[{"data":1,"prerenderedAt":1695},["ShallowReactive",2],{"sc:header-data-en":3,"sc:footer-data-en":486,"post-en--posts-2026-10-29-autopilot-device-preparation-99a9efd37a67f":515,"authors_data":1049,"content-en-list-7b291c2dd91a4":1408,"authors_data:Steffen Schwerdtfeger":1692},{"lang":4,"home":5,"navigation":17,"meta":476,"contact":482},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"en":13},{"title":14,"url":15,"alt":16},"Home","/en","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"en":21},{"title":22,"description":23},"Workplace","Microsoft 365-powered for smart, secure, and flexible workspaces, seamlessly integrating cutting-edge technologies and identity services.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"en":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"en":34},{"title":35,"url":36},"Managed Intune","/en/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"en":40},{"title":41,"url":42},"Managed Entra","/en/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"en":46},{"title":47,"url":48},"Managed Workplace","/en/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"en":52},{"title":53,"url":54},"Consulting Services","/en/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"en":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"en":64},{"title":65,"url":66},"Microsoft Entra Suite","/en/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"en":70},{"title":71,"url":72},"Microsoft Intune","/en/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"en":76},{"title":77,"url":78},"Microsoft Windows","/en/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"en":82},{"title":83,"url":84},"Windows 365 Cloud PC","/en/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"en":88},{"title":89,"url":90},"Cloud Workplace Foundation","/en/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"en":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"en":100},{"title":101,"url":102},"Microsoft 365 Copilot","/en/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"en":106},{"title":107,"url":108},"Teams","/en/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"en":112},{"title":113,"url":114},"SharePoint & Power Platform","/en/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"en":118},{"title":119,"url":120},"Exchange Online","/en/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"en":124},{"title":125,"url":126},"Information Protection & Compliance","/en/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"en":130},{"title":131,"description":132},"Azure","Fuel growth with Azure: Cut cloud costs, boost efficiency, and drive innovation through IaaS and PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"en":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"en":142},{"title":143,"url":144},"Azure Managed Services","/en/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"en":148},{"title":149,"url":150},"Azure Consulting","/en/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"en":154},{"title":155},"Scenarios",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"en":160},{"title":161,"url":162},"Plan your Cloud","/en/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"en":166},{"title":167,"url":168},"Migrate to the cloud","/en/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"en":172},{"title":173,"url":174},"Innovate your business","/en/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"en":178},{"title":179,"url":180},"Rethink your VMware strategy","/en/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"en":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"en":190},{"title":191,"url":192},"Azure Foundation","/en/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"en":196},{"title":197,"url":198},"Azure AI Foundation","/en/azure/azure-ai-foundation",{"name":86,"languages":200},{"en":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"en":205},{"title":206,"url":207},"Azure Data Foundation","/en/azure/azure-data-foundation",{"name":188,"languages":209},{"en":210},{"title":211,"url":212},"Azure Container Foundation","/en/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"en":216},{"title":217,"url":218},"Managed Dark Tenant","/en/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"en":222},{"title":223,"url":224},"Cloud Adoption Framework","/en/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"en":228},{"title":229,"url":230},"Cloud Competence Center","/en/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"en":234},{"title":235,"description":236,"emergency":237},"Security","Vigilance in the cloud with an award-winning 24/7 managed service, incident response and state-of-the-art protection for your infrastructure.",{"text":238,"href":239,"skin":240,"icon":241},"Under Attack?","/en/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"en":249},{"title":250,"url":251},"Managed Red Tenant","/en/security/managed-red-tenant",{"name":214,"languages":253},{"en":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"en":259},{"title":260,"url":261},"Sentinel Data Lake","/en/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"en":265},{"title":266,"url":267},"Security Consulting","/en/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"en":274},{"title":275,"url":276},"Cloud Security Operations Center","/en/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"en":280},{"title":281,"url":282},"Global Secure Access","/en/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"en":286},{"title":287,"url":288},"MyWorkID","/en/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"en":295},{"title":296,"url":297},"Preventive Services","/en/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"en":301},{"title":302,"url":303},"Data Security Service","/en/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"en":307},{"title":308,"url":309},"Security Copilot Agents","/en/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"en":313},{"title":314,"url":315},"Implementing NIS2","/en/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"en":319},{"title":320,"description":321},"Products","Innovative companion products for a completely secure, 100% cloud-native Microsoft environment that enhance collaboration, network authentication and software management.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"en":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Cloudbased Software distribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"en":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certificate distribution from the cloud",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"en":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Work with your local office 365 data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"en":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrate your data from one server to another",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"en":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider for Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"en":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Authentication for your network",{"name":380,"img":381,"target":330,"languages":382},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"en":383},{"title":384,"url":385,"subtitle":386},"Autopilot Monitor","https://www.autopilotmonitor.com","Real-time Windows Autopilot monitoring",{"name":388,"img":389,"target":330,"languages":390},"sendman","products/sendman/Sendman-nav-logo.svg",{"en":391},{"title":392,"url":393,"subtitle":394},"Sendman","https://www.sendman.com","The SMTP relay for Microsoft 365",{"name":396,"languages":397},"casestudies",{"en":398},{"title":399,"url":400,"description":401},"Case Studies","/en/casestudies","Pioneer in the Cloud: Your top Microsoft partner for comprehensive cloud solutions with a Blueprint-based approach and Infrastructure-as-Code expertise.",{"name":403,"languages":404,"children":407},"company",{"en":405},{"title":406,"description":401},"Company",[408,438,459],{"name":409,"languages":410,"children":413},"company-about-us",{"en":411},{"title":412},"About us",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"en":417},{"title":418,"url":419},"Facts & Figures","/en/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"en":423},{"title":424,"url":425},"Contact & Locations","/en/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"en":429},{"title":430,"url":431}," glueckkanja Switzerland","/en/company/switzerland",{"name":433,"languages":434},"austria",{"en":435},{"title":436,"url":437},"glueckkanja Austria","/en/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"en":441},{"title":442},"Career",[444,450,453],{"name":445,"languages":446},"company-career-overview",{"en":447},{"title":448,"url":449},"Career overview","/en/career",{"name":451,"languages":452},"company-young-professionals",{},{"name":454,"languages":455},"company-jobs",{"en":456},{"title":457,"url":458},"Job offers","/en/job-offers",{"name":460,"languages":461,"children":464},"company-latest",{"en":462},{"title":463},"Latest",[465,471],{"name":466,"languages":467},"company-blog",{"en":468},{"title":469,"url":470},"Blog","/en/blog",{"name":466,"languages":472},{"en":473},{"title":474,"url":475},"Events","/en/events",[477],{"name":478,"languages":479},"career-meta",{"en":480},{"title":442,"url":449,"active":481},false,{"languages":483},{"en":484},{"title":485,"url":425,"active":481},"Contact",{"data":487},{"bgColor":488,"number":489,"mail":490,"brandLogos":491,"logos":492,"links":496,"linksEn":506},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[493],{"img":10,"alt":16,"url":494,"class":495},"index.html","max-w-19rem",[497,500,503],{"title":498,"url":499},"Datenschutz","/de/privacy",{"title":501,"url":502},"Impressum","/de/imprint",{"title":504,"url":505},"No Cookies","/de/cookies",[507,510,513],{"title":508,"url":509},"Privacy","/en/privacy",{"title":511,"url":512},"Imprint","/en/imprint",{"title":504,"url":514},"/en/cookies",{"id":516,"title":517,"author":518,"body":520,"cta":491,"description":526,"eventid":491,"extension":944,"hideInRecent":481,"layout":945,"meta":946,"moment":950,"navigation":325,"path":1042,"seo":1043,"stem":1044,"tags":1045,"webcast":481,"__hash__":1048},"content_en/posts/2026-10-29-autopilot-device-preparation.md","Autopilot Device Preparation Becomes the Standard, Hybrid Join Falls Behind",[519],"Steffen Schwerdtfeger",{"type":521,"value":522,"toc":931},"minimal",[523,527,532,535,572,670,680,684,686,695,698,701,705,707,710,730,734,736,745,751,754,757,765,769,771,774,777,781,783,786,789,792,795,821,824,828,830,833,872,876,878,881,884,887,891,893],[524,525,526],"p",{},"In September, Microsoft declared Autopilot Device Preparation the recommended approach for user-driven Windows deployments. The new model is simpler to set up and runs more reliably, but it only supports Entra Join. Anyone still rolling out new devices with Hybrid Join today should pay close attention here, because that limitation matters more than the question of which provisioning tool to use.",[528,529,531],"h2",{"id":530},"the-key-points","The Key Points",[524,533,534],{},"{: .h3-font-size}",[536,537,539,540,539,548,539,554,539,560,539,566],"ul",{"style":538},"margin: 0.25rem 0","\n  ",[541,542,543,547],"li",{},[544,545,546],"strong",{},"New recommendation:"," Since September, Microsoft recommends Autopilot Device Preparation for user-driven enrollments because deployments complete faster and more reliably.",[541,549,550,553],{},[544,551,552],{},"Entra Join only:"," Device Preparation exclusively supports Entra Join. Hybrid Join is not part of the new model.",[541,555,556,559],{},[544,557,558],{},"No in-place migration:"," Microsoft offers no supported path to convert a hybrid-joined device to Entra Join without a reset. Anyone rolling out new devices with Hybrid Join today will either have to reprovision them later or remain tied to on-premises infrastructure for another full hardware cycle.",[541,561,562,565],{},[544,563,564],{},"No retirement date:"," Classic Autopilot and Device Preparation will coexist for the foreseeable future.",[541,567,568,571],{},[544,569,570],{},"Our recommendation:"," The join type is what matters, not the tooling. For new devices, we continue to use classic Autopilot with Entra Join, because manufacturers and resellers can register devices in your tenant before they even ship. Device Preparation does not yet support that zero-touch path.",[573,574,576],"div",{"style":575},"overflow-x: auto; margin: 1.5rem 0",[577,578,539,580,539,598],"table",{"style":579},"width:100%; border-collapse: collapse; font-size: 0.85rem; background: #fff",[581,582,583,584,539],"thead",{},"\n    ",[585,586,587,588,587,592,587,595,583],"tr",{},"\n      ",[589,590],"th",{"style":591},"border: 1px solid #d0d7de; padding: 0.5rem 0.75rem; background: #dde1e4; text-align: left; font-weight: 600",[589,593,594],{"style":591},"Windows Autopilot",[589,596,597],{"style":591},"Autopilot Device Preparation",[599,600,583,601,583,615,583,626,583,637,583,648,583,659,539],"tbody",{},[585,602,587,603,587,608,587,612,583],{},[604,605,607],"td",{"style":606},"border: 1px solid #d0d7de; padding: 0.5rem 0.75rem; background: #f6f8fa; font-weight: 600","Join type",[604,609,611],{"style":610},"border: 1px solid #d0d7de; padding: 0.5rem 0.75rem; background: #fff","Entra Join, Hybrid Join",[604,613,614],{"style":610},"Entra Join",[585,616,587,617,587,620,587,623,583],{},[604,618,619],{"style":606},"Modes",[604,621,622],{"style":610},"User-driven, Pre-Provisioning, Self-Deploying, existing devices",[604,624,625],{"style":610},"User-driven, Automatic (Windows 365)",[585,627,587,628,587,631,587,634,583],{},[604,629,630],{"style":606},"Tenant binding",[604,632,633],{"style":610},"mandatory via hardware hash, including by OEMs and partners",[604,635,636],{"style":610},"optional via Device Association, manually in Intune",[585,638,587,639,587,642,587,645,583],{},[604,640,641],{"style":606},"Configuration during deployment",[604,643,644],{"style":610},"device- and user-scoped via the Enrollment Status Page (ESP)",[604,646,647],{"style":610},"device-scoped only, with a limited number of apps and scripts",[585,649,587,650,587,653,587,656,583],{},[604,651,652],{"style":606},"Reporting",[604,654,655],{"style":610},"delayed",[604,657,658],{"style":610},"near real-time",[585,660,587,661,587,664,587,667,583],{},[604,662,663],{"style":606},"Additional features",[604,665,666],{"style":610},"Autopilot Reset, DFCI, Teams Rooms, HoloLens, Self-Deploying, Pre-Provisioning",[604,668,669],{"style":610},"Win32 and LOB apps in the same deployment flow",[524,671,672,673],{},"Source: ",[674,675,679],"a",{"href":676,"target":330,"rel":677},"https://learn.microsoft.com/en-us/autopilot/device-preparation/compare",[678],"noopener","Microsoft Learn, Compare Windows Autopilot device preparation and Windows Autopilot",[528,681,683],{"id":682},"what-microsoft-has-announced","What Microsoft Has Announced",[524,685,534],{},[524,687,688,689,694],{},"In mid-September, Microsoft published a post on the ",[674,690,693],{"href":691,"target":330,"rel":692},"https://techcommunity.microsoft.com/blog/intunecustomersuccess/moving-from-windows-autopilot-to-windows-autopilot-device-preparation/4557269",[678],"Intune Customer Success Blog"," outlining the transition from classic Windows Autopilot to Device Preparation. The message is unambiguous: for user-driven deployments, Device Preparation is now the recommended path.",[524,696,697],{},"The technology itself is not new. Device Preparation has been available since 2024 as a redesigned variant of Autopilot that is simpler and more reliable, and surfaces deployments in near real-time. Until recently, however, it had a gap: before the first sign-in, the device had no way of knowing which tenant it belonged to. Device Association, introduced in late August, closes that gap. It lets you associate a Windows device with your tenant before deployment begins, so the device is automatically recognized as a corporate asset, receives a defined name and a customized out-of-box experience, all before the user finishes setup.",[524,699,700],{},"You do not need to switch right away. Classic Autopilot and Device Preparation coexist within the same tenant, but each device uses only one of the two models. If a device is both registered for Autopilot and associated via Device Association, the association takes precedence.",[528,702,704],{"id":703},"one-policy-instead-of-four-building-blocks","One Policy Instead of Four Building Blocks",[524,706,534],{},[524,708,709],{},"Classic