, uden at noget lander på disken. Hvordan Microsoft Defender opdager angrebet, hvor detektionen når sine grænser, og hvordan I lukker hullet med et RunMRU-hunt og fire beskyttelseslag.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1621,1622,1623],"Defender","SOC","Endpoint Security",{"id":1625,"title":1626,"author":1627,"cta":494,"description":1194,"hideInRecent":484,"layout":1210,"meta":1628,"moment":1597,"path":1632,"stem":1633,"tags":1634,"webcast":484},"content_da/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin og hverdag på samme computer? Game Over.",[1403],{"lang":1212,"date":1597,"categories":1629,"blogtitlepic":1630,"customExcerpt":1631},[1599],"head-game-over-en.jpg","Hvorfor én tenant ikke rækker for CIO'er, og hvorfor den anden sjældent bliver tænkt med. Managed Red Tenant adskiller arkitektonisk det administrative arbejde fra kontormiljøet, Managed Dark Tenant holder virksomheden handlekraftig, hvis forsvaret alligevel falder. Hvad det betyder for driftsmodellen, SOC-signalet og dokumentationspligterne efter NISG 2026.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[1599,1635,1636,1637],"Privileged Access","Zero Trust","NIS2",{"id":1639,"title":1640,"author":1641,"cta":494,"description":1642,"hideInRecent":484,"layout":1210,"meta":1643,"moment":1644,"path":1649,"stem":1650,"tags":1651,"webcast":484},"content_da/posts/2026-08-08-isg-germany-2026.md","Fire gange Leader. glueckkanja i ISG-undersøgelsen Tyskland 2026",[1429],"ISG har omdøbt sin undersøgelse i år. Microsoft Cloud Ecosystem blev til Microsoft AI and Cloud Ecosystem, og med navnet har målestokken flyttet sig: Det, der vurderes, er ikke længere, hvem der indfører Microsoft-platforme, men hvem der driver Copilot, agenter og AI-workloads kontrollerbart. Den nye målestok har ikke ændret noget ved vores position. ISG Provider Lens®-undersøgelsen Tyskland 2026 positionerer os som Leader i fire kvadranter: Microsoft Productivity and Business Process Services og Azure Managed Services, hver gang i både Large Market og Mid Market. Efter 2021, 2023, 2024 og 2025 er det den femte Leader-placering i Tyskland, i Schweiz kom springet ind i Leader-kvadranten to uger tidligere.",{"lang":1212,"date":1644,"categories":1645,"blogtitlepic":1647,"customExcerpt":1648},"2026-08-08",[1646],"Corporate","head-isg-de-2026.png","ISG Provider Lens®-undersøgelsen 2026 positionerer glueckkanja i Tyskland som Leader i fire kvadranter: Microsoft Productivity and Business Process Services og Azure Managed Services, hver gang i både Large og Mid Market. Undersøgelsen hedder nu Microsoft AI and Cloud Ecosystem, og målestokken har flyttet sig: Det, der vurderes, er, hvem der driver AI- og agent-workloads kontrollerbart.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1652,1653],"Award","ISG",{"id":1655,"title":1656,"author":1657,"cta":494,"description":1658,"hideInRecent":484,"layout":1210,"meta":1659,"moment":1660,"path":1664,"stem":1665,"tags":1666,"webcast":484},"content_da/posts/2026-07-31-isg-switzerland-2026.md","Fra Rising Star til Leader. glueckkanja i ISG-undersøgelsen Schweiz 2026",[1429],"I 2024 stiftede vi glueckkanja Switzerland AG og flyttede ind i et kontor i zentroom på Bahnhofplatz 10b i Bern. I 2025 placerede ISG os som Rising Star på det schweiziske marked, som den leverandør, analytikerne tror kan tage springet ind i Leader-kvadranten. Nu er springet dokumenteret: ISG Provider Lens®-undersøgelsen 2026 positionerer os i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inden for områderne Azure Managed Services og Microsoft Productivity and Business Process Services.",{"lang":1212,"date":1660,"categories":1661,"blogtitlepic":1662,"customExcerpt":1663},"2026-07-31",[1646],"head-isg-ch-2026.png","ISG Provider Lens®-undersøgelsen 2026 positionerer glueckkanja i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inden for områderne Azure Managed Services og Microsoft Productivity and Business Process Services. To år efter markedsindtrædelsen i Bern, et år efter Rising Star-udmærkelsen.