[{"data":1,"prerenderedAt":1688},["ShallowReactive",2],{"sc:header-data-de":3,"sc:footer-data-de":486,"post-de--posts-2026-10-29-autopilot-device-preparation-99a9efd37a67f":506,"authors_data":1041,"content-de-list-7b291c2dd91a4":1400,"authors_data:Steffen Schwerdtfeger":1685},{"lang":4,"home":5,"navigation":17,"meta":476,"contact":482},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"de":13},{"title":14,"url":15,"alt":16,"alias":15},"Home","/de","glueckkanja Logo",[18,124,228,313,392,399],{"name":19,"languages":20,"children":24},"workplace",{"de":21},{"title":22,"description":23},"Workplace","Microsoft 365-Power für smarte, sichere und flexible Arbeitswelten, die modernste Technologien und Identity Lösungen verbinden.",[25,55,88],{"name":26,"languages":27,"children":30},"portfolio",{"de":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"de":34},{"title":35,"url":36},"Managed Intune","/de/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"de":40},{"title":41,"url":42},"Managed Entra","/de/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"de":46},{"title":47,"url":48},"Managed Workplace","/de/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"de":52},{"title":53,"url":54},"Consulting Services","/de/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"de":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,82],{"name":62,"languages":63},"microsoft-entra-suite",{"de":64},{"title":65,"url":66},"Microsoft Entra Suite","/de/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"de":70},{"title":71,"url":72},"Microsoft Intune","/de/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"de":76},{"title":77,"url":78},"Microsoft Windows","/de/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{},{"name":83,"languages":84},"cloud-workplace-foundation",{"de":85},{"title":86,"url":87},"Cloud Workplace Foundation","/de/workplace/cloud-workplace-foundation",{"name":89,"languages":90,"children":93},"microsoft-365-collaboration",{"de":91},{"title":92},"Microsoft 365 Collaboration",[94,100,106,112,118],{"name":95,"languages":96},"microsoft-copilot",{"de":97},{"title":98,"url":99},"Microsoft 365 Copilot","/de/workplace/microsoft-365-copilot",{"name":101,"languages":102},"microsoft-teams",{"de":103},{"title":104,"url":105},"Teams","/de/workplace/microsoft-teams",{"name":107,"languages":108},"sharepoint-powerplatform",{"de":109},{"title":110,"url":111},"SharePoint & Power Platform","/de/workplace/sharepoint-power-platform",{"name":113,"languages":114},"exchange-online",{"de":115},{"title":116,"url":117},"Exchange Online","/de/workplace/exchange-online",{"name":119,"languages":120},"information-protection-compliance",{"de":121},{"title":122,"url":123},"Information Protection & Compliance","/de/workplace/information-protection-compliance",{"name":125,"languages":126,"children":130},"azure",{"de":127},{"title":128,"description":129},"Azure","Mit Azure Wachstum beflügeln: Cloud-Kosten senken, Effizienz steigern und Innovationen durch IaaS und PaaS vorantreiben.",[131,148,178],{"name":132,"languages":133,"children":135},"azure-portfolio",{"de":134},{"title":29},[136,142],{"name":137,"languages":138},"azure-managed-services",{"de":139},{"title":140,"url":141},"Azure Managed Services","/de/azure/azure-managed-services",{"name":143,"languages":144},"azure-consulting",{"de":145},{"title":146,"url":147},"Azure Consulting","/de/azure/azure-consulting",{"name":149,"languages":150,"children":153},"azure-scenarios",{"de":151},{"title":152},"Szenarios",[154,160,166,172],{"name":155,"languages":156},"plan-your-cloud",{"de":157},{"title":158,"url":159},"Planen Sie Ihre Cloud","/de/azure/plan-your-cloud",{"name":161,"languages":162},"migrate-to-the-cloud",{"de":163},{"title":164,"url":165},"Migriere deine Cloud","/de/azure/migrate-to-the-cloud",{"name":167,"languages":168},"innovate-your-business",{"de":169},{"title":170,"url":171},"Erneuere dein Business","/de/azure/innovate-your-business",{"name":173,"languages":174},"vmware-exit",{"de":175},{"title":176,"url":177},"Überdenke deine VMware-Strategie","/de/azure/vmware-exit",{"name":179,"languages":180,"children":183},"azure-practices",{"de":181},{"title":182},"Practices",[184,190,196,199,205,210,216,222],{"name":185,"languages":186},"azure-foundation",{"de":187},{"title":188,"url":189},"Azure Foundation","/de/azure/azure-foundation",{"name":191,"languages":192},"azure-ai-foundation",{"de":193},{"title":194,"url":195},"Azure AI Foundation","/de/azure/azure-ai-foundation",{"name":83,"languages":197},{"de":198},{"title":86,"url":87},{"name":200,"languages":201},"azure-data-foundation",{"de":202},{"title":203,"url":204},"Azure Data Foundation","/de/azure/azure-data-foundation",{"name":185,"languages":206},{"de":207},{"title":208,"url":209},"Azure Container Foundation","/de/azure/azure-container-foundation",{"name":211,"languages":212},"dark-tenant",{"de":213},{"title":214,"url":215},"Managed Dark Tenant","/de/azure/managed-dark-tenant",{"name":217,"languages":218},"azure-cloud-adoption-framework",{"de":219},{"title":220,"url":221},"Cloud Adoption Framework","/de/azure/cloud-adoption-framework",{"name":223,"languages":224},"azure-cloud-competence-center",{"de":225},{"title":226,"url":227},"Cloud Competence Center","/de/azure/cloud-competence-center",{"name":229,"languages":230,"children":239},"security",{"de":231},{"title":232,"description":233,"emergency":234},"Security","Wachsamkeit in der Cloud mit einem preisgekrönten 24/7 Managed Service, Incident Response und modernstem Schutz für Ihre Infrastruktur.",{"text":235,"href":236,"skin":237,"icon":238},"Under Attack?","/de/security/are-you-under-attack","primary","emergency",[240,265,286],{"name":241,"children":242},"security-security-consulting",[243,249,253,259],{"name":244,"languages":245},"managed-red-tenant",{"de":246},{"title":247,"url":248},"Managed Red Tenant","/de/security/managed-red-tenant",{"name":211,"languages":250},{"de":251},{"title":252,"url":215},"Dark Tenant",{"name":254,"languages":255},"sentinel-data-lake",{"de":256},{"title":257,"url":258},"Sentinel Data Lake","/de/security/sentinel-data-lake",{"name":260,"languages":261},"security-consulting",{"de":262},{"title":263,"url":264},"Security Consulting","/de/security/security-consulting",{"name":266,"children":267},"security-cloud-security-operations-center",[268,274,280],{"name":269,"languages":270},"cloud-security-operations-center",{"de":271},{"title":272,"url":273},"Cloud Security Operations Center","/de/security/cloud-security-operations-center",{"name":275,"languages":276},"global-secure-access",{"de":277},{"title":278,"url":279},"Global Secure Access","/de/security/global-secure-access",{"name":281,"languages":282},"my-work-id",{"de":283},{"title":284,"url":285},"MyWorkID","/de/security/my-work-id",{"name":287,"children":288},"security-preventive-services",[289,295,301,307],{"name":290,"languages":291},"preventive-services",{"de":292},{"title":293,"url":294},"Preventive Services","/de/security/preventive-services",{"name":296,"languages":297},"data-security-services",{"de":298},{"title":299,"url":300},"Data Security Service","/de/security/data-security-service",{"name":302,"languages":303},"security-copilot-agents",{"de":304},{"title":305,"url":306},"Security Copilot Agents","/de/security/security-copilot-agents",{"name":308,"languages":309},"nis2",{"de":310},{"title":311,"url":312},"NIS2 technisch umsetzen","/de/security/red-dark-tenant-nis2",{"name":314,"languages":315,"children":319},"products",{"de":316},{"title":317,"description":318},"Produkte","Innovative Companion-Produkte für eine vollständig sichere, 100% cloud-native Microsoft-Umgebung, die Zusammenarbeit, Netzwerkauthentifizierung und Softwareverwaltung verbessern.",[320,357],{"name":321,"products":322,"children":323},"lorem ipsum 1",true,[324,333,341,349],{"name":325,"img":326,"target":327,"languages":328},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"de":329},{"title":330,"url":331,"subtitle":332},"RealmJoin","https://www.realmjoin.com","Cloudbasierte Softwareverteilung",{"name":334,"img":335,"target":327,"languages":336},"scepman","products/scepman/scepman-nav-logo.svg",{"de":337},{"title":338,"url":339,"subtitle":340},"SCEPman","https://www.scepman.com","Zertifikatsverteilung aus der Cloud",{"name":342,"img":343,"target":327,"languages":344},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"de":345},{"title":346,"url":347,"subtitle":348},"KONNEKT","https://www.konnekt.io","Arbeiten Sie lokal mit Ihren Office 365-Daten",{"name":350,"img":351,"target":327,"languages":352},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"de":353},{"title":354,"url":355,"subtitle":356},"RealMigrator","https://www.realmigrator.com","Migrieren