Autopilot is built from deployment profiles, the Enrollment Status Page, group tags, and dynamic groups. Device Preparation replaces all of that with a single provisioning policy that defines everything happening during the out-of-box experience (OOBE), from device settings and apps to scripts and device naming. In practice, this means:",[536,711,539,712,539,718,539,724],{"style":538},[541,713,714,717],{},[544,715,716],{},"Faster assignments:"," At enrollment, devices are placed into a static Entra group immediately via Enrollment Time Grouping. Apps and scripts assigned to that group are available right away during provisioning, without waiting for dynamic group evaluation.",[541,719,720,723],{},[544,721,722],{},"Clear phase separation:"," During provisioning, only device-scoped settings and the apps that are truly needed land on the device. Everything user-scoped follows once the desktop is up, making initial setup shorter and less error-prone.",[541,725,726,729],{},[544,727,728],{},"Better reporting:"," Every deployment is visible in near real-time with far more detail than classic Autopilot provides, which makes troubleshooting noticeably easier.",[528,731,733],{"id":732},"device-preparation-only-supports-entra-join","Device Preparation Only Supports Entra Join",[524,735,534],{},[524,737,738,739,744],{},"Device Preparation supports Entra Join only. Hybrid Join has no place in the new architecture, and nothing in Microsoft's announcements suggests that will change. Classic Autopilot still handles Hybrid Join, but Microsoft's development effort is clearly aimed at deployments without a domain controller. ",[674,740,743],{"href":741,"target":330,"rel":742},"https://learn.microsoft.com/en-gb/autopilot/windows-autopilot-hybrid",[678],"Microsoft Learn"," now states this explicitly:",[746,747,748],"blockquote",{},[524,749,750],{},"\"Microsoft recommends deploying new devices as cloud-native using Microsoft Entra join. Deploying new devices as Microsoft Entra hybrid join devices isn't recommended …\"",[524,752,753],{},"Anyone who has run Hybrid Join with Autopilot knows the friction: during provisioning, the device must be able to reach a domain controller, the Intune Connector for Active Directory must be available and working, and Group Policy runs in parallel with Intune. Those are exactly the dependencies that cause most deployment failures and stalls. For us, Hybrid Join was always a transitional solution, never the destination.",[524,755,756],{},"An Entra-joined device needs nothing more than an internet connection during setup. Configuration, apps, updates, and compliance policies all come through Intune, and Conditional Access governs access to corporate resources. That fits a working world that increasingly takes place outside the corporate network, whether at home, on the road, or somewhere in between.",[524,758,759,760,764],{},"We have called this principle \"Starbucks Deployment\" for years, and back in 2019 it earned us the ",[674,761,763],{"href":762},"/en/posts/2019-06-06-gk-microsoft-partner-of-the-year","Microsoft Global Modern Desktop Partner of the Year Award",".",[528,766,768],{"id":767},"switching-from-hybrid-to-entra-join-requires-a-reset","Switching from Hybrid to Entra Join Requires a Reset",[524,770,534],{},[524,772,773],{},"One point is critical for planning: there is no supported way to convert a hybrid-joined device to Entra Join without a reset. Every device you roll out today with Hybrid Join will eventually need to be reprovisioned to make the switch.",[524,775,776],{},"That sounds like a lot of work, but it can be managed in an orderly way in practice. The most common approach is to align the transition with the normal hardware refresh cycle: new devices come in with Entra Join from the start, while the hybrid-joined fleet is retired gradually. Organizations that want to move to the cloud faster can also reprovision existing devices in waves with Entra Join.",[528,778,780],{"id":779},"why-we-still-recommend-classic-autopilot","Why We Still Recommend Classic Autopilot",[524,782,534],{},[524,784,785],{},"Even so, we are not yet advising customers to switch to Device Preparation. For new devices, we continue to recommend classic Autopilot, but consistently with Entra Join.",[524,787,788],{},"The main reason is OEM and reseller integration. With classic Autopilot, the OEM or reseller registers the device in your tenant before it ships. It goes straight to the end user, displays your branding on first boot, and configures itself without any IT intervention.",[524,790,791],{},"With Device Association, you currently have to read out the device information locally and upload it to Intune yourself. That works well for warehouse staging, technician-led rollouts, or internal deployments, but not for direct shipment to users. Microsoft has announced that OEMs and partners will be able to pre-associate devices, but without a timeline.",[524,793,794],{},"There are also scenarios that Device Preparation does not yet fully cover:",[536,796,539,797,539,803,539,809,539,815],{"style":538},[541,798,799,802],{},[544,800,801],{},"Pre-Provisioning:"," A partner installs apps and applies policies before the device ships, so employees start with a device that is nearly fully configured.",[541,804,805,808],{},[544,806,807],{},"Self-Deploying Mode:"," Kiosk and shared devices that are rolled out without a user sign-in.",[541,810,811,814],{},[544,812,813],{},"Extended provisioning options:"," More apps during setup and the ability to lock the desktop until the required user-scoped configuration is complete.",[541,816,817,820],{},[544,818,819],{},"Specialized device scenarios:"," Teams Rooms and firmware management via DFCI.",[524,822,823],{},"Once OEMs and resellers can pre-associate devices for Device Preparation, we will revisit our recommendation. The underlying strategy stays the same regardless: anyone planning a new deployment today plans for Entra Join. A later move from classic Autopilot to Device Preparation would then only affect the provisioning path for new devices, not the management model, the identity platform, or the device architecture.",[528,825,827],{"id":826},"our-devices-wont-work-without-domain-join","\"Our Devices Won't Work Without Domain Join\"",[524,829,534],{},[524,831,832],{},"We hear this constantly. The technology behind Entra Join is mature and proven, and when things go wrong it is rarely Entra Join itself at fault. It is usually the dependencies, processes, and assumptions that have accumulated around Active Directory over the years.",[536,834,539,835,539,844,539,850,539,866],{"style":538},[541,836,837,840,841,843],{},[544,838,839],{},"Group Policy:"," Many organizations have far more GPOs than they need, and in our experience a significant portion of them no longer have any effect. With our blueprint, Entra clients are up and running within minutes on a well-tested and flexible baseline that we operate entirely as Infrastructure as Code in ",[674,842,35],{"href":36}," and keep continuously up to date.",[541,845,846,849],{},[544,847,848],{},"Access to on-premises resources:"," File servers, printers, and internal web applications remain reachable for Entra-joined devices. As long as the device can reach a domain controller, it obtains Kerberos tickets and signs in to on-premises resources via single sign-on, using Windows Hello for Business over Cloud Kerberos Trust. You should still test these scenarios with real users and real business applications.",[541,851,852,855,856,860,861,865],{},[544,853,854],{},"Certificates and network access:"," Network and VPN authentication often depends on computer certificates from an on-premises CA, validated through a Network Policy Server (NPS). For Entra-joined devices, Intune distributes the certificates, for example via Microsoft Cloud PKI or ",[674,857,341],{"href":858,"target":330,"rel":859},"https://www.scepman.com/",[678],", and a cloud-capable RADIUS solution such as ",[674,862,376],{"href":863,"target":330,"rel":864},"https://www.radius-as-a-service.com/",[678]," handles network authentication.",[541,867,868,871],{},[544,869,870],{},"Reliable app deployments:"," When Autopilot deployments fail, the cause is usually not