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1652,1653],{"id":1668,"title":1669,"author":1670,"cta":494,"description":1194,"hideInRecent":484,"layout":1210,"meta":1671,"moment":1672,"path":1676,"stem":1677,"tags":1678,"webcast":484},"content_da/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Hvad OpenAI/Hugging-Face-hændelsen afslører, og hvad den ikke gør",[1403],{"lang":1212,"date":1672,"categories":1673,"blogtitlepic":1674,"customExcerpt":1675},"2026-07-24",[1599],"head-outbreak.jpg","En AI-agent bryder ud af sit testmiljø, finder en zero-day og hacker en anden virksomhed. Det lyder som et filmmanuskript, men skete faktisk i juli 2026. Tid til en nøgtern placering: med lidt psykologi, to security-veteraner og spørgsmålet om, hvad det betyder for jeres forsvar.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1679,1622,1636],"AI",{"id":1681,"title":1682,"author":1683,"cta":494,"description":1684,"hideInRecent":484,"layout":1210,"meta":1685,"moment":1686,"path":1690,"stem":1691,"tags":1692,"webcast":484},"content_da/posts/2026-07-22-isg-cybersecurity-2026.md","Leader og Rising Star. glueckkanja i ISG's Cybersecurity-undersøgelse 2026",[1429],"Ny i kvadranten og straks Leader: ISG Provider Lens®-undersøgelsen \"Cybersecurity – Services and Solutions 2026\" positionerer glueckkanja som Leader inden for Next-Gen SOC/MDR Services for mellemstore virksomheder i Tyskland. I det samlede marked for Next-Gen SOC/MDR Services udnævner ISG os til Rising Star, altså den leverandør, som analytikerne tror kan tage springet ind i Leader-kvadranten inden for de næste 12 til 24 måneder.",{"lang":1212,"date":1686,"categories":1687,"blogtitlepic":1688,"customExcerpt":1689},"2026-07-22",[1646],"head-isg-cybersecurity-2026.png","ISG Provider Lens®-undersøgelsen Cybersecurity 2026 udnævner glueckkanja til Leader i kvadranten Next-Gen SOC/MDR Services (Midmarket). I det samlede marked for Next-Gen SOC/MDR Services er vi Rising Star. ISG fremhæver vores vækst over gennemsnittet, vores dybe Microsoft-security-ekspertise og et 24/7-SOC drevet fra Tyskland.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1652,1653,1599],{"id":1694,"title":1695,"author":1696,"cta":494,"description":1697,"hideInRecent":484,"layout":1210,"meta":1698,"moment":1699,"path":1702,"stem":1703,"tags":1704,"webcast":484},"content_da/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: Hvad AI virkelig skal have for at kunne arbejde",[1429],"En produktionsvirksomhed vil vide, hvilke af dens 14.000 SKU'er der faktisk er profitable. Svaret ligger i tre systemer, der aldrig har udvekslet et enkelt datapunkt med hinanden. Indtil for kort tid siden kostede det tre afdelinger, to uger og en del god vilje at få det. Siden begyndelsen af 2026 kan en AI besvare det spørgsmål på minutter: søge data igennem, skabe sammenhænge, producere en anbefaling. Forudsat at den har adgang.",{"lang":1212,"date":1699,"categories":1700,"blogtitlepic":1701},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1679,131],{"id":1706,"title":1707,"author":1708,"cta":494,"description":1709,"hideInRecent":484,"layout":1210,"meta":1710,"moment":1711,"path":1715,"stem":1716,"tags":1717,"webcast":484},"content_da/posts/2026-07-01-onboarding-process.md","Kontrakten er skrevet under: Sådan forløber din onboarding hos os",[1520],"Hvordan forløber jeres onboarding egentlig? Det er et spørgsmål, vi støder på igen og igen i samtaler med ansøgere, for mange har oplevet, at en onboarding kan gå hakkende. Derfor er det så meget desto vigtigere for os, at du får en god fornemmelse helt fra begyndelsen.",{"lang":1212,"date":1711,"categories":1712,"blogtitlepic":1713,"customExcerpt":1714},"2026-07-01",[1646],"Onboarding_Blogheader","Kontrakten er skrevet under, det første store skridt er taget. Men hvad sker der nu? Vi tager dig med bag kulisserne i vores onboarding, fra PreBoarding til den første uge i teamet.