Sie alle Ihre Datenressourcen",{"name":358,"products":322,"children":359},"lorem ipsum 2",[360,368,376,384],{"name":361,"img":362,"target":327,"languages":363},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"de":364},{"title":365,"url":366,"subtitle":367},"TerraProvider","https://www.terraprovider.com","Terraform Provider für Microsoft 365",{"name":369,"img":370,"target":327,"languages":371},"radiusaas","products/radius/radius-nav-logo.svg",{"de":372},{"title":373,"url":374,"subtitle":375},"RADIUSaaS","https://www.radius-as-a-service.com","Authentifizierung für Ihr Netzwerk",{"name":377,"img":378,"target":327,"languages":379},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"de":380},{"title":381,"url":382,"subtitle":383},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot Monitoring in Echtzeit",{"name":385,"img":386,"target":327,"languages":387},"sendman","products/sendman/Sendman-nav-logo.svg",{"de":388},{"title":389,"url":390,"subtitle":391},"Sendman","https://www.sendman.com","Das SMTP-Relay für Microsoft 365",{"name":393,"languages":394},"casestudies",{"de":395},{"title":396,"url":397,"description":398},"Case Studies","/de/casestudies","Pionier in der Cloud: Ihr Top-Microsoft-Partner für umfassende Cloud-Lösungen mit einem Blueprint-basierten Ansatz und Infrastructure-as-Code-Expertise.",{"name":400,"languages":401,"children":404},"company",{"de":402},{"title":403,"description":398},"Unternehmen",[405,435,459],{"name":406,"languages":407,"children":410},"company-about-us",{"de":408},{"title":409},"Über Uns",[411,417,423,429],{"name":412,"languages":413},"company-facts-figures",{"de":414},{"title":415,"url":416},"Facts & Figures","/de/company/facts-and-figures",{"name":418,"languages":419},"company-contact",{"de":420},{"title":421,"url":422},"Kontakt & Standorte","/de/company/contact-and-locations",{"name":424,"languages":425},"switzerland",{"de":426},{"title":427,"url":428},"glueckkanja Schweiz","/de/company/switzerland",{"name":430,"languages":431},"austria",{"de":432},{"title":433,"url":434},"glueckkanja Österreich","/de/company/austria",{"name":436,"languages":437,"children":440},"company-career",{"de":438},{"title":439},"Karriere",[441,447,453],{"name":442,"languages":443},"company-career-overview",{"de":444},{"title":445,"url":446},"Karriere Übersicht","/de/career",{"name":448,"languages":449},"company-young-professionals",{"de":450},{"title":451,"url":452},"Young Professionals","/de/young-professionals",{"name":454,"languages":455},"company-jobs",{"de":456},{"title":457,"url":458},"Stellenanzeigen","/de/job-offers",{"name":460,"languages":461,"children":464},"company-latest",{"de":462},{"title":463},"Aktuelles",[465,471],{"name":466,"languages":467},"company-blog",{"de":468},{"title":469,"url":470},"Blog","/de/blog",{"name":466,"languages":472},{"de":473},{"title":474,"url":475},"Events","/de/events",[477],{"name":478,"languages":479},"career-meta",{"de":480},{"title":439,"url":446,"active":481},false,{"languages":483},{"de":484},{"title":485,"url":422,"active":481},"Kontakt",{"data":487},{"bgColor":488,"number":489,"mail":490,"brandLogos":491,"logos":492,"links":496},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[493],{"img":10,"alt":16,"url":494,"class":495},"index.html","max-w-19rem",[497,500,503],{"title":498,"url":499},"Datenschutz","/de/privacy",{"title":501,"url":502},"Impressum","/de/imprint",{"title":504,"url":505},"No Cookies","/de/cookies",{"id":507,"title":508,"author":509,"body":511,"cta":491,"description":517,"eventid":491,"extension":935,"hideInRecent":481,"layout":936,"meta":937,"moment":940,"navigation":322,"path":1034,"seo":1035,"stem":1036,"tags":1037,"webcast":481,"__hash__":1040},"content_de/posts/2026-10-29-autopilot-device-preparation.md","Autopilot Device Preparation wird Standard, Hybrid Join bleibt zurück",[510],"Steffen Schwerdtfeger",{"type":512,"value":513,"toc":922},"minimal",[514,518,523,526,563,661,671,675,677,686,689,692,696,698,701,721,725,727,736,742,745,748,756,760,762,765,768,772,774,777,780,783,786,812,815,819,821,824,863,867,869,872,875,878,882,884],[515,516,517],"p",{},"Microsoft hat Autopilot Device Preparation im September zum empfohlenen Verfahren für user-driven Windows-Deployments erklärt. Das neue Modell ist einfacher aufgebaut und läuft stabiler, unterstützt aber nur Entra Join. Wer neue Geräte heute noch hybrid joint, sollte genau hier hinschauen, denn diese Einschränkung wiegt schwerer als die Frage nach dem richtigen Provisioning-Werkzeug.",[519,520,522],"h2",{"id":521},"das-wichtigste-in-kürze","Das Wichtigste in Kürze",[515,524,525],{},"{: .h3-font-size}",[527,528,530,531,530,539,530,545,530,551,530,557],"ul",{"style":529},"margin: 0.25rem 0","\n  ",[532,533,534,538],"li",{},[535,536,537],"strong",{},"Neue Empfehlung:"," Microsoft empfiehlt Autopilot Device Preparation seit September für user-driven Enrollments, weil Deployments damit schneller und zuverlässiger durchlaufen.",[532,540,541,544],{},[535,542,543],{},"Nur Entra Join:"," Device Preparation unterstützt ausschließlich Entra Join, Hybrid Join ist im neuen Modell nicht vorgesehen.",[532,546,547,550],{},[535,548,549],{},"Kein In-Place-Wechsel:"," Microsoft bietet keinen unterstützten Weg, ein hybrid gejointes Gerät ohne Reset auf Entra Join umzustellen. Wer heute neue Geräte hybrid ausrollt, provisioniert sie später neu oder bleibt einen weiteren Hardwarezyklus von On-Premises-Technik abhängig.",[532,552,553,556],{},[535,554,555],{},"Kein Abschaltdatum:"," Klassisches Autopilot und Device Preparation existieren auf absehbare Zeit nebeneinander.",[532,558,559,562],{},[535,560,561],{},"Unsere Empfehlung:"," Entscheidend ist der Join-Typ, nicht das Werkzeug. Für neue Geräte setzen wir weiter auf klassisches Autopilot mit Entra Join, weil Hersteller und Händler die Geräte dann schon vor der Auslieferung registrieren können. Diesen Zero-Touch-Weg bietet Device Preparation noch nicht.",[564,565,567],"div",{"style":566},"overflow-x: auto; margin: 1.5rem 0",[568,569,530,571,530,589],"table",{"style":570},"width:100%; border-collapse: collapse; font-size: 0.85rem; background: #fff",[572,573,574,575,530],"thead",{},"\n    ",[576,577,578,579,578,583,578,586,574],"tr",{},"\n      ",[580,581],"th",{"style":582},"border: 1px solid #d0d7de; padding: 0.5rem 0.75rem; background: #dde1e4; text-align: left; font-weight: 600",[580,584,585],{"style":582},"Windows Autopilot",[580,587,588],{"style":582},"Autopilot Device Preparation",[590,591,574,592,574,606,574,617,574,628,574,639,574,650,530],"tbody",{},[576,593,578,594,578,599,578,603,574],{},[595,596,598],"td",{"style":597},"border: 1px solid #d0d7de; padding: 0.5rem 0.75rem; background: #f6f8fa; font-weight: 600","Join-Typ",[595,600,602],{"style":601},"border: 1px solid #d0d7de; padding: 0.5rem 0.75rem; background: #fff","Entra Join, Hybrid Join",[595,604,605],{"style":601},"Entra Join",[576,607,578,608,578,611,578,614,574],{},[595,609,610],{"style":597},"Modi",[595,612,613],{"style":601},"User-driven, Pre-Provisioning, Self-Deploying, Bestandsgeräte",[595,615,616],{"style":601},"User-driven, Automatic (Windows 365)",[576,618,578,619,578,622,578,625,574],{},[595,620,621],{"style":597},"Tenant-Bindung",[595,623,624],{"style":601},"verpflichtend über den Hardware-Hash, auch durch OEMs und Partner",[595,626,627],{"style":601},"optional über Device Association, manuell in Intune",[576,629,578,630,578,633,578,636,574],{},[595,631,632],{"style":597},"Konfiguration während des Deployments",[595,634,635],{"style":601},"geräte- und benutzerbezogen über die Enrollment Status Page (ESP)",[595,637,638],{"style":601},"nur gerätebezogen, mit einer begrenzten Zahl an Apps und Skripten",[576,640,578,641,578,644,578,647,574],{},[595,642,643],{"style":597},"Reporting",[595,645,646],{"style":601},"verzögert",[595,648,649],{"style":601},"nahezu in Echtzeit",[576,651,578,652,578,655,578,658,574],{},[595,653,654],{"style":597},"Weitere Funktionen",[595,656,657],{"style":601},"Autopilot Reset, DFCI, Teams Rooms, HoloLens, Self-Deploying, Pre-Provisioning",[595,659,660],{"style":601},"Win32- und LOB-Apps im selben Deployment-Ablauf",[515,662,663,664],{},"Quelle: ",[665,666,670],"a",{"href":667,"target":327,"rel":668},"https://learn.microsoft.com/en-us/autopilot/device-preparation/compare",[669],"noopener","Microsoft Learn, Compare Windows Autopilot device preparation and Windows Autopilot",[519,672,674],{"id":673},"was-microsoft-angekündigt-hat","Was Microsoft angekündigt hat",[515,676,525],{},[515,678,679,680,685],{},"Mitte September hat Microsoft im ",[665,681,684],{"href":682,"target":327,"rel":683},"https://techcommunity.microsoft.com/blog/intunecustomersuccess/moving-from-windows-autopilot-to-windows-autopilot-device-preparation/4557269",[669],"Intune Customer Success Blog"," beschrieben, wie der Umstieg von klassischem Windows Autopilot auf Device Preparation aussehen soll. Die Botschaft ist eindeutig: Für user-driven Deployments ist Device Preparation jetzt der empfohlene Weg.",[515,687,688],{},"Die Technik selbst ist nicht neu: Device Preparation gibt es seit 2024 als neu aufgebaute Variante von Autopilot, die einfacher und zuverlässiger arbeitet und Deployments nahezu in Echtzeit zeigt. Bis vor Kurzem hatte sie allerdings eine Lücke, denn vor der ersten Anmeldung wusste das Gerät nicht, zu welchem Tenant es gehört. Diese Lücke schließt seit Ende August die Device Association. Damit ordnet ihr ein Windows-Gerät schon vor dem Deployment eurem Tenant zu, und es wird automatisch als Firmengerät erkannt, bekommt einen festgelegten Namen und eine angepasste Out-of-Box-Experience, noch bevor der User die Einrichtung abschließt.",[515,690,691],{},"Umsteigen müsst ihr nicht sofort. Klassisches Autopilot und Device Preparation laufen im selben Tenant nebeneinander, jedes Gerät nutzt aber nur eines der beiden Modelle. Ist ein Gerät sowohl für Autopilot registriert als auch per Device Association zugeordnet, hat die Association Vorrang.",[519,693,695],{"id":694},"eine-richtlinie-statt-vier-bausteinen","Eine Richtlinie statt vier Bausteinen",[515,697,525],{},[515,699,700],{},"Klassisches Autopilot setzt sich aus Deployment-Profilen, Enrollment Status Page, Group Tags und dynamischen Gruppen zusammen. Device Preparation kommt mit einer einzigen Provisioning-Richtlinie aus, die festlegt, was während der Out-of-Box-Experience (OOBE) passiert, von Geräteeinstellungen über Apps und Skripte bis zum Gerätenamen. In der Praxis heißt das:",[527,702,530,703,530,709,530,715],{"style":529},[532,704,705,708],{},[535,706,707],{},"Schnellere Zuweisungen:"," Beim Enrollment landen Geräte über Enrollment Time Grouping sofort in einer statischen Entra-Gruppe. Apps und Skripte, die dieser Gruppe zugewiesen sind, stehen während des Provisionings sofort bereit, ohne auf die Auswertung dynamischer Gruppen zu warten.",[532,710,711,714],{},[535,712,713],{},"Klare Trennung der Phasen:"," Während des Provisionings kommen nur gerätebezogene Einstellungen und die wirklich nötigen Apps aufs Gerät. Alles Benutzerbezogene folgt, sobald der Desktop da ist, und die Ersteinrichtung wird dadurch kürzer und weniger fehleranfällig.",[532,716,717,720],{},[535,718,719],{},"Besseres Reporting:"," Jedes Deployment ist nahezu in Echtzeit sichtbar, mit deutlich mehr Details als im klassischen Autopilot, und die Fehlersuche wird spürbar einfacher.",[519,722,724],{"id":723},"device-preparation-kennt-nur-entra-join","Device Preparation kennt nur Entra Join",[515,726,525],{},[515,728,729,730,735],{},"Device Preparation unterstützt nur Entra Join. Hybrid Join ist in der neuen Architektur nicht vorgesehen, und nichts in Microsofts Ankündigungen deutet darauf hin, dass sich das ändert. Klassisches Autopilot kann Hybrid Join zwar weiterhin, Microsofts Entwicklung zielt aber erkennbar auf Deployments ohne Domain Controller. Auf ",[665,731,734],{"href":732,"target":327,"rel":733},"https://learn.microsoft.com/en-gb/autopilot/windows-autopilot-hybrid",[669],"Microsoft Learn"," steht das inzwischen auch ausdrücklich:",[737,738,739],"blockquote",{},[515,740,741],{},"„Microsoft recommends deploying new devices as cloud-native using Microsoft Entra join. Deploying new devices as Microsoft Entra hybrid join devices isn't recommended …“",[515,743,744],{},"Wer Hybrid Join mit Autopilot betrieben hat, kennt die Hürden: Während des Provisionings muss das Gerät einen Domain Controller erreichen, der Intune Connector for Active Directory muss verfügbar sein und funktionieren, und Gruppenrichtlinien laufen parallel zu Intune. Genau an diesen Abhängigkeiten scheitern oder stocken die meisten Deployments. Für uns war Hybrid Join deshalb immer eine Übergangslösung und nie das Ziel.",[515,746,747],{},"Ein Entra-gejointes Gerät braucht bei der Einrichtung nichts weiter als eine Internetverbindung. Konfiguration, Apps, Updates und Compliance-Richtlinien kommen vollständig über Intune, und den Zugriff auf Unternehmensressourcen regelt Conditional Access. Das passt zu einer Arbeitswelt, die sich zunehmend außerhalb des Firmennetzes abspielt, im Homeoffice, unterwegs oder irgendwo dazwischen.",[515,749,750,751,755],{},"Bei uns heißt dieses Prinzip seit Jahren „Starbucks Deployment“, und schon 2019 wurden wir dafür mit dem ",[665,752,754],{"href":753},"/en/posts/2019-06-06-gk-microsoft-partner-of-the-year","Microsoft Global Modern Desktop Partner of the Year Award"," ausgezeichnet.",[519,757,759],{"id":758},"von-hybrid-zu-entra-join-führt-der-weg-über-einen-reset","Von Hybrid zu Entra Join führt der Weg über einen Reset",[515,761,525],{},[515,763,764],{},"Für die Planung ist ein Punkt entscheidend: Ein hybrid gejointes Gerät lässt sich auf unterstütztem Weg nur mit einem Reset in ein Entra-gejointes umwandeln. Jedes Gerät, das ihr heute hybrid ausrollt, müsst ihr für den Wechsel zu Entra Join also irgendwann neu provisionieren.",[515,766,767],{},"Das klingt zunächst nach viel Aufwand, lässt sich in der Praxis aber geordnet planen. Am häufigsten läuft der Wechsel mit dem normalen Hardwarezyklus: Neue Geräte kommen direkt mit Entra Join, die hybrid gejointen scheiden nach und nach aus. Wer schneller in die Cloud will, setzt zusätzlich Bestandsgeräte in Wellen mit Entra Join neu auf.",[519,769,771],{"id":770},"warum-wir-trotzdem-klassisches-autopilot-empfehlen","Warum wir trotzdem klassisches Autopilot empfehlen",[515,773,525],{},[515,775,776],{},"Zum Umstieg auf Device Preparation raten wir trotzdem noch nicht. Für neue Geräte empfehlen wir weiterhin klassisches Autopilot, dann aber konsequent mit Entra Join.",[515,778,779],{},"Der wichtigste Grund ist die Anbindung an Hersteller und Händler. Mit klassischem Autopilot registriert der OEM oder Reseller das Gerät schon vor dem Versand direkt in eurem Tenant. Es geht direkt an die Mitarbeitenden, zeigt beim ersten Start euer Branding und richtet sich selbst ein, ohne dass die IT eingreifen muss.",[515,781,782],{},"Für die Device Association müsst ihr die Geräteinformationen derzeit dagegen selbst lokal auslesen und in Intune hochladen. Für Staging im Lager, Rollouts mit Technikern oder interne Deployments funktioniert das gut, für den Direktversand an die User aber nicht. Dass OEMs und Partner Geräte künftig vorab zuordnen können, hat Microsoft angekündigt, allerdings ohne Zeitplan.",[515,784,785],{},"Dazu kommen Szenarien, die Device Preparation noch nicht vollständig abdeckt:",[527,787,530,788,530,794,530,800,530,806],{"style":529},[532,789,790,793],{},[535,791,792],{},"Pre-Provisioning:"," Ein Partner installiert Apps und wendet Richtlinien schon vor der Auslieferung an, sodass Mitarbeitende mit einem nahezu fertig eingerichteten Gerät starten.",[532,795,796,799],{},[535,797,798],{},"Self-Deploying Mode:"," Kiosk- und Shared Devices, die ohne Benutzeranmeldung ausgerollt werden.",[532,801,802,805],{},[535,803,804],{},"Erweiterte Provisioning-Optionen:"," Mehr Apps während der Einrichtung und die Möglichkeit, den Desktop zu sperren, bis die nötige benutzerbezogene Konfiguration abgeschlossen ist.",[532,807,808,811],{},[535,809,810],{},"Spezielle Geräteszenarien:"," Teams Rooms und Firmware-Management über DFCI.",[515,813,814],{},"Sobald Hersteller und Händler Geräte für Device Preparation vorab zuordnen können, prüfen wir unsere Empfehlung neu. An der Strategie dahinter ändert das nichts: Wer heute ein neues Deployment plant, plant mit Entra Join. Ein späterer Wechsel von klassischem Autopilot zu Device Preparation betrifft dann nur noch den Provisioning-Weg für neue Geräte und nicht das Management-Modell, die Identitätsplattform oder die Gerätearchitektur.",[519,816,818],{"id":817},"ohne-domain-join-funktionieren-unsere-geräte-nicht","„Ohne Domain Join funktionieren unsere Geräte nicht“",[515,820,525],{},[515,822,823],{},"Diesen Satz hören wir ständig. Die Technik hinter Entra Join ist ausgereift und bewährt, und wenn es hakt, liegt es selten an Entra Join selbst, sondern an Abhängigkeiten, Prozessen und Annahmen, die sich über Jahre rund um das Active Directory angesammelt haben.",[527,825,530,826,530,835,530,841,530,857],{"style":529},[532,827,828,831,832,834],{},[535,829,830],{},"Gruppenrichtlinien:"," Viele Unternehmen haben weit mehr GPOs, als sie brauchen, und nach unserer Erfahrung wirkt ein erheblicher Teil davon gar nicht mehr. Mit unserem Blueprint starten Entra-Clients in