the join type but poorly built or unmaintained software packages. That is why we use RealmJoin, our companion to Intune with more than 2,500 pre-packaged applications. Regardless of the tooling: during initial setup, only the apps users genuinely need on day one belong on the device. Everything else follows once the device is in production, or is available for self-service installation via the Intune Company Portal or the RealmJoin App Catalog.",[528,873,875],{"id":874},"conclusion","Conclusion",[524,877,534],{},[524,879,880],{},"Device Preparation cannot yet do everything classic Autopilot can. The direction is clear nonetheless: Microsoft is investing in Entra Join, and Hybrid Join is increasingly becoming a legacy model.",[524,882,883],{},"Continuing to run existing hybrid-joined devices through the end of their lifecycle can make sense, even if that means maintaining two management models in parallel for a while. Rolling out new devices with Hybrid Join today, however, ties you to on-premises dependencies for another full hardware cycle while Microsoft continues developing provisioning and management for Entra Join.",[524,885,886],{},"If you are planning the switch from Hybrid Join to Entra Join, struggling with Autopilot deployments, or looking to manage your Windows devices entirely through Intune, we are happy to help.",[528,888,890],{"id":889},"sources","Sources",[524,892,534],{},[536,894,539,895,539,902,539,910,539,917,539,924],{"style":538},[541,896,897,901],{},[674,898,900],{"href":691,"target":330,"rel":899},[678],"Moving from Windows Autopilot to Windows Autopilot device preparation"," (Microsoft Tech Community, September 2026)",[541,903,904,909],{},[674,905,908],{"href":906,"target":330,"rel":907},"https://techcommunity.microsoft.com/blog/intunecustomersuccess/introducing-device-association-for-windows-autopilot-device-preparation/4550603",[678],"Introducing device association for Windows Autopilot device preparation"," (Microsoft Tech Community, August 2026)",[541,911,912,916],{},[674,913,915],{"href":676,"target":330,"rel":914},[678],"Compare Windows Autopilot device preparation and Windows Autopilot"," (Microsoft Learn)",[541,918,919,916],{},[674,920,923],{"href":921,"target":330,"rel":922},"https://learn.microsoft.com/en-us/autopilot/device-preparation/device-association/faq",[678],"Windows Autopilot device association FAQ",[541,925,926,916],{},[674,927,930],{"href":928,"target":330,"rel":929},"https://learn.microsoft.com/en-us/intune/solutions/cloud-native-endpoints/azure-ad-joined-hybrid-azure-ad-joined",[678],"Microsoft Entra joined vs. hybrid joined",{"title":932,"searchDepth":933,"depth":933,"links":934},"",2,[935,936,937,938,939,940,941,942,943],{"id":530,"depth":933,"text":531},{"id":682,"depth":933,"text":683},{"id":703,"depth":933,"text":704},{"id":732,"depth":933,"text":733},{"id":767,"depth":933,"text":768},{"id":779,"depth":933,"text":780},{"id":826,"depth":933,"text":827},{"id":874,"depth":933,"text":875},{"id":889,"depth":933,"text":890},"md","post",{"lang":947,"seoTitle":948,"titleClass":949,"date":950,"categories":951,"blogtitlepic":952,"socialimg":953,"customExcerpt":954,"keywords":955,"contactInContent":956,"asideNav":1019,"maxContent":325,"published":325,"scripts":1041},"en","Autopilot Device Preparation Becomes the Standard: What This Means for Hybrid Join","h2-font-size","2026-10-29",[22],"head-hybrid-join.jpg","https://res.cloudinary.com/c4a8/image/upload/blog/heads/head-hybrid-join.jpg","Since September, Microsoft has recommended Autopilot Device Preparation as the standard for user-driven Windows deployments. The new approach is genuinely simpler and more reliable, but it only supports Entra Join. For anyone still rolling out new devices with Hybrid Join today, that is the real takeaway: switching to Entra Join later will require a reset. We explain what changes compared to classic Autopilot and why we are still rolling out new devices the classic way for now, but consistently with Entra Join.","Autopilot Device Preparation, Windows Autopilot, Device Association, Entra Join, Hybrid Join, Hybrid Join Migration, Intune Provisioning, Enrollment Time Grouping, Enrollment Status Page, Cloud Kerberos Trust, Windows Hello for Business, Cloud PKI, SCEPman, RADIUSaaS, RealmJoin, Managed Intune",{"quote":325,"infos":957},{"bgColor":958,"color":959,"boxBgColor":488,"boxColor":959,"headline":960,"subline":961,"level":528,"textStyling":962,"flush":963,"person":964,"form":979},"var(--color-gk-dark-blue)","var(--color-gk-white)","Get in Touch","Planning the switch from Hybrid Join to Entra Join, dealing with Autopilot deployments that fail more often than you'd like, or looking to manage your Windows devices entirely through Intune? Reach out and we'll take a close look at your environment together.","text-light","justify-content-end",{"image":965,"cloudinary":325,"alt":966,"name":966,"quotee":966,"quoteeTitle":967,"quote":968,"detailsHeader":969,"details":970},"/people/people-alexander-schlindwein.png","Alexander Schlindwein","Workplace Lead","Hybrid Join was always a transitional solution for us, and with Device Preparation Microsoft is now drawing the same line. Every new device you roll out today locks in your device management approach for the entire next hardware cycle. That's why we recommend Entra Join starting with the next device, not the next project.","We look forward to\u003Cbr />hearing from you!",[971,975],{"text":489,"href":972,"details":973,"icon":974},"tel:+49 69 4005520","Call us now","site/phone",{"text":976,"href":977,"icon":978},"sales@glueckkanja.com","mailto:sales@glueckkanja.com","site/mail",{"ctaText":980,"cta":981,"method":945,"action":983,"fields":984},"Submit",{"skin":982},"primary on-surface","/send",[985,989,994,997,1001,1006,1011,1014,1017],{"type":986,"id":987,"value":988},"hidden","_next","successful",{"label":990,"type":991,"id":992,"required":325,"requiredMsg":993},"Name*","text","name","Please enter your name.",{"label":995,"type":991,"id":403,"required":325,"requiredMsg":996},"Company*","Please enter your company.",{"label":998,"type":999,"id":999,"required":325,"requiredMsg":1000},"Email address*","email","Please enter your email address.",{"label":1002,"type":1003,"id":1004,"required":481,"requiredMsg":1005},"Your message","textarea","message","Please enter a message.",{"label":1007,"type":1008,"id":1009,"required":325,"requiredMsg":1010},"Your data will be stored to process and respond to your inquiry. For more information on data protection, please see our \u003Ca href=\"/en/privacy\">Privacy Policy\u003C/a>.","checkbox","dataprotection","Please confirm",{"type":986,"id":1012,"value":1013},"_subject","Form: Autopilot Device Preparation | EN",{"type":986,"id":1015,"value":1016},"inbox_key","default",{"type":986,"id":1018},"_gotcha",{"menuItems":1020},[1021,1023,1025,1027,1029,1032,1034,1037,1039],{"href":1022,"text":531},"#the-key-points",{"href":1024,"text":683},"#what-microsoft-has-announced",{"href":1026,"text":704},"#one-policy-instead-of-four-building-blocks",{"href":1028,"text":733},"#device-preparation-only-supports-entra-join",{"href":1030,"text":1031},"#switching-from-hybrid-to-entra-join-requires-a-reset","From Hybrid to Entra Join",{"href":1033,"text":780},"#why-we-still-recommend-classic-autopilot",{"href":1035,"text":1036},"#our-devices-wont-work-without-domain-join","Can't Work Without Domain Join?",{"href":1038,"text":875},"#conclusion",{"href":1040,"text":890},"#sources",{"form":325},"/posts/2026-10-29-autopilot-device-preparation",{"title":517,"description":526},"posts/2026-10-29-autopilot-device-preparation",[22,1046,594,1047],"Intune","Microsoft Entra ID","F-e2IiHDd5I5MhM7QKqzUIq98_-pl7ahmwpaaVAZ0UU",{"id":1050,"extension":1051,"meta":1052,"stem":8,"__hash__":1407},"authors_data/authors.json","json",{"path":1053,"Fritz Zurhorst":1054,"Alexander Schlindwein":1060,"Sophie Luna":1065,"Nadine Klein":1073,"Karsten Kleinschmidt":1079,"Julian Wendt":1087,"Holger Bunkradt":1092,"Ralf Mania":1098,"Oliver Kieselbach":1104,"Steffen Schwerdtfeger":1110,"Gunnar Winter":1117,"Jan Petersen":1122,"Thorsten Kunzi":1127,"Moritz Pohl":1131,"Thorben Pöschus":1136,"Christoph Hannebauer":1142,"Marco Scheel":1146,"Christopher Brumm":1151,"Florian