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1718,1719,1720],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1722,"title":1723,"author":1724,"cta":494,"description":1725,"hideInRecent":484,"layout":1210,"meta":1726,"moment":1727,"path":1731,"stem":1732,"tags":1733,"webcast":484},"content_da/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: vi er blandt de få",[1429],"I Microsofts partner-økosystem findes der en lang række anerkendelser, og alligevel skiller Frontier Partner Badge sig ud fra de øvrige udmærkelser i sin anlæg. Man kan ikke ansøge om det, det tildeles på Microsofts eget initiativ til en eksklusiv kreds af partnere, som skal overbevise i flere discipliner parallelt i stedet for at brillere i en enkelt. Microsoft vurderer dokumenteret kompetence inden for Cloud & AI Platforms, AI Business Solutions og Security i lige høj grad og henvender sig dermed til virksomheder, der ikke opfatter AI som en påbygning på eksisterende IT, men som resultatet af en gennemgående arkitektur, der bærer fra identiteten over endpointet og helt ind i produktiv AI-drift.",{"lang":1212,"date":1727,"categories":1728,"blogtitlepic":1729,"customExcerpt":1730},"2026-06-26",[1646],"head-frontier-partner-badge.jpg","Microsoft AI Cloud Partner Program har for nylig fået en ny topudmærkelse, Frontier Partner Badge. Microsoft tildeler den udelukkende til en eksklusiv kreds af partnere verden over, som leverer bæredygtige AI-projekter på hele Microsoft-stakken, fra arbejdspladsen over cloud-platformen og security og helt ind i selve AI-anvendelsen, og som har dokumenteret det i praksis. I DACH-området tæller den gruppe kun en håndfuld virksomheder, og vi er en af dem.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1652,1734,1679],"Microsoft Partner",{"id":1736,"title":1737,"author":1738,"cta":494,"description":1739,"hideInRecent":484,"layout":1210,"meta":1740,"moment":1741,"path":1745,"stem":1746,"tags":1747,"webcast":484},"content_da/posts/2026-06-09-vair-run.md","160 kilometer for en god sag",[1527],"Søndag morgen, klokken 8:30, Holbeinsteg ved Main. Elleve kolleger i ens NinjaCat-shirts, klar til Frankfurter Runden. Regn, lyn og torden inklusive. At løbe for en god sag var motivation nok til at snøre løbeskoene på trods af det dårlige vejr.",{"lang":1212,"date":1741,"categories":1742,"blogtitlepic":1743,"customExcerpt":1744},"2026-06-08",[1646],"frankfurter-runden.png","Elleve kolleger, 16 omgange, 160 kilometer, et tordenvejr og en podieplacering: glueckkanja var med til Frankfurter Runden 2026 og donerede for hver løbet omgang til VAIR e.V., der bygger en inkluderende sports- og kulturpark i Offenbach.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1748,1718,1749],"Top Arbeitgeber","Soziales Engagement",{"id":1751,"title":1752,"author":1753,"cta":494,"description":1754,"hideInRecent":484,"layout":1210,"meta":1755,"moment":1756,"path":1760,"stem":1761,"tags":1762,"webcast":484},"content_da/posts/2026-04-10-incident-to-intelligence.md","Anatomien af en ukendt AMOS Stealer: fra alert til immunitet på timer",[1508],"Når en alert udløses i vores SOC, begynder uret at løbe: ikke kun for den berørte kunde, men for alle organisationer under vores beskyttelse. Det farligste øjeblik i det moderne trusselslandskab er Intelligence Gap, tidsvinduet mellem den første anvendelse af en ny malwarevariant og den dag, branchen hører om den.",{"lang":1212,"date":1756,"categories":1757,"blogtitlepic":1758,"customExcerpt":1759},"2026-04-10",[1599],"head-amos-stealer.png","En hidtil udokumenteret AMOS Stealer-variant kompromitterede et macOS-endpoint. Ingen kendte hashes, ingen C2-data i offentlige databaser. Vores SOC skilte seks obfuskeringslag ad, udtrak alle indikatorer og rullede beskyttelsen ud til alle SOC-kunder inden for timer, endnu før branchen overhovedet havde set samplet.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1763,1764,1765,1766,1767],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1769,"title":1770,"author":1771,"cta":494,"description":1772,"hideInRecent":484,"layout":1210,"meta":1773,"moment":1774,"path":1777,"stem":1778,"tags":494,"webcast":484},"content_da/posts/2026-03-21-microsoft-edge-corporate-browser.md","Derfor bør Edge være jeres eneste corporate browser",[1300],"Valget af browser er en strategisk beslutning i virksomhedsmiljøer, fordi det direkte påvirker, hvor meget sikkerhed og hvor stort et administrationsarbejde I reelt har. Google Chrome var længe den nærliggende mulighed, men Microsoft Edge har udviklet sig til en browser, der griber direkte ind i den eksisterende stak, især når Microsoft 365 er i brug, og administrationen kører gennem Intune.",{"lang":1212,"date":1774,"blogtitlepic":1775,"customExcerpt":1776},"2026-03-21","head-microsoft-edge-default-browser.jpg","Ingen virksomhed har for alvor valgt Chrome; den var der bare, med sin egen sync-logik, sin egen kontohåndtering og sin egen politikflade. Microsoft Edge griber derimod direkte ind i den infrastruktur, der alligevel kører: Entra ID, Intune, Defender. Dette indlæg viser, hvordan skiftet ser ud, hvordan Chrome omdirigeres til en landingpage via en Intune-politik, og hvad der falder væk, når man holder op med at drive to browsere parallelt.