wenigen Minuten auf einer erprobten und flexiblen Baseline, die wir in ",[665,833,35],{"href":36}," vollständig als Infrastructure as Code betreiben und laufend aktuell halten.",[532,836,837,840],{},[535,838,839],{},"Zugriff auf On-Premises-Ressourcen:"," Fileserver, Drucker und interne Webanwendungen bleiben auch für Entra-gejointe Geräte erreichbar. Solange das Gerät einen Domain Controller erreicht, holt es sich Kerberos-Tickets und meldet sich per Single Sign-on an On-Premises-Ressourcen an, mit Windows Hello for Business über Cloud Kerberos Trust. Testen solltet ihr diese Szenarien trotzdem immer mit echten Usern und echten Fachanwendungen.",[532,842,843,846,847,851,852,856],{},[535,844,845],{},"Zertifikate und Netzwerkzugang:"," Netzwerk- und VPN-Authentifizierung hängen oft an Computerzertifikaten aus einer On-Premises-CA, die über einen Network Policy Server (NPS) geprüft werden. Bei Entra-gejointen Geräten verteilt Intune die Zertifikate, etwa über Microsoft Cloud PKI oder ",[665,848,338],{"href":849,"target":327,"rel":850},"https://www.scepman.com/",[669],", und die Netzwerkauthentifizierung übernimmt eine cloudfähige RADIUS-Lösung wie ",[665,853,373],{"href":854,"target":327,"rel":855},"https://www.radius-as-a-service.com/",[669],".",[532,858,859,862],{},[535,860,861],{},"Verlässliche App-Deployments:"," Wenn Autopilot-Deployments scheitern, liegt das meist nicht am Join-Typ, sondern an schlecht gebauten oder nicht gepflegten Softwarepaketen. Deshalb setzen wir RealmJoin ein, unseren Begleiter zu Intune mit mehr als 2.500 fertig paketierten Anwendungen. Unabhängig vom Werkzeug gilt: Bei der Ersteinrichtung gehören nur die Apps aufs Gerät, die User am ersten Tag wirklich brauchen. Alles andere kommt nach, sobald das Gerät produktiv läuft, oder liegt zum Selbstinstallieren im Intune Company Portal oder im RealmJoin App Catalog.",[519,864,866],{"id":865},"hybrid-join-wird-zum-auslaufmodell","Hybrid Join wird zum Auslaufmodell",[515,868,525],{},[515,870,871],{},"Device Preparation kann noch nicht alles, was klassisches Autopilot kann. Die Richtung ist trotzdem klar: Microsoft investiert in Entra Join, und Hybrid Join wird mehr und mehr zum Legacy-Modell.",[515,873,874],{},"Bestehende hybrid gejointe Geräte bis zum Ende ihres Lebenszyklus weiterzubetreiben, kann sinnvoll sein, auch wenn ihr dann ein modernes und ein klassisches Management-Modell parallel pflegt. Neue Geräte heute noch hybrid auszurollen, bindet euch dagegen für einen weiteren Hardwarezyklus an On-Premises-Abhängigkeiten, während Microsoft Provisioning und Management für Entra Join weiterentwickelt.",[515,876,877],{},"Wenn ihr den Wechsel von Hybrid Join zu Entra Join plant, mit euren Autopilot-Deployments kämpft oder eure Windows-Geräte komplett über Intune verwalten wollt, helfen wir gern.",[519,879,881],{"id":880},"quellen","Quellen",[515,883,525],{},[527,885,530,886,530,893,530,901,530,908,530,915],{"style":529},[532,887,888,892],{},[665,889,891],{"href":682,"target":327,"rel":890},[669],"Moving from Windows Autopilot to Windows Autopilot device preparation"," (Microsoft Tech Community, September 2026)",[532,894,895,900],{},[665,896,899],{"href":897,"target":327,"rel":898},"https://techcommunity.microsoft.com/blog/intunecustomersuccess/introducing-device-association-for-windows-autopilot-device-preparation/4550603",[669],"Introducing device association for Windows Autopilot device preparation"," (Microsoft Tech Community, August 2026)",[532,902,903,907],{},[665,904,906],{"href":667,"target":327,"rel":905},[669],"Compare Windows Autopilot device preparation and Windows Autopilot"," (Microsoft Learn)",[532,909,910,907],{},[665,911,914],{"href":912,"target":327,"rel":913},"https://learn.microsoft.com/en-us/autopilot/device-preparation/device-association/faq",[669],"Windows Autopilot device association FAQ",[532,916,917,907],{},[665,918,921],{"href":919,"target":327,"rel":920},"https://learn.microsoft.com/en-us/intune/solutions/cloud-native-endpoints/azure-ad-joined-hybrid-azure-ad-joined",[669],"Microsoft Entra joined vs. hybrid joined",{"title":923,"searchDepth":924,"depth":924,"links":925},"",2,[926,927,928,929,930,931,932,933,934],{"id":521,"depth":924,"text":522},{"id":673,"depth":924,"text":674},{"id":694,"depth":924,"text":695},{"id":723,"depth":924,"text":724},{"id":758,"depth":924,"text":759},{"id":770,"depth":924,"text":771},{"id":817,"depth":924,"text":818},{"id":865,"depth":924,"text":866},{"id":880,"depth":924,"text":881},"md","post",{"lang":4,"seoTitle":938,"titleClass":939,"date":940,"categories":941,"blogtitlepic":942,"socialimg":943,"customExcerpt":944,"keywords":945,"contactInContent":946,"asideNav":1009,"maxContent":322,"published":322,"scripts":1033},"Autopilot Device Preparation wird Standard: was das für Hybrid Join bedeutet","h2-font-size","2026-10-29",[22],"head-hybrid-join.jpg","https://res.cloudinary.com/c4a8/image/upload/blog/heads/head-hybrid-join.jpg","Seit September empfiehlt Microsoft Autopilot Device Preparation als Standard für user-driven Windows-Deployments, und das neue Verfahren ist tatsächlich einfacher und stabiler, kennt allerdings nur noch Entra Join. Für alle, die neue Geräte heute noch hybrid joinen, ist das die eigentliche Nachricht, denn den Wechsel zu Entra Join gibt es später nur mit einem Reset. Wir zeigen, was sich gegenüber klassischem Autopilot ändert und warum wir neue Geräte trotzdem vorerst klassisch ausrollen, dann aber konsequent mit Entra Join.","Autopilot Device Preparation, Windows Autopilot, Device Association, Entra Join, Hybrid Join, Hybrid Join Migration, Intune Provisioning, Enrollment Time Grouping, Enrollment Status Page, Cloud Kerberos Trust, Windows Hello for Business, Cloud PKI, SCEPman, RADIUSaaS, RealmJoin, Managed Intune",{"quote":322,"infos":947},{"bgColor":948,"color":949,"boxBgColor":488,"boxColor":949,"headline":950,"subline":951,"level":519,"textStyling":952,"flush":953,"person":954,"form":969},"var(--color-gk-dark-blue)","var(--color-gk-white)","Jetzt Kontakt aufnehmen","Ihr plant den Wechsel von Hybrid Join zu Entra Join, eure Autopilot-Deployments brechen öfter ab, als euch lieb ist, oder ihr wollt eure Windows-Geräte komplett über Intune verwalten? Sprecht uns an, wir schauen gemeinsam auf eure Umgebung.","text-light","justify-content-end",{"image":955,"cloudinary":322,"alt":956,"name":956,"quotee":956,"quoteeTitle":957,"quote":958,"detailsHeader":959,"details":960},"/people/people-alexander-schlindwein.png","Alexander Schlindwein","Workplace Lead","Hybrid Join war für uns immer eine Übergangslösung, und mit Device Preparation zieht Microsoft jetzt dieselbe Linie. Wer heute neue Geräte ausrollt, legt damit seine Geräteverwaltung für den ganzen nächsten Hardwarezyklus fest. Deshalb raten wir zu Entra Join, und zwar ab dem nächsten Gerät, nicht erst ab dem nächsten Projekt.","Wir freuen uns darauf,\u003Cbr />von euch zu hören!",[961,965],{"text":489,"href":962,"details":963,"icon":964},"tel:+49 69 4005520","Jetzt anrufen","site/phone",{"text":966,"href":967,"icon":968},"sales@glueckkanja.com","mailto:sales@glueckkanja.com","site/mail",{"ctaText":970,"cta":971,"method":936,"action":973,"fields":974},"Absenden",{"skin":972},"primary on-surface","/send",[975,979,984,987,991,996,1001,1004,1007],{"type":976,"id":977,"value":978},"hidden","_next","successful",{"label":980,"type":981,"id":982,"required":322,"requiredMsg":983},"Name*","text","name","Bitte Namen eingeben.",{"label":985,"type":981,"id":400,"required":322,"requiredMsg":986},"Unternehmen*","Bitte Unternehmen eingeben.",{"label":988,"type":989,"id":989,"required":322,"requiredMsg":990},"Email-Adresse*","email","Bitte E-Mail-Adresse eingeben.",{"label":992,"type":993,"id":994,"required":481,"requiredMsg":995},"Deine Nachricht an uns","textarea","message","Bitte gib eine Nachricht ein.",{"label":997,"type":998,"id":999,"required":322,"requiredMsg":1000},"Eure Daten werden zur Bearbeitung und Beantwortung eurer Anfrage bei uns gespeichert. Weitere Informationen zum Datenschutz findet ihr in unserer \u003Ca href=\"/de/datenschutz\">Datenschutzerklärung\u003C/a>.","checkbox","dataprotection","Bitte bestätigen",{"type":976,"id":1002,"value":1003},"_subject","Form: Autopilot Device Preparation | DE",{"type":976,"id":1005,"value":1006},"inbox_key","default",{"type":976,"id":1008},"_gotcha",{"menuItems":1010},[1011,1013,1015,1017,1019,1022,1025,1028,1031],{"href":1012,"text":522},"#das-wichtigste-in-kürze",{"href":1014,"text":674},"#was-microsoft-angekündigt-hat",{"href":1016,"text":695},"#eine-richtlinie-statt-vier-bausteinen",{"href":1018,"text":724},"#device-preparation-kennt-nur-entra-join",{"href":1020,"text":1021},"#von-hybrid-zu-entra-join-führt-der-weg-über-einen-reset","Von