Klante":1158,"Niklas Bachmann":1163,"Nils Krautkrämer":1168,"Patrick Treptau":1174,"Peter Beckendorf":1179,"Patrick Sobau":1184,"Jörg Wunderlich":1189,"Michael Breither":1193,"Christian Kanja":1198,"Zeba Hoffmann":1204,"Jochen Fröhlich":1209,"Jan Geisbauer":1213,"Gerrit Reinke":1224,"Christian Kordel":1230,"Stephan Wälde":1234,"Carolin Kanja":1239,"Adrian Ritter":1245,"Marvin Bangert":1250,"Thorsten Pickhan":1256,"Christian Lorenz":1262,"Denis Böhm":1267,"Fabian Bader":1272,"Juan Jose Fernandez Perez":1278,"Mahschid Sayyar":1283,"Benjamin Dassow":1288,"Markus Walschburger":1293,"Jonathan Haist":1298,"Daniel Rohregger":1303,"Thomas Naunheim":1308,"Florian Stöckl":1313,"Pascal Asch":1318,"Markus Kättner":1323,"Anna Ulbricht":1330,"Annette Brauns":1337,"Andreas Hötzinger":1343,"body":1349,"title":1406},"/authors",{"display_name":1055,"avatar":1056,"permalink":1057,"linkedin":1058,"imageOffsetTop":1059},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":966,"avatar":1061,"permalink":1062,"twitter":1063,"linkedin":1064},"people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1066,"avatar":1067,"permalink":1068,"twitter":1069,"linkedin":1070,"imageOffsetLeft":1071,"imageOffsetTop":1072},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1074,"avatar":1075,"permalink":1076,"twitter":1077,"linkedin":1078,"imageOffsetTop":1059},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1080,"avatar":1081,"permalink":1082,"twitter":1083,"linkedin":1084,"imageOffsetTop":1085,"imageOffsetLeft":1086},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1088,"avatar":1089,"permalink":1090,"linkedin":1091},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1093,"avatar":1094,"permalink":1095,"linkedin":1096,"twitter":1097},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1099,"avatar":1100,"permalink":1101,"linkedin":1102,"twitter":1103},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1105,"avatar":1106,"permalink":1107,"linkedin":1108,"twitter":1109},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":519,"avatar":1111,"permalink":1112,"linkedin":1113,"twitter":1114,"imageOffsetTop":1115,"imageOffsetLeft":1116},"people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1118,"avatar":1119,"permalink":1120,"twitter":1069,"linkedin":1121},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1123,"avatar":1124,"permalink":1125,"twitter":1069,"linkedin":1126},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":1128,"avatar":1129,"permalink":1130,"twitter":1069,"linkedin":1121,"imageOffsetTop":1059},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1132,"avatar":1133,"permalink":1134,"twitter":1069,"linkedin":1135},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1137,"avatar":1138,"permalink":1139,"twitter":1140,"linkedin":1141},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1143,"avatar":1144,"permalink":1145,"twitter":1069,"linkedin":1121,"imageOffsetTop":1059},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1147,"avatar":1148,"permalink":1149,"twitter":1150,"linkedin":1150},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1152,"avatar":1153,"permalink":1154,"twitter":1155,"linkedin":1156,"imageOffsetTop":1157},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1159,"avatar":1160,"permalink":1161,"linkedin":1162,"twitter":1069},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1164,"avatar":1165,"permalink":1166,"linkedin":1167,"twitter":1069},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1169,"avatar":1170,"permalink":1171,"twitter":1172,"linkedin":1173},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1175,"avatar":1176,"permalink":1177,"linkedin":1178,"twitter":1069},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1180,"avatar":1181,"permalink":1182,"linkedin":1183,"twitter":1069,"imageOffsetTop":1059},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1185,"avatar":1186,"permalink":1187,"linkedin":1188,"twitter":1069},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1190,"avatar":1191,"permalink":1192,"twitter":1069},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1194,"avatar":1195,"permalink":1196,"twitter":1069,"linkedin":1197},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1199,"avatar":1200,"permalink":1201,"twitter":1202,"linkedin":1203},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1205,"avatar":1206,"permalink":1207,"linkedin":1208,"twitter":1069},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1210,"avatar":1211,"permalink":1212,"twitter":1069,"linkedin":1121},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1214,"avatar":1215,"permalink":1216,"twitter":1217,"linkedin":1217,"imageOffsetTop":1059,"socials":1218},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1219,1221],{"text":469,"href":1220},"https://emptydc.com",{"text":1222,"href":1223},"Podcast","https://hairlessinthecloud.com",{"display_name":1225,"avatar":1226,"permalink":1227,"twitter":1228,"linkedin":1229},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1231,"avatar":1232,"permalink":1233,"twitter":1069,"linkedin":1121},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1235,"avatar":1236,"permalink":1237,"twitter":1238,"linkedin":1121},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1240,"avatar":1241,"permalink":1242,"twitter":1243,"linkedin":1244},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1246,"avatar":1247,"permalink":1248,"twitter":1249,"linkedin":1249},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1251,"avatar":1252,"permalink":1253,"twitter":1254,"linkedin":1255},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1257,"avatar":1258,"permalink":1259,"twitter":1260,"linkedin":1261},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1263,"avatar":1264,"permalink":1265,"linkedin":1266,"twitter":1069},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1268,"avatar":1269,"permalink":1270,"linkedin":1271,"twitter":1069},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1273,"avatar":1274,"permalink":1275,"linkedin":1276,"twitter":1277},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1279,"avatar":1280,"permalink":1281,"linkedin":1282},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1284,"avatar":1285,"permalink":1286,"linkedin":1287},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1289,"avatar":1290,"permalink":1291,"linkedin":1292},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1294,"avatar":1295,"permalink":1296,"linkedin":1297},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1299,"avatar":1300,"permalink":1301,"linkedin":1302,"imageOffsetTop":1059},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1304,"avatar":1305,"permalink":1306,"linkedin":1307,"imageOffsetTop":1059},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1309,"avatar":1310,"permalink":1311,"linkedin":1312,"imageOffsetTop":1157},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1314,"avatar":1315,"permalink":1316,"linkedin":1317,"imageOffsetTop":1157},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1319,"avatar":1320,"permalink":1321,"linkedin":1322,"imageOffsetTop":1157},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1324,"avatar":1325,"permalink":1326,"linkedin":1327,"imageOffsetTop":1328,"imageOffsetLeft":1329},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1331,"avatar":1332,"permalink":1333,"linkedin":1334,"imageOffsetTop":1335,"imageOffsetLeft":1336},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1338,"avatar":1339,"permalink":1340,"linkedin":1341,"imageOffsetTop":1342,"imageOffsetLeft":1085},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347,"imageOffsetTop":1348},"Andreas Hötzinger","people/at-andreas-hoetzinger.png","/authors/andreas-hoetzinger","andreashoetzinger","75%",{"Fritz Zurhorst":1350,"Alexander Schlindwein":1351,"Sophie Luna":1352,"Nadine Klein":1353,"Karsten Kleinschmidt":1354,"Julian Wendt":1355,"Holger Bunkradt":1356,"Ralf Mania":1357,"Oliver Kieselbach":1358,"Steffen Schwerdtfeger":1359,"Gunnar Winter":1360,"Jan Petersen":1361,"Thorsten Kunzi":1362,"Moritz Pohl":1363,"Thorben Pöschus":1364,"Christoph Hannebauer":1365,"Marco Scheel":1366,"Christopher Brumm":1367,"Florian Klante":1368,"Niklas Bachmann":1369,"Nils Krautkrämer":1370,"Patrick Treptau":1371,"Peter Beckendorf":1372,"Patrick