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1780,"title":1781,"author":1782,"cta":494,"description":1783,"hideInRecent":484,"layout":1210,"meta":1784,"moment":1785,"path":1789,"stem":1790,"tags":1791,"webcast":484},"content_da/posts/2026-03-20-stryker-attack-intune-privilege.md","Én admin-konto var alt, hvad der skulle til.",[1403],"Onsdag den 11. marts 2026. Medarbejdere på Stryker-kontorer i 79 lande tændte deres computere og fandt dem tomme. Login-skærme erstattet af et logo. Firmabærbare, arbejdstelefoner, private enheder tilmeldt virksomhedens BYOD-program, alle slettet samtidig, natten over. Ingen ransomware, ingen malware-signaturer, intet, som et endpoint-detection-værktøj kunne have opdaget.",{"lang":1212,"date":1785,"categories":1786,"blogtitlepic":1787,"customExcerpt":1788},"2026-03-20",[1599],"head-stryker.jpg","Den 11. marts 2026 slettede Handala enheder i 79 lande, og alt, hvad der skulle til, var en kompromitteret Intune-admin-konto. Ingen malware, ingen exploit, kun legitime management-værktøjer vendt mod deres ejere. Hvad der skete, hvorfor det virkede, og hvilke to arkitektoniske huller der skal lukkes.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[71,1635,1636],{"id":1793,"title":1794,"author":1795,"cta":494,"description":1796,"hideInRecent":484,"layout":1210,"meta":1797,"moment":1798,"path":1802,"stem":1803,"tags":1804,"webcast":484},"content_da/posts/2026-03-16-ai-agent-hackathon.md","Seks agenter. Fire uger. Rigtig drift.",[1429],"Hvor mange timer bruger jeres IT-afdeling om ugen på opgaver, som en agent kunne klare på minutter?",{"lang":1212,"date":1798,"categories":1799,"blogtitlepic":1800,"customExcerpt":1801},"2026-03-16",[1646],"head-ai-agent-hackathon.jpg","Seks virksomheder, fire ugers byggefase, seks fungerende AI Agents. Det var den første glueckkanja AI Agent Hackathon. Kiekert, Dr. Oetker, Eckes-Granini, igefa og lila logistik har bygget agenter i Copilot Studio, som kører produktivt i dag. Her er, hvad der kom ud af det, og hvordan formatet fungerer.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1679,1805,1806,1807],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1809,"Fritz Zurhorst":1810,"Nadine Klein":1811,"Jan Geisbauer":1812,"Carolin Kanja":1816,"Anna Ulbricht":1817,"Annette Brauns":1818,"Pascal Asch":1819,"Steffen Schwerdtfeger":1820},{"display_name":1269,"avatar":1270,"permalink":1271,"twitter":1272,"linkedin":1273,"imageOffsetTop":1274,"imageOffsetLeft":1275},{"display_name":1243,"avatar":1244,"permalink":1245,"linkedin":1246,"imageOffsetTop":1247},{"display_name":1263,"avatar":1264,"permalink":1265,"twitter":1266,"linkedin":1267,"imageOffsetTop":1247},{"display_name":1403,"avatar":1404,"permalink":1405,"twitter":1406,"linkedin":1406,"imageOffsetTop":1247,"socials":1813},[1814,1815],{"text":472,"href":1409},{"text":1411,"href":1412},{"display_name":1429,"avatar":1430,"permalink":1431,"twitter":1432,"linkedin":1433},{"display_name":1520,"avatar":1521,"permalink":1522,"linkedin":1523,"imageOffsetTop":1524,"imageOffsetLeft":1525},{"display_name":1527,"avatar":1528,"permalink":1529,"linkedin":1530,"imageOffsetTop":1531,"imageOffsetLeft":1274},{"display_name":1508,"avatar":1509,"permalink":1510,"linkedin":1511,"imageOffsetTop":1346},{"display_name":1300,"avatar":1301,"permalink":1302,"linkedin":1303,"twitter":1304,"imageOffsetTop":1305,"imageOffsetLeft":1306},{"id":1238,"extension":1239,"meta":1822,"stem":8,"__hash__":1589},{"Thorsten Kunzi":1823},{"display_name":523,"avatar":1318,"permalink":1319,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},1791383909188]