Hybrid zu Entra Join",{"href":1023,"text":1024},"#warum-wir-trotzdem-klassisches-autopilot-empfehlen","Warum wir klassisches Autopilot empfehlen",{"href":1026,"text":1027},"#ohne-domain-join-funktionieren-unsere-geräte-nicht","Ohne Domain Join geht nichts?",{"href":1029,"text":1030},"#hybrid-join-wird-zum-auslaufmodell","Fazit",{"href":1032,"text":881},"#quellen",{"form":322},"/posts/2026-10-29-autopilot-device-preparation",{"title":508,"description":517},"posts/2026-10-29-autopilot-device-preparation",[22,1038,585,1039],"Intune","Microsoft Entra ID","d6vtWiT4CEfgEEh2uC_MFgznUPrkOLbmv1Ghz1iMg0A",{"id":1042,"extension":1043,"meta":1044,"stem":8,"__hash__":1399},"authors_data/authors.json","json",{"path":1045,"Fritz Zurhorst":1046,"Alexander Schlindwein":1052,"Sophie Luna":1057,"Nadine Klein":1065,"Karsten Kleinschmidt":1071,"Julian Wendt":1079,"Holger Bunkradt":1084,"Ralf Mania":1090,"Oliver Kieselbach":1096,"Steffen Schwerdtfeger":1102,"Gunnar Winter":1109,"Jan Petersen":1114,"Thorsten Kunzi":1119,"Moritz Pohl":1123,"Thorben Pöschus":1128,"Christoph Hannebauer":1134,"Marco Scheel":1138,"Christopher Brumm":1143,"Florian Klante":1150,"Niklas Bachmann":1155,"Nils Krautkrämer":1160,"Patrick Treptau":1166,"Peter Beckendorf":1171,"Patrick Sobau":1176,"Jörg Wunderlich":1181,"Michael Breither":1185,"Christian Kanja":1190,"Zeba Hoffmann":1196,"Jochen Fröhlich":1201,"Jan Geisbauer":1205,"Gerrit Reinke":1216,"Christian Kordel":1222,"Stephan Wälde":1226,"Carolin Kanja":1231,"Adrian Ritter":1237,"Marvin Bangert":1242,"Thorsten Pickhan":1248,"Christian Lorenz":1254,"Denis Böhm":1259,"Fabian Bader":1264,"Juan Jose Fernandez Perez":1270,"Mahschid Sayyar":1275,"Benjamin Dassow":1280,"Markus Walschburger":1285,"Jonathan Haist":1290,"Daniel Rohregger":1295,"Thomas Naunheim":1300,"Florian Stöckl":1305,"Pascal Asch":1310,"Markus Kättner":1315,"Anna Ulbricht":1322,"Annette Brauns":1329,"Andreas Hötzinger":1335,"body":1341,"title":1398},"/authors",{"display_name":1047,"avatar":1048,"permalink":1049,"linkedin":1050,"imageOffsetTop":1051},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":956,"avatar":1053,"permalink":1054,"twitter":1055,"linkedin":1056},"people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1058,"avatar":1059,"permalink":1060,"twitter":1061,"linkedin":1062,"imageOffsetLeft":1063,"imageOffsetTop":1064},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1066,"avatar":1067,"permalink":1068,"twitter":1069,"linkedin":1070,"imageOffsetTop":1051},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1072,"avatar":1073,"permalink":1074,"twitter":1075,"linkedin":1076,"imageOffsetTop":1077,"imageOffsetLeft":1078},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1080,"avatar":1081,"permalink":1082,"linkedin":1083},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"twitter":1089},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1091,"avatar":1092,"permalink":1093,"linkedin":1094,"twitter":1095},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1097,"avatar":1098,"permalink":1099,"linkedin":1100,"twitter":1101},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":510,"avatar":1103,"permalink":1104,"linkedin":1105,"twitter":1106,"imageOffsetTop":1107,"imageOffsetLeft":1108},"people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1110,"avatar":1111,"permalink":1112,"twitter":1061,"linkedin":1113},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1115,"avatar":1116,"permalink":1117,"twitter":1061,"linkedin":1118},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":1120,"avatar":1121,"permalink":1122,"twitter":1061,"linkedin":1113,"imageOffsetTop":1051},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1124,"avatar":1125,"permalink":1126,"twitter":1061,"linkedin":1127},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1129,"avatar":1130,"permalink":1131,"twitter":1132,"linkedin":1133},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1135,"avatar":1136,"permalink":1137,"twitter":1061,"linkedin":1113,"imageOffsetTop":1051},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1139,"avatar":1140,"permalink":1141,"twitter":1142,"linkedin":1142},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1144,"avatar":1145,"permalink":1146,"twitter":1147,"linkedin":1148,"imageOffsetTop":1149},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1151,"avatar":1152,"permalink":1153,"linkedin":1154,"twitter":1061},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1156,"avatar":1157,"permalink":1158,"linkedin":1159,"twitter":1061},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1161,"avatar":1162,"permalink":1163,"twitter":1164,"linkedin":1165},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1167,"avatar":1168,"permalink":1169,"linkedin":1170,"twitter":1061},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1172,"avatar":1173,"permalink":1174,"linkedin":1175,"twitter":1061,"imageOffsetTop":1051},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1177,"avatar":1178,"permalink":1179,"linkedin":1180,"twitter":1061},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1182,"avatar":1183,"permalink":1184,"twitter":1061},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1186,"avatar":1187,"permalink":1188,"twitter":1061,"linkedin":1189},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1191,"avatar":1192,"permalink":1193,"twitter":1194,"linkedin":1195},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1197,"avatar":1198,"permalink":1199,"linkedin":1200,"twitter":1061},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1202,"avatar":1203,"permalink":1204,"twitter":1061,"linkedin":1113},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1206,"avatar":1207,"permalink":1208,"twitter":1209,"linkedin":1209,"imageOffsetTop":1051,"socials":1210},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1211,1213],{"text":469,"href":1212},"https://emptydc.com",{"text":1214,"href":1215},"Podcast","https://hairlessinthecloud.com",{"display_name":1217,"avatar":1218,"permalink":1219,"twitter":1220,"linkedin":1221},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1223,"avatar":1224,"permalink":1225,"twitter":1061,"linkedin":1113},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1227,"avatar":1228,"permalink":1229,"twitter":1230,"linkedin":1113},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1232,"avatar":1233,"permalink":1234,"twitter":1235,"linkedin":1236},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1238,"avatar":1239,"permalink":1240,"twitter":1241,"linkedin":1241},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1243,"avatar":1244,"permalink":1245,"twitter":1246,"linkedin":1247},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1249,"avatar":1250,"permalink":1251,"twitter":1252,"linkedin":1253},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1255,"avatar":1256,"permalink":1257,"linkedin":1258,"twitter":1061},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1260,"avatar":1261,"permalink":1262,"linkedin":1263,"twitter":1061},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1265,"avatar":1266,"permalink":1267,"linkedin":1268,"twitter":1269},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1271,"avatar":1272,"permalink":1273,"linkedin":1274},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1276,"avatar":1277,"permalink":1278,"linkedin":1279},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1281,"avatar":1282,"permalink":1283,"linkedin":1284},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1286,"avatar":1287,"permalink":1288,"linkedin":1289},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1291,"avatar":1292,"permalink":1293,"linkedin":1294,"imageOffsetTop":1051},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1296,"avatar":1297,"permalink":1298,"linkedin":1299,"imageOffsetTop":1051},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1301,"avatar":1302,"permalink":1303,"linkedin":1304,"imageOffsetTop":1149},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1306,"avatar":1307,"permalink":1308,"linkedin":1309,"imageOffsetTop":1149},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1311,"avatar":1312,"permalink":1313,"linkedin":1314,"imageOffsetTop":1149},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1316,"avatar":1317,"permalink":1318,"linkedin":1319,"imageOffsetTop":1320,"imageOffsetLeft":1321},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1323,"avatar":1324,"permalink":1325,"linkedin":1326,"imageOffsetTop":1327,"imageOffsetLeft":1328},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1330,"avatar":1331,"permalink":1332,"linkedin":1333,"imageOffsetTop":1334,"imageOffsetLeft":1077},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"display_name":1336,"avatar":1337,"permalink":1338,"linkedin":1339,"imageOffsetTop":1340},"Andreas