Sobau":1373,"Jörg Wunderlich":1374,"Michael Breither":1375,"Christian Kanja":1376,"Zeba Hoffmann":1377,"Jochen Fröhlich":1378,"Jan Geisbauer":1379,"Gerrit Reinke":1383,"Christian Kordel":1384,"Stephan Wälde":1385,"Carolin Kanja":1386,"Adrian Ritter":1387,"Marvin Bangert":1388,"Thorsten Pickhan":1389,"Christian Lorenz":1390,"Denis Böhm":1391,"Fabian Bader":1392,"Juan Jose Fernandez Perez":1393,"Mahschid Sayyar":1394,"Benjamin Dassow":1395,"Markus Walschburger":1396,"Jonathan Haist":1397,"Daniel Rohregger":1398,"Thomas Naunheim":1399,"Florian Stöckl":1400,"Pascal Asch":1401,"Markus Kättner":1402,"Anna Ulbricht":1403,"Annette Brauns":1404,"Andreas Hötzinger":1405},{"display_name":1055,"avatar":1056,"permalink":1057,"linkedin":1058,"imageOffsetTop":1059},{"display_name":966,"avatar":1061,"permalink":1062,"twitter":1063,"linkedin":1064},{"display_name":1066,"avatar":1067,"permalink":1068,"twitter":1069,"linkedin":1070,"imageOffsetLeft":1071,"imageOffsetTop":1072},{"display_name":1074,"avatar":1075,"permalink":1076,"twitter":1077,"linkedin":1078,"imageOffsetTop":1059},{"display_name":1080,"avatar":1081,"permalink":1082,"twitter":1083,"linkedin":1084,"imageOffsetTop":1085,"imageOffsetLeft":1086},{"display_name":1088,"avatar":1089,"permalink":1090,"linkedin":1091},{"display_name":1093,"avatar":1094,"permalink":1095,"linkedin":1096,"twitter":1097},{"display_name":1099,"avatar":1100,"permalink":1101,"linkedin":1102,"twitter":1103},{"display_name":1105,"avatar":1106,"permalink":1107,"linkedin":1108,"twitter":1109},{"display_name":519,"avatar":1111,"permalink":1112,"linkedin":1113,"twitter":1114,"imageOffsetTop":1115,"imageOffsetLeft":1116},{"display_name":1118,"avatar":1119,"permalink":1120,"twitter":1069,"linkedin":1121},{"display_name":1123,"avatar":1124,"permalink":1125,"twitter":1069,"linkedin":1126},{"display_name":1128,"avatar":1129,"permalink":1130,"twitter":1069,"linkedin":1121,"imageOffsetTop":1059},{"display_name":1132,"avatar":1133,"permalink":1134,"twitter":1069,"linkedin":1135},{"display_name":1137,"avatar":1138,"permalink":1139,"twitter":1140,"linkedin":1141},{"display_name":1143,"avatar":1144,"permalink":1145,"twitter":1069,"linkedin":1121,"imageOffsetTop":1059},{"display_name":1147,"avatar":1148,"permalink":1149,"twitter":1150,"linkedin":1150},{"display_name":1152,"avatar":1153,"permalink":1154,"twitter":1155,"linkedin":1156,"imageOffsetTop":1157},{"display_name":1159,"avatar":1160,"permalink":1161,"linkedin":1162,"twitter":1069},{"display_name":1164,"avatar":1165,"permalink":1166,"linkedin":1167,"twitter":1069},{"display_name":1169,"avatar":1170,"permalink":1171,"twitter":1172,"linkedin":1173},{"display_name":1175,"avatar":1176,"permalink":1177,"linkedin":1178,"twitter":1069},{"display_name":1180,"avatar":1181,"permalink":1182,"linkedin":1183,"twitter":1069,"imageOffsetTop":1059},{"display_name":1185,"avatar":1186,"permalink":1187,"linkedin":1188,"twitter":1069},{"display_name":1190,"avatar":1191,"permalink":1192,"twitter":1069},{"display_name":1194,"avatar":1195,"permalink":1196,"twitter":1069,"linkedin":1197},{"display_name":1199,"avatar":1200,"permalink":1201,"twitter":1202,"linkedin":1203},{"display_name":1205,"avatar":1206,"permalink":1207,"linkedin":1208,"twitter":1069},{"display_name":1210,"avatar":1211,"permalink":1212,"twitter":1069,"linkedin":1121},{"display_name":1214,"avatar":1215,"permalink":1216,"twitter":1217,"linkedin":1217,"imageOffsetTop":1059,"socials":1380},[1381,1382],{"text":469,"href":1220},{"text":1222,"href":1223},{"display_name":1225,"avatar":1226,"permalink":1227,"twitter":1228,"linkedin":1229},{"display_name":1231,"avatar":1232,"permalink":1233,"twitter":1069,"linkedin":1121},{"display_name":1235,"avatar":1236,"permalink":1237,"twitter":1238,"linkedin":1121},{"display_name":1240,"avatar":1241,"permalink":1242,"twitter":1243,"linkedin":1244},{"display_name":1246,"avatar":1247,"permalink":1248,"twitter":1249,"linkedin":1249},{"display_name":1251,"avatar":1252,"permalink":1253,"twitter":1254,"linkedin":1255},{"display_name":1257,"avatar":1258,"permalink":1259,"twitter":1260,"linkedin":1261},{"display_name":1263,"avatar":1264,"permalink":1265,"linkedin":1266,"twitter":1069},{"display_name":1268,"avatar":1269,"permalink":1270,"linkedin":1271,"twitter":1069},{"display_name":1273,"avatar":1274,"permalink":1275,"linkedin":1276,"twitter":1277},{"display_name":1279,"avatar":1280,"permalink":1281,"linkedin":1282},{"display_name":1284,"avatar":1285,"permalink":1286,"linkedin":1287},{"display_name":1289,"avatar":1290,"permalink":1291,"linkedin":1292},{"display_name":1294,"avatar":1295,"permalink":1296,"linkedin":1297},{"display_name":1299,"avatar":1300,"permalink":1301,"linkedin":1302,"imageOffsetTop":1059},{"display_name":1304,"avatar":1305,"permalink":1306,"linkedin":1307,"imageOffsetTop":1059},{"display_name":1309,"avatar":1310,"permalink":1311,"linkedin":1312,"imageOffsetTop":1157},{"display_name":1314,"avatar":1315,"permalink":1316,"linkedin":1317,"imageOffsetTop":1157},{"display_name":1319,"avatar":1320,"permalink":1321,"linkedin":1322,"imageOffsetTop":1157},{"display_name":1324,"avatar":1325,"permalink":1326,"linkedin":1327,"imageOffsetTop":1328,"imageOffsetLeft":1329},{"display_name":1331,"avatar":1332,"permalink":1333,"linkedin":1334,"imageOffsetTop":1335,"imageOffsetLeft":1336},{"display_name":1338,"avatar":1339,"permalink":1340,"linkedin":1341,"imageOffsetTop":1342,"imageOffsetLeft":1085},{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347,"imageOffsetTop":1348},"Authors","ByqFp0GQyhHZsbtcA_HFJk8O1buC5lC502rPVTWDQDs",{"list":1409,"authors":1678},[1410,1415,1430,1454,1475,1496,1519,1539,1558,1578,1597,1620,1634,1649,1667],{"id":516,"title":517,"author":1411,"cta":491,"description":526,"hideInRecent":481,"layout":945,"meta":1412,"moment":950,"path":1042,"stem":1044,"tags":1414,"webcast":481},[519],{"lang":947,"date":950,"categories":1413,"blogtitlepic":952,"customExcerpt":954},[22],[22,1046,594,1047],{"id":1416,"title":1417,"author":1418,"cta":491,"description":932,"hideInRecent":481,"layout":945,"meta":1419,"moment":1420,"path":1424,"stem":1425,"tags":1426,"webcast":481},"content_en/posts/2026-10-20-who-built-these-agents.md","Who Built These Agents?",[1344],{"lang":947,"date":1420,"categories":1421,"blogtitlepic":1422,"customExcerpt":1423},"2026-10-20",[235],"head-building-ai-agents.jpg","E7 bundles E5, Copilot, the Entra Suite and Agent 365. But a license doesn't clean up your tenant. Who is accountable for an agent and what it can access is a decision for operations, not procurement.","/posts/2026-10-20-who-built-these-agents","posts/2026-10-20-who-built-these-agents",[235,1047,1427,1428,1429],"Agent 365","AI","Identity Governance",{"id":1431,"title":1432,"author":1433,"cta":491,"description":932,"hideInRecent":481,"layout":945,"meta":1434,"moment":1447,"path":1448,"stem":1449,"tags":1450,"webcast":481},"content_en/posts/2026-09-22-end-of-mfa-sms.md","The End of MFA via SMS",[1080],{"lang":947,"date":1435,"categories":1436,"blogtitlepic":1437,"customExcerpt":1438,"hreflang":1439},"2026-09-21",[235],"head-conditional-access.jpg","Why organizations should move to phishing-resistant and passwordless authentication now.",[1440,1442,1444],{"lang":4,"href":1441},"/de/posts/2026-09-22-end-of-mfa-sms",{"lang":947,"href":1443},"/en/posts/2026-09-22-end-of-mfa-sms",{"lang":1445,"href":1446},"es","/es/posts/2026-09-22-end-of-mfa-sms","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[235,1451,1047,1452,1453],"Authentication","MFA","Passkeys",{"id":1455,"title":1456,"author":1457,"cta":491,"description":932,"hideInRecent":481,"layout":945,"meta":1458,"moment":1435,"path":1469,"stem":1470,"tags":1471,"webcast":481},"content_en/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. When the user is the exploit, and how to stop it",[1055,1074],{"lang":947,"date":1435,"categories":1459,"blogtitlepic":1460,"customExcerpt":1461,"hreflang":1462},[235],"head-clickfix.jpg","ClickFix turns users into their own attacker: a fake CAPTCHA, a copy-paste, and malware runs in memory with nothing on disk to scan. How Microsoft Defender detects the attack, where it falls short, and how to close the gap with a RunMRU hunt and four layers of