Hötzinger","people/at-andreas-hoetzinger.png","/authors/andreas-hoetzinger","andreashoetzinger","75%",{"Fritz Zurhorst":1342,"Alexander Schlindwein":1343,"Sophie Luna":1344,"Nadine Klein":1345,"Karsten Kleinschmidt":1346,"Julian Wendt":1347,"Holger Bunkradt":1348,"Ralf Mania":1349,"Oliver Kieselbach":1350,"Steffen Schwerdtfeger":1351,"Gunnar Winter":1352,"Jan Petersen":1353,"Thorsten Kunzi":1354,"Moritz Pohl":1355,"Thorben Pöschus":1356,"Christoph Hannebauer":1357,"Marco Scheel":1358,"Christopher Brumm":1359,"Florian Klante":1360,"Niklas Bachmann":1361,"Nils Krautkrämer":1362,"Patrick Treptau":1363,"Peter Beckendorf":1364,"Patrick Sobau":1365,"Jörg Wunderlich":1366,"Michael Breither":1367,"Christian Kanja":1368,"Zeba Hoffmann":1369,"Jochen Fröhlich":1370,"Jan Geisbauer":1371,"Gerrit Reinke":1375,"Christian Kordel":1376,"Stephan Wälde":1377,"Carolin Kanja":1378,"Adrian Ritter":1379,"Marvin Bangert":1380,"Thorsten Pickhan":1381,"Christian Lorenz":1382,"Denis Böhm":1383,"Fabian Bader":1384,"Juan Jose Fernandez Perez":1385,"Mahschid Sayyar":1386,"Benjamin Dassow":1387,"Markus Walschburger":1388,"Jonathan Haist":1389,"Daniel Rohregger":1390,"Thomas Naunheim":1391,"Florian Stöckl":1392,"Pascal Asch":1393,"Markus Kättner":1394,"Anna Ulbricht":1395,"Annette Brauns":1396,"Andreas Hötzinger":1397},{"display_name":1047,"avatar":1048,"permalink":1049,"linkedin":1050,"imageOffsetTop":1051},{"display_name":956,"avatar":1053,"permalink":1054,"twitter":1055,"linkedin":1056},{"display_name":1058,"avatar":1059,"permalink":1060,"twitter":1061,"linkedin":1062,"imageOffsetLeft":1063,"imageOffsetTop":1064},{"display_name":1066,"avatar":1067,"permalink":1068,"twitter":1069,"linkedin":1070,"imageOffsetTop":1051},{"display_name":1072,"avatar":1073,"permalink":1074,"twitter":1075,"linkedin":1076,"imageOffsetTop":1077,"imageOffsetLeft":1078},{"display_name":1080,"avatar":1081,"permalink":1082,"linkedin":1083},{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"twitter":1089},{"display_name":1091,"avatar":1092,"permalink":1093,"linkedin":1094,"twitter":1095},{"display_name":1097,"avatar":1098,"permalink":1099,"linkedin":1100,"twitter":1101},{"display_name":510,"avatar":1103,"permalink":1104,"linkedin":1105,"twitter":1106,"imageOffsetTop":1107,"imageOffsetLeft":1108},{"display_name":1110,"avatar":1111,"permalink":1112,"twitter":1061,"linkedin":1113},{"display_name":1115,"avatar":1116,"permalink":1117,"twitter":1061,"linkedin":1118},{"display_name":1120,"avatar":1121,"permalink":1122,"twitter":1061,"linkedin":1113,"imageOffsetTop":1051},{"display_name":1124,"avatar":1125,"permalink":1126,"twitter":1061,"linkedin":1127},{"display_name":1129,"avatar":1130,"permalink":1131,"twitter":1132,"linkedin":1133},{"display_name":1135,"avatar":1136,"permalink":1137,"twitter":1061,"linkedin":1113,"imageOffsetTop":1051},{"display_name":1139,"avatar":1140,"permalink":1141,"twitter":1142,"linkedin":1142},{"display_name":1144,"avatar":1145,"permalink":1146,"twitter":1147,"linkedin":1148,"imageOffsetTop":1149},{"display_name":1151,"avatar":1152,"permalink":1153,"linkedin":1154,"twitter":1061},{"display_name":1156,"avatar":1157,"permalink":1158,"linkedin":1159,"twitter":1061},{"display_name":1161,"avatar":1162,"permalink":1163,"twitter":1164,"linkedin":1165},{"display_name":1167,"avatar":1168,"permalink":1169,"linkedin":1170,"twitter":1061},{"display_name":1172,"avatar":1173,"permalink":1174,"linkedin":1175,"twitter":1061,"imageOffsetTop":1051},{"display_name":1177,"avatar":1178,"permalink":1179,"linkedin":1180,"twitter":1061},{"display_name":1182,"avatar":1183,"permalink":1184,"twitter":1061},{"display_name":1186,"avatar":1187,"permalink":1188,"twitter":1061,"linkedin":1189},{"display_name":1191,"avatar":1192,"permalink":1193,"twitter":1194,"linkedin":1195},{"display_name":1197,"avatar":1198,"permalink":1199,"linkedin":1200,"twitter":1061},{"display_name":1202,"avatar":1203,"permalink":1204,"twitter":1061,"linkedin":1113},{"display_name":1206,"avatar":1207,"permalink":1208,"twitter":1209,"linkedin":1209,"imageOffsetTop":1051,"socials":1372},[1373,1374],{"text":469,"href":1212},{"text":1214,"href":1215},{"display_name":1217,"avatar":1218,"permalink":1219,"twitter":1220,"linkedin":1221},{"display_name":1223,"avatar":1224,"permalink":1225,"twitter":1061,"linkedin":1113},{"display_name":1227,"avatar":1228,"permalink":1229,"twitter":1230,"linkedin":1113},{"display_name":1232,"avatar":1233,"permalink":1234,"twitter":1235,"linkedin":1236},{"display_name":1238,"avatar":1239,"permalink":1240,"twitter":1241,"linkedin":1241},{"display_name":1243,"avatar":1244,"permalink":1245,"twitter":1246,"linkedin":1247},{"display_name":1249,"avatar":1250,"permalink":1251,"twitter":1252,"linkedin":1253},{"display_name":1255,"avatar":1256,"permalink":1257,"linkedin":1258,"twitter":1061},{"display_name":1260,"avatar":1261,"permalink":1262,"linkedin":1263,"twitter":1061},{"display_name":1265,"avatar":1266,"permalink":1267,"linkedin":1268,"twitter":1269},{"display_name":1271,"avatar":1272,"permalink":1273,"linkedin":1274},{"display_name":1276,"avatar":1277,"permalink":1278,"linkedin":1279},{"display_name":1281,"avatar":1282,"permalink":1283,"linkedin":1284},{"display_name":1286,"avatar":1287,"permalink":1288,"linkedin":1289},{"display_name":1291,"avatar":1292,"permalink":1293,"linkedin":1294,"imageOffsetTop":1051},{"display_name":1296,"avatar":1297,"permalink":1298,"linkedin":1299,"imageOffsetTop":1051},{"display_name":1301,"avatar":1302,"permalink":1303,"linkedin":1304,"imageOffsetTop":1149},{"display_name":1306,"avatar":1307,"permalink":1308,"linkedin":1309,"imageOffsetTop":1149},{"display_name":1311,"avatar":1312,"permalink":1313,"linkedin":1314,"imageOffsetTop":1149},{"display_name":1316,"avatar":1317,"permalink":1318,"linkedin":1319,"imageOffsetTop":1320,"imageOffsetLeft":1321},{"display_name":1323,"avatar":1324,"permalink":1325,"linkedin":1326,"imageOffsetTop":1327,"imageOffsetLeft":1328},{"display_name":1330,"avatar":1331,"permalink":1332,"linkedin":1333,"imageOffsetTop":1334,"imageOffsetLeft":1077},{"display_name":1336,"avatar":1337,"permalink":1338,"linkedin":1339,"imageOffsetTop":1340},"Authors","ByqFp0GQyhHZsbtcA_HFJk8O1buC5lC502rPVTWDQDs",{"list":1401,"authors":1671},[1402,1407,1422,1447,1468,1489,1512,1532,1551,1571,1590,1613,1627,1642,1660],{"id":507,"title":508,"author":1403,"cta":491,"description":517,"hideInRecent":481,"layout":936,"meta":1404,"moment":940,"path":1034,"stem":1036,"tags":1406,"webcast":481},[510],{"lang":4,"date":940,"categories":1405,"blogtitlepic":942,"customExcerpt":944},[22],[22,1038,585,1039],{"id":1408,"title":1409,"author":1410,"cta":491,"description":923,"hideInRecent":481,"layout":936,"meta":1411,"moment":1412,"path":1416,"stem":1417,"tags":1418,"webcast":481},"content_de/posts/2026-10-20-who-built-these-agents.md","Wer hat diese Agents gebaut?",[1336],{"lang":4,"date":1412,"categories":1413,"blogtitlepic":1414,"customExcerpt":1415},"2026-10-20",[232],"head-building-ai-agents.jpg","E7 bündelt E5, Copilot, die Entra Suite und Agent 365. Eine Lizenz räumt aber keinen Tenant auf. Wer für einen Agent geradesteht und worauf er zugreifen darf, entscheidet der Betrieb.","/posts/2026-10-20-who-built-these-agents","posts/2026-10-20-who-built-these-agents",[232,1039,1419,1420,1421],"Agent 365","AI","Identity Governance",{"id":1423,"title":1424,"author":1425,"cta":491,"description":923,"hideInRecent":481,"layout":936,"meta":1426,"moment":1440,"path":1441,"stem":1442,"tags":1443,"webcast":481},"content_de/posts/2026-09-22-end-of-mfa-sms.md","Das Ende der MFA-SMS",[1072],{"lang":4,"date":1427,"categories":1428,"blogtitlepic":1429,"customExcerpt":1430,"hreflang":1431},"2026-09-21",[232],"head-conditional-access.jpg","Warum Unternehmen jetzt auf phishing-resistente und möglichst passwortlose Anmeldeverfahren umstellen sollten.",[1432,1434,1437],{"lang":4,"href":1433},"/de/posts/2026-09-22-end-of-mfa-sms",{"lang":1435,"href":1436},"en","/en/posts/2026-09-22-end-of-mfa-sms",{"lang":1438,"href":1439},"es","/es/posts/2026-09-22-end-of-mfa-sms","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[232,1444,1039,1445,1446],"Authentication","MFA","Passkeys",{"id":1448,"title":1449,"author":1450,"cta":491,"description":923,"hideInRecent":481,"layout":936,"meta":1451,"moment":1427,"path":1462,"stem":1463,"tags":1464,"webcast":481},"content_de/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. Wenn der Nutzer der Exploit ist, und wie ihr das