prevention.",[1463,1465,1467],{"lang":4,"href":1464},"/de/posts/2026-09-21-clickfix-prevent-detect",{"lang":947,"href":1466},"/en/posts/2026-09-21-clickfix-prevent-detect",{"lang":1445,"href":1468},"/es/posts/2026-09-21-clickfix-prevent-detect","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1472,1473,1474],"Defender","SOC","Endpoint Security",{"id":1476,"title":1477,"author":1478,"cta":491,"description":932,"hideInRecent":481,"layout":945,"meta":1479,"moment":1435,"path":1490,"stem":1491,"tags":1492,"webcast":481},"content_en/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin Work and Everyday Work on One Machine? Game Over.",[1214],{"lang":947,"date":1435,"categories":1480,"blogtitlepic":1481,"customExcerpt":1482,"hreflang":1483},[235],"head-game-over-en.jpg","Why one tenant is not enough for CIOs, and why the second one is rarely part of the plan. The Managed Red Tenant separates administrative work from the office environment architecturally, the Managed Dark Tenant keeps the business able to act when the defenses fall anyway. What that means for the operating model, the SOC signal and the evidence obligations under NISG 2026.",[1484,1486,1488],{"lang":4,"href":1485},"/de/posts/2026-09-21-red-tenant-dark-tenant-cio",{"lang":947,"href":1487},"/en/posts/2026-09-21-red-tenant-dark-tenant-cio",{"lang":1445,"href":1489},"/es/posts/2026-09-21-red-tenant-dark-tenant-cio","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[235,1493,1494,1495],"Privileged Access","Zero Trust","NIS2",{"id":1497,"title":1498,"author":1499,"cta":491,"description":1500,"hideInRecent":481,"layout":945,"meta":1501,"moment":1502,"path":1514,"stem":1515,"tags":1516,"webcast":481},"content_en/posts/2026-08-08-isg-germany-2026.md","Four Times Leader. glueckkanja in the ISG Study Germany 2026",[1240],"ISG renamed its study this year. The Microsoft Cloud Ecosystem became the Microsoft AI and Cloud Ecosystem, and the yardstick moved with the name: the study no longer assesses who adopts Microsoft platforms but who runs Copilot, agents, and AI workloads under control. The new yardstick has not changed our position. The ISG Provider Lens® study Germany 2026 positions us as a Leader in four quadrants: Microsoft Productivity and Business Process Services and Azure Managed Services, each in the large market and the mid market. After 2021, 2023, 2024, and 2025, it is our fifth Leader rating in Germany, and in Switzerland, the jump into the Leader quadrant came two weeks earlier.",{"lang":947,"date":1502,"categories":1503,"blogtitlepic":1505,"customExcerpt":1506,"hreflang":1507},"2026-08-08",[1504],"Corporate","head-isg-de-2026.png","The ISG Provider Lens® study 2026 positions glueckkanja as a Leader in Germany in four quadrants: Microsoft Productivity and Business Process Services and Azure Managed Services, each in the large and mid market. The study is now called Microsoft AI and Cloud Ecosystem, and the yardstick has shifted: what counts is who runs AI and agent workloads under control.",[1508,1510,1512],{"lang":4,"href":1509},"/de/posts/2026-08-08-isg-germany-2026",{"lang":947,"href":1511},"/en/posts/2026-08-08-isg-germany-2026",{"lang":1445,"href":1513},"/es/posts/2026-08-08-isg-germany-2026","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1517,1518],"Award","ISG",{"id":1520,"title":1521,"author":1522,"cta":491,"description":1523,"hideInRecent":481,"layout":945,"meta":1524,"moment":1525,"path":1536,"stem":1537,"tags":1538,"webcast":481},"content_en/posts/2026-07-31-isg-switzerland-2026.md","From Rising Star to Leader. glueckkanja in the ISG Study Switzerland 2026",[1240],"In 2024, we founded glueckkanja Switzerland AG and moved into an office at zentroom, Bahnhofplatz 10b, in Bern. In 2025, ISG named us a Rising Star in the Swiss market, the provider its analysts expected to reach the Leader quadrant. Now that leap is on record: the ISG Provider Lens® study 2026 positions us as a Leader in Switzerland in the Microsoft AI and Cloud Ecosystem quadrant, in the areas of Azure Managed Services and Microsoft Productivity and Business Process Services.",{"lang":947,"date":1525,"categories":1526,"blogtitlepic":1527,"customExcerpt":1528,"hreflang":1529},"2026-07-31",[1504],"head-isg-ch-2026.png","The ISG Provider Lens® study 2026 positions glueckkanja as a Leader in Switzerland in the Microsoft AI and Cloud Ecosystem quadrant, for Azure Managed Services and Microsoft Productivity and Business Process Services. Two years after entering the market in Bern, one year after being named Rising Star.",[1530,1532,1534],{"lang":4,"href":1531},"/de/posts/2026-07-31-isg-switzerland-2026",{"lang":947,"href":1533},"/en/posts/2026-07-31-isg-switzerland-2026",{"lang":1445,"href":1535},"/es/posts/2026-07-31-isg-switzerland-2026","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1517,1518],{"id":1540,"title":1541,"author":1542,"cta":491,"description":932,"hideInRecent":481,"layout":945,"meta":1543,"moment":1544,"path":1555,"stem":1556,"tags":1557,"webcast":481},"content_en/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. What the OpenAI/Hugging Face incident reveals and what it doesn't",[1214],{"lang":947,"date":1544,"categories":1545,"blogtitlepic":1546,"customExcerpt":1547,"hreflang":1548},"2026-07-24",[235],"head-outbreak.jpg","An AI agent breaks out of its test environment, finds a zero-day, and hacks another company. Sounds like a movie script, but it actually happened in July 2026. Time for a sober assessment: with a bit of psychology, two security veterans, and the question of what this means for your defense.",[1549,1551,1553],{"lang":4,"href":1550},"/de/posts/2026-07-24-outbreak-openai-hugging-face",{"lang":947,"href":1552},"/en/posts/2026-07-24-outbreak-openai-hugging-face",{"lang":1445,"href":1554},"/es/posts/2026-07-24-outbreak-openai-hugging-face","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1428,1473,1494],{"id":1559,"title":1560,"author":1561,"cta":491,"description":1562,"hideInRecent":481,"layout":945,"meta":1563,"moment":1564,"path":1575,"stem":1576,"tags":1577,"webcast":481},"content_en/posts/2026-07-22-isg-cybersecurity-2026.md","Leader and Rising Star. glueckkanja in the ISG Cybersecurity Study 2026",[1240],"New to the quadrant and straight in as a Leader: The ISG Provider Lens® study \"Cybersecurity – Services and Solutions 2026\" positions glueckkanja as a Leader in Next-Gen SOC/MDR Services for the German midmarket. In the overall market for Next-Gen SOC/MDR Services, ISG names us the Rising Star, the provider its analysts expect to reach the Leader quadrant within the next 12 to 24 months.",{"lang":947,"date":1564,"categories":1565,"blogtitlepic":1566,"customExcerpt":1567,"hreflang":1568},"2026-07-22",[1504],"head-isg-cybersecurity-2026.png","The ISG Provider Lens® study Cybersecurity 2026 names glueckkanja a Leader in the Next-Gen SOC/MDR Services (Midmarket) quadrant. In the overall market for Next-Gen SOC/MDR Services, we are the Rising Star. ISG credits us with above-average growth, deep Microsoft security expertise, and a 24/7 SOC operated from Germany.",[1569,1571,1573],{"lang":4,"href":1570},"/de/posts/2026-07-22-isg-cybersecurity-2026",{"lang":947,"href":1572},"/en/posts/2026-07-22-isg-cybersecurity-2026",{"lang":1445,"href":1574},"/es/posts/2026-07-22-isg-cybersecurity-2026","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1517,1518,235],{"id":1579,"title":1580,"author":1581,"cta":491,"description":1582,"hideInRecent":481,"layout":945,"meta":1583,"moment":1584,"path":1594,"stem":1595,"tags":1596,"webcast":481},"content_en/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: What AI Actually Needs to Get to Work",[1240],"A manufacturing company wants to know which of its 14,000 SKUs actually turn a profit. The answer sits in three systems that have never exchanged a single data point. Until recently, getting it required three departments, two weeks and a good deal of goodwill. Since early 2026, an AI can answer that question in minutes: search the data, draw connections, produce a recommendation. Provided, that is, it has