stoppt",[1047,1066],{"lang":4,"date":1427,"categories":1452,"blogtitlepic":1453,"customExcerpt":1454,"hreflang":1455},[232],"head-clickfix.jpg","ClickFix macht Nutzer zu ihrem eigenen Angreifer: ein gefälschtes CAPTCHA, ein Copy-Paste, und Schadcode läuft im Speicher, ohne dass etwas auf der Platte landet. Wie Microsoft Defender den Angriff erkennt, wo die Erkennung an Grenzen kommt und wie ihr die Lücke mit einem RunMRU-Hunt und vier Schutz-Layern schließt.",[1456,1458,1460],{"lang":4,"href":1457},"/de/posts/2026-09-21-clickfix-prevent-detect",{"lang":1435,"href":1459},"/en/posts/2026-09-21-clickfix-prevent-detect",{"lang":1438,"href":1461},"/es/posts/2026-09-21-clickfix-prevent-detect","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1465,1466,1467],"Defender","SOC","Endpoint Security",{"id":1469,"title":1470,"author":1471,"cta":491,"description":923,"hideInRecent":481,"layout":936,"meta":1472,"moment":1427,"path":1483,"stem":1484,"tags":1485,"webcast":481},"content_de/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin und Alltag auf einem Rechner? Game Over.",[1206],{"lang":4,"date":1427,"categories":1473,"blogtitlepic":1474,"customExcerpt":1475,"hreflang":1476},[232],"head-game-over-de.png","Warum ein Tenant für CIOs nicht reicht, und der zweite selten mitgedacht wird. Der Managed Red Tenant trennt administrative Arbeit architektonisch von der Office-Umgebung, der Managed Dark Tenant hält das Unternehmen handlungsfähig, wenn die Verteidigung trotzdem fällt. Was das für Betriebsmodell, SOC-Signal und die Nachweispflichten nach NISG 2026 bedeutet.",[1477,1479,1481],{"lang":4,"href":1478},"/de/posts/2026-09-21-red-tenant-dark-tenant-cio",{"lang":1435,"href":1480},"/en/posts/2026-09-21-red-tenant-dark-tenant-cio",{"lang":1438,"href":1482},"/es/posts/2026-09-21-red-tenant-dark-tenant-cio","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[232,1486,1487,1488],"Privileged Access","Zero Trust","NIS2",{"id":1490,"title":1491,"author":1492,"cta":491,"description":1493,"hideInRecent":481,"layout":936,"meta":1494,"moment":1495,"path":1507,"stem":1508,"tags":1509,"webcast":481},"content_de/posts/2026-08-08-isg-germany-2026.md","Vier Mal Leader. glueckkanja in der ISG-Studie Deutschland 2026",[1232],"ISG hat seine Studie in diesem Jahr umbenannt. Aus dem Microsoft Cloud Ecosystem wurde das Microsoft AI and Cloud Ecosystem, und mit dem Namen hat sich der Maßstab verschoben: Bewertet wird nicht mehr, wer Microsoft-Plattformen einführt, sondern wer Copilot, Agenten und KI-Workloads kontrollierbar betreibt. An unserer Position hat der neue Maßstab nichts geändert. Die ISG Provider Lens® Studie Deutschland 2026 positioniert uns als Leader in vier Quadranten: Microsoft Productivity and Business Process Services und Azure Managed Services, jeweils im Large Market und im Mid Market. Nach 2021, 2023, 2024 und 2025 ist es die fünfte Leader-Einstufung in Deutschland, in der Schweiz kam der Sprung in den Leader-Quadranten zwei Wochen zuvor.",{"lang":4,"date":1495,"categories":1496,"blogtitlepic":1498,"customExcerpt":1499,"hreflang":1500},"2026-08-08",[1497],"Corporate","head-isg-de-2026.png","Die ISG Provider Lens® Studie 2026 positioniert glueckkanja in Deutschland als Leader in vier Quadranten: Microsoft Productivity and Business Process Services und Azure Managed Services, jeweils im Large und im Mid Market. Die Studie heißt jetzt Microsoft AI and Cloud Ecosystem, und der Maßstab hat sich verschoben: Bewertet wird, wer KI- und Agent-Workloads kontrollierbar betreibt.",[1501,1503,1505],{"lang":4,"href":1502},"/de/posts/2026-08-08-isg-germany-2026",{"lang":1435,"href":1504},"/en/posts/2026-08-08-isg-germany-2026",{"lang":1438,"href":1506},"/es/posts/2026-08-08-isg-germany-2026","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1510,1511],"Award","ISG",{"id":1513,"title":1514,"author":1515,"cta":491,"description":1516,"hideInRecent":481,"layout":936,"meta":1517,"moment":1518,"path":1529,"stem":1530,"tags":1531,"webcast":481},"content_de/posts/2026-07-31-isg-switzerland-2026.md","Vom Rising Star zum Leader. glueckkanja in der ISG-Studie Schweiz 2026",[1232],"2024 haben wir die glueckkanja Switzerland AG gegründet und im zentroom am Bahnhofplatz 10b in Bern ein Büro bezogen. 2025 hat ISG uns im Schweizer Markt als Rising Star eingeordnet, als den Anbieter, dem die Analysten den Sprung in den Leader-Quadranten zutrauen. Jetzt ist der Sprung dokumentiert: Die ISG Provider Lens® Studie 2026 positioniert uns in der Schweiz als Leader im Quadranten Microsoft AI and Cloud Ecosystem, in den Bereichen Azure Managed Services und Microsoft Productivity and Business Process Services.",{"lang":4,"date":1518,"categories":1519,"blogtitlepic":1520,"customExcerpt":1521,"hreflang":1522},"2026-07-31",[1497],"head-isg-ch-2026.png","Die ISG Provider Lens® Studie 2026 positioniert glueckkanja in der Schweiz als Leader im Quadranten Microsoft AI and Cloud Ecosystem, in den Bereichen Azure Managed Services und Microsoft Productivity and Business Process Services. Zwei Jahre nach dem Markteintritt in Bern, ein Jahr nach der Rising-Star-Auszeichnung.",[1523,1525,1527],{"lang":4,"href":1524},"/de/posts/2026-07-31-isg-switzerland-2026",{"lang":1435,"href":1526},"/en/posts/2026-07-31-isg-switzerland-2026",{"lang":1438,"href":1528},"/es/posts/2026-07-31-isg-switzerland-2026","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1510,1511],{"id":1533,"title":1534,"author":1535,"cta":491,"description":923,"hideInRecent":481,"layout":936,"meta":1536,"moment":1537,"path":1548,"stem":1549,"tags":1550,"webcast":481},"content_de/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Was der OpenAI/Hugging-Face-Vorfall verrät und was nicht",[1206],{"lang":4,"date":1537,"categories":1538,"blogtitlepic":1539,"customExcerpt":1540,"hreflang":1541},"2026-07-24",[232],"head-outbreak.jpg","Ein AI-Agent bricht aus seiner Testumgebung aus, findet einen Zero-Day und hackt ein anderes Unternehmen. Klingt nach Drehbuch, ist aber im Juli 2026 tatsächlich passiert. Zeit für eine nüchterne Einordnung: mit etwas Psychologie, zwei Security-Veteranen und der Frage, was das für eure Verteidigung bedeutet.",[1542,1544,1546],{"lang":4,"href":1543},"/de/posts/2026-07-24-outbreak-openai-hugging-face",{"lang":1435,"href":1545},"/en/posts/2026-07-24-outbreak-openai-hugging-face",{"lang":1438,"href":1547},"/es/posts/2026-07-24-outbreak-openai-hugging-face","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1420,1466,1487],{"id":1552,"title":1553,"author":1554,"cta":491,"description":1555,"hideInRecent":481,"layout":936,"meta":1556,"moment":1557,"path":1568,"stem":1569,"tags":1570,"webcast":481},"content_de/posts/2026-07-22-isg-cybersecurity-2026.md","Leader und Rising Star. glueckkanja in der ISG Cybersecurity-Studie 2026",[1232],"Neu im Quadranten und direkt Leader: Die ISG Provider Lens®-Studie \"Cybersecurity – Services and Solutions 2026\" positioniert glueckkanja als Leader im Bereich Next-Gen SOC/MDR Services für den deutschen Mittelstand. Im Gesamtmarkt für Next-Gen SOC/MDR Services zeichnet uns ISG als Rising Star aus, also als den Anbieter, dem die Analysten den Sprung in den Leader-Quadranten innerhalb der nächsten 12 bis 24 Monate zutrauen.",{"lang":4,"date":1557,"categories":1558,"blogtitlepic":1559,"customExcerpt":1560,"hreflang":1561},"2026-07-22",[1497],"head-isg-cybersecurity-2026.png","Die ISG Provider Lens®-Studie Cybersecurity 2026 zeichnet glueckkanja als Leader im Quadranten Next-Gen SOC/MDR Services (Midmarket) aus. Im Gesamtmarkt für Next-Gen SOC/MDR Services sind wir Rising Star. ISG bescheinigt uns überdurchschnittliches Wachstum, tiefe Microsoft-Security-Expertise und ein 24/7 SOC aus Deutschland.",[1562,1564,1566],{"lang":4,"href":1563},"/de/posts/2026-07-22-isg-cybersecurity-2026",{"lang":1435,"href":1565},"/en/posts/2026-07-22-isg-cybersecurity-2026",{"lang":1438,"href":1567},"/es/posts/2026-07-22-isg-cybersecurity-2026","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1510,1511,232],{"id":1572,"title":1573,"author":1574,"cta":491,"description":1575,"hideInRecent":481,"layout":936,"meta":1576,"moment":1577,"path":1587,"stem":1588,"tags":1589,"webcast":481},"content_de/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: Was KI wirklich braucht, um zu arbeiten",[1232],"Ein Fertigungsunternehmen möchte wissen, welche seiner 14.000 SKUs tatsächlich profitabel sind. Die Antwort liegt in drei Systemen, die noch nie einen einzigen Datenpunkt miteinander ausgetauscht haben. Bis vor Kurzem hat es drei Abteilungen, zwei Wochen und einiges an gutem Willen gekostet, sie zu bekommen. Seit Anfang 2026 kann eine KI diese Frage in Minuten beantworten: die Daten durchsuchen, Zusammenhänge herstellen, eine Empfehlung produzieren. Vorausgesetzt, sie hat Zugriff.",{"lang":4,"date":1577,"categories":1578,"blogtitlepic":1579,"hreflang":1580},"2026-07-06",[128],"head-the-holy-trinity",[1581,1583,1585],{"lang":4,"href":1582},"/de/posts/2026-07-06-the-holy-trinity",{"lang":1435,"href":1584},"/en/posts/2026-07-06-the-holy-trinity",{"lang":1438,"href":1586},"/es/posts/2026-07-06-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1420,128],{"id":1591,"title":1592,"author":1593,"cta":491,"description":1594,"hideInRecent":481,"layout":936,"meta":1595,"moment":1596,"path":1607,"stem":1608,"tags":1609,"webcast":481},"content_de/posts/2026-07-01-onboarding-process.md","Vertrag unterschrieben: So läuft dein Onboarding bei uns ab",[1323],"Wie läuft euer Onboarding eigentlich ab? Eine Frage, die uns in Gesprächen mit Bewerbenden immer wieder begegnet, denn viele haben schon einmal erlebt, dass ein Onboarding holprig verläuft. Umso wichtiger ist es uns, dir von Anfang an ein gutes Gefühl zu geben.",{"lang":4,"date":1596,"categories":1597,"blogtitlepic":1598,"customExcerpt":1599,"hreflang":1600},"2026-07-01",[1497],"Onboarding_Blogheader","Der Vertrag ist unterschrieben, der erste große Schritt ist geschafft. Aber wie geht es jetzt weiter? Wir nehmen dich mit hinter die Kulissen unseres Onboardings, vom PreBoarding bis zur ersten Woche im Team.",[1601,1603,1605],{"lang":4,"href":1602},"/de/posts/2026-07-01-onboarding-process",{"lang":1435,"href":1604},"/en/posts/2026-07-01-onboarding-process",{"lang":1438,"href":1606},"/es/posts/2026-07-01-onboarding-process","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1610,1611,1612],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1614,"title":1615,"author":1616,"cta":491,"description":1617,"hideInRecent":481,"layout":936,"meta":1618,"moment":1619,"path":1623,"stem":1624,"tags":1625,"webcast":481},"content_de/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: wir gehören dazu",[1232],"Im Microsoft-Partner-Ökosystem gibt es eine ganze Reihe von Anerkennungen, und doch hebt sich das Frontier Partner Badge in seiner Anlage von den anderen Auszeichnungen ab. Es lässt sich nicht beantragen, sondern wird auf Initiative von Microsoft an einen exklusiven Kreis von Partnern vergeben, die in mehreren Disziplinen parallel überzeugen müssen, statt in einer einzelnen zu glänzen. Microsoft prüft dabei nachgewiesene Kompetenz in Cloud & AI Platforms, in AI Business Solutions und in Security gleichermaßen und adressiert damit Unternehmen, die KI nicht als Aufsatz auf bestehende IT verstehen, sondern als Ergebnis einer durchgängigen Architektur, die von der Identität über den Endpoint bis in den produktiven KI-Betrieb trägt.",{"lang":4,"date":1619,"categories":1620,"blogtitlepic":1621,"customExcerpt":1622},"2026-06-26",[1497],"head-frontier-partner-badge.jpg","Seit kurzem gibt es im Microsoft AI Cloud Partner Program eine neue Spitzenauszeichnung, das Frontier Partner Badge. Microsoft verleiht es ausschließlich an einen exklusiven Kreis von Partnern weltweit, die KI-Projekte auf dem gesamten Microsoft-Stack tragfähig liefern, vom Arbeitsplatz über die Cloud-Plattform und Security bis in die KI-Anwendung selbst, und diesen Anspruch in der Praxis nachgewiesen haben. Im DACH-Raum zählt diese Gruppe nur eine Handvoll Unternehmen, und wir sind eines davon.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1510,1626,1420],"Microsoft Partner",{"id":1628,"title":1629,"author":1630,"cta":491,"description":1631,"hideInRecent":481,"layout":936,"meta":1632,"moment":1633,"path":1637,"stem":1638,"tags":1639,"webcast":481},"content_de/posts/2026-06-09-vair-run.md","160 Kilometer für den guten Zweck",[1330],"Sonntagmorgen, 8:30 Uhr, Holbeinsteg am Main. Elf Kolleginnen und Kollegen in einheitlichen NinjaCat-Shirts, bereit für die Frankfurter Runden. Regen, Blitz und Donner inklusive. Für einen guten Zweck zu laufen war Motivation genug, um trotz des schlechten Wetters die Laufschuhe zu schnüren.",{"lang":4,"date":1633,"categories":1634,"blogtitlepic":1635,"customExcerpt":1636},"2026-06-08",[1497],"frankfurter-runden.png","Elf Kollegen und Kolleginnen, 16 Runden, 160 Kilometer, ein Gewittersturm und eine Podiumsplatzierung: glueckkanja war bei den Frankfurter Runden 2026 dabei und hat für jede gelaufene Runde an den VAIR e.V. gespendet, der in Offenbach einen inklusiven Sport- und Kulturpark baut.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1640,1610,1641],"Top Arbeitgeber","Soziales Engagement",{"id":1643,"title":1644,"author":1645,"cta":491,"description":1646,"hideInRecent":481,"layout":936,"meta":1647,"moment":1648,"path":1652,"stem":1653,"tags":1654,"webcast":481},"content_de/posts/2026-04-10-incident-to-intelligence.md","Anatomie eines unbekannten AMOS Stealers: Vom Alert zur Immunität in Stunden",[1311],"Wenn in unserem SOC ein Alert ausgelöst wird, beginnt die Uhr zu laufen: nicht nur für den betroffenen Kunden, sondern für alle Organisationen unter unserem Schutz. Der gefährlichste Moment im modernen Bedrohungsumfeld ist die Intelligence Gap, das Zeitfenster zwischen dem ersten Einsatz einer neuen Malware-Variante und dem Tag, an dem die Branche davon erfährt.",{"lang":4,"date":1648,"categories":1649,"blogtitlepic":1650,"customExcerpt":1651},"2026-04-10",[232],"head-amos-stealer.png","Eine bisher undokumentierte AMOS-Stealer-Variante kompromittierte einen macOS-Endpoint. Keine bekannten Hashes, keine C2-Daten in öffentlichen Datenbanken. Unser SOC demontierte sechs Obfuskierungsschichten, extrahierte alle Indikatoren und verteilte den Schutz an alle SOC-Kunden innerhalb von Stunden, noch bevor die Branche das Sample überhaupt gesehen hatte.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1655,1656,1657,1658,1659],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1661,"title":1662,"author":1663,"cta":491,"description":1664,"hideInRecent":481,"layout":936,"meta":1665,"moment":1666,"path":1669,"stem":1670,"tags":491,"webcast":481},"content_de/posts/2026-03-21-microsoft-edge-corporate-browser.md","Warum Edge euer einziger Corporate Browser sein sollte",[510],"Die Wahl des Browsers ist in Unternehmensumgebungen eine strategische Entscheidung: Sie beeinflusst direkt, wie viel Sicherheit und Verwaltungsaufwand ihr tatsächlich habt. Google Chrome war lange die naheliegende Option, aber Microsoft Edge hat sich zu einem Browser entwickelt, der direkt in den bestehenden Stack greift, vor allem wenn Microsoft 365 im Einsatz ist und die Verwaltung über Intune läuft.",{"lang":4,"date":1666,"blogtitlepic":1667,"customExcerpt":1668},"2026-03-21","head-microsoft-edge-default-browser.jpg","Kein Unternehmen hat Chrome wirklich gewählt; er war einfach da, mit eigener Sync-Logik, eigener Kontoverwaltung, eigener Richtlinienoberfläche. Microsoft Edge dagegen greift direkt in die Infrastruktur, die ohnehin schon läuft: Entra ID, Intune, Defender. Dieser Beitrag zeigt, wie der Wechsel aussieht, wie Chrome per Intune-Richtlinie auf eine Landingpage umgeleitet wird und was wegfällt, wenn man aufhört, zwei Browser parallel zu betreiben.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"Steffen Schwerdtfeger":1672,"Andreas Hötzinger":1673,"Karsten Kleinschmidt":1674,"Fritz Zurhorst":1675,"Nadine Klein":1676,"Jan Geisbauer":1677,"Carolin Kanja":1681,"Anna Ulbricht":1682,"Annette Brauns":1683,"Pascal Asch":1684},{"display_name":510,"avatar":1103,"permalink":1104,"linkedin":1105,"twitter":1106,"imageOffsetTop":1107,"imageOffsetLeft":1108},{"display_name":1336,"avatar":1337,"permalink":1338,"linkedin":1339,"imageOffsetTop":1340},{"display_name":1072,"avatar":1073,"permalink":1074,"twitter":1075,"linkedin":1076,"imageOffsetTop":1077,"imageOffsetLeft":1078},{"display_name":1047,"avatar":1048,"permalink":1049,"linkedin":1050,"imageOffsetTop":1051},{"display_name":1066,"avatar":1067,"permalink":1068,"twitter":1069,"linkedin":1070,"imageOffsetTop":1051},{"display_name":1206,"avatar":1207,"permalink":1208,"twitter":1209,"linkedin":1209,"imageOffsetTop":1051,"socials":1678},[1679,1680],{"text":469,"href":1212},{"text":1214,"href":1215},{"display_name":1232,"avatar":1233,"permalink":1234,"twitter":1235,"linkedin":1236},{"display_name":1323,"avatar":1324,"permalink":1325,"linkedin":1326,"imageOffsetTop":1327,"imageOffsetLeft":1328},{"display_name":1330,"avatar":1331,"permalink":1332,"linkedin":1333,"imageOffsetTop":1334,"imageOffsetLeft":1077},{"display_name":1311,"avatar":1312,"permalink":1313,"linkedin":1314,"imageOffsetTop":1149},{"id":1042,"extension":1043,"meta":1686,"stem":8,"__hash__":1399},{"Steffen Schwerdtfeger":1687},{"display_name":510,"avatar":1103,"permalink":1104,"linkedin":1105,"twitter":1106,"imageOffsetTop":1107,"imageOffsetLeft":1108},1793285820379]