access.",{"lang":947,"date":1584,"categories":1585,"blogtitlepic":1586,"hreflang":1587},"2026-07-06",[131],"head-the-holy-trinity",[1588,1590,1592],{"lang":4,"href":1589},"/de/posts/2026-07-06-the-holy-trinity",{"lang":947,"href":1591},"/en/posts/2026-07-06-the-holy-trinity",{"lang":1445,"href":1593},"/es/posts/2026-07-06-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1428,131],{"id":1598,"title":1599,"author":1600,"cta":491,"description":1601,"hideInRecent":481,"layout":945,"meta":1602,"moment":1603,"path":1614,"stem":1615,"tags":1616,"webcast":481},"content_en/posts/2026-07-01-onboarding-process.md","Contract Signed: Here's How Your Onboarding Works",[1331],"How does onboarding work at your company? A question that comes up again and again in conversations with applicants, because many have already experienced an onboarding that felt bumpy. That's exactly why it matters to us to give you a good feeling right from the start.",{"lang":947,"date":1603,"categories":1604,"blogtitlepic":1605,"customExcerpt":1606,"hreflang":1607},"2026-07-01",[1504],"Onboarding_Blogheader","Your contract is signed, the first big step is done. But what happens now? We take you behind the scenes of our onboarding, from pre-boarding to your first week with the team.",[1608,1610,1612],{"lang":4,"href":1609},"/de/posts/2026-07-01-onboarding-process",{"lang":947,"href":1611},"/en/posts/2026-07-01-onboarding-process",{"lang":1445,"href":1613},"/es/posts/2026-07-01-onboarding-process","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1617,1618,1619],"Employer Branding","Onboarding","Company Culture",{"id":1621,"title":1622,"author":1623,"cta":491,"description":1624,"hideInRecent":481,"layout":945,"meta":1625,"moment":1626,"path":1630,"stem":1631,"tags":1632,"webcast":481},"content_en/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: we are among the few",[1240],"The Microsoft partner ecosystem holds a long list of recognitions, and yet the Frontier Partner Badge sets itself apart from the others by design. It cannot be applied for but is awarded on Microsoft's own initiative to an exclusive circle of partners who have to prove themselves in several disciplines in parallel, rather than shine in a single one. Microsoft examines demonstrated capability across Cloud & AI Platforms, AI Business Solutions, and Security in equal measure, and in doing so addresses companies that do not treat AI as an add-on to existing IT but as the outcome of an end-to-end architecture that holds from identity through the endpoint all the way into productive AI operations.",{"lang":947,"date":1626,"categories":1627,"blogtitlepic":1628,"customExcerpt":1629},"2026-06-26",[1504],"head-frontier-partner-badge.jpg","Microsoft has recently introduced a new top-tier recognition within its AI Cloud Partner Program: the Frontier Partner Badge. It is awarded exclusively to a select circle of partners worldwide who have demonstrated in practice that they can deliver AI projects across the entire Microsoft stack, from workplace and cloud platform to security and the AI application itself. In DACH, only a handful of companies belong to this group, and we are one of them.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1517,1633,1428],"Microsoft Partner",{"id":1635,"title":1636,"author":1637,"cta":491,"description":1638,"hideInRecent":481,"layout":945,"meta":1639,"moment":1640,"path":1644,"stem":1645,"tags":1646,"webcast":481},"content_en/posts/2026-06-09-vair-run.md","160 Kilometers for a Good Cause",[1338],"Sunday morning, 8:30 am, Holbeinsteg on the Main. Eleven colleagues in matching NinjaCat shirts, ready for the Frankfurter Runden. Rain, lightning, and thunder included. Running for a good cause turned out to be all the motivation anyone needed to lace up despite the weather.",{"lang":947,"date":1640,"categories":1641,"blogtitlepic":1642,"customExcerpt":1643},"2026-06-08",[1504],"frankfurter-runden.png","Eleven colleagues, 16 laps, 160 kilometers, a thunderstorm, and a podium finish: glueckkanja took part in the Frankfurter Runden 2026 and donated to VAIR e.V. for every lap completed, supporting an inclusive sports and cultural park in Offenbach.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1647,1617,1648],"Top Employer","Social Engagement",{"id":1650,"title":1651,"author":1652,"cta":491,"description":1653,"hideInRecent":481,"layout":945,"meta":1654,"moment":1655,"path":1659,"stem":1660,"tags":1661,"webcast":481},"content_en/posts/2026-04-10-incident-to-intelligence.md","Anatomy of an Unknown AMOS Stealer: From Alert to Immunity in Hours",[1319],"When an alert fires in our SOC, the clock starts. But not just for the affected customer, for every customer we protect. In the modern threat landscape, the most dangerous moment for any organization is the intelligence gap: that window of time between a new malware variant being deployed and the rest of the world finding out it exists.",{"lang":947,"date":1655,"categories":1656,"blogtitlepic":1657,"customExcerpt":1658},"2026-04-10",[235],"head-amos-stealer.png","A previously undocumented AMOS stealer variant compromised a macOS endpoint. No known hashes, no C2 data in any public database. Our SOC dismantled six layers of obfuscation, extracted every indicator, and pushed protection to all SOC customers within hours, before the wider industry had even seen the sample.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1662,1663,1664,1665,1666],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1668,"title":1669,"author":1670,"cta":491,"description":1671,"hideInRecent":481,"layout":945,"meta":1672,"moment":1673,"path":1676,"stem":1677,"tags":491,"webcast":481},"content_en/posts/2026-03-21-microsoft-edge-corporate-browser.md","Why Edge Should Be Your Only Corporate Browser",[519],"In today's enterprise environments, choosing the right browser is more than a matter of preference. It's a strategic decision that impacts security, manageability, and user productivity. While Google Chrome has long been a popular choice, Microsoft Edge has evolved into an enterprise-ready browser that offers compelling advantages, especially when using Microsoft 365 and managed through Microsoft Intune.",{"lang":947,"date":1673,"blogtitlepic":1674,"customExcerpt":1675},"2026-03-21","head-microsoft-edge-default-browser.jpg","The browser nobody satisfies chose became the one everybody manages. Most companies never made a deliberate decision for Chrome; it just showed up, brought its own sync logic, its own account layer, its own policy surface. Meanwhile, Microsoft Edge matured into a browser that plugs directly into the infrastructure enterprises already run: Entra ID, Intune, Defender. This post shows how to make that switch official, redirect Chrome to a landing page via Intune policy, and retire the complexity that comes with maintaining two browsers in parallel.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"Steffen Schwerdtfeger":1679,"Andreas Hötzinger":1680,"Karsten Kleinschmidt":1681,"Fritz Zurhorst":1682,"Nadine Klein":1683,"Jan Geisbauer":1684,"Carolin Kanja":1688,"Anna Ulbricht":1689,"Annette Brauns":1690,"Pascal Asch":1691},{"display_name":519,"avatar":1111,"permalink":1112,"linkedin":1113,"twitter":1114,"imageOffsetTop":1115,"imageOffsetLeft":1116},{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347,"imageOffsetTop":1348},{"display_name":1080,"avatar":1081,"permalink":1082,"twitter":1083,"linkedin":1084,"imageOffsetTop":1085,"imageOffsetLeft":1086},{"display_name":1055,"avatar":1056,"permalink":1057,"linkedin":1058,"imageOffsetTop":1059},{"display_name":1074,"avatar":1075,"permalink":1076,"twitter":1077,"linkedin":1078,"imageOffsetTop":1059},{"display_name":1214,"avatar":1215,"permalink":1216,"twitter":1217,"linkedin":1217,"imageOffsetTop":1059,"socials":1685},[1686,1687],{"text":469,"href":1220},{"text":1222,"href":1223},{"display_name":1240,"avatar":1241,"permalink":1242,"twitter":1243,"linkedin":1244},{"display_name":1331,"avatar":1332,"permalink":1333,"linkedin":1334,"imageOffsetTop":1335,"imageOffsetLeft":1336},{"display_name":1338,"avatar":1339,"permalink":1340,"linkedin":1341,"imageOffsetTop":1342,"imageOffsetLeft":1085},{"display_name":1319,"avatar":1320,"permalink":1321,"linkedin":1322,"imageOffsetTop":1157},{"id":1050,"extension":1051,"meta":1693,"stem":8,"__hash__":1407},{"Steffen Schwerdtfeger":1694},{"display_name":519,"avatar":1111,"permalink":1112,"linkedin":1113,"twitter":1114,"imageOffsetTop":1115,"imageOffsetLeft":1116},1793285825044]