[{"data":1,"prerenderedAt":1825},["ShallowReactive",2],{"sc:header-data-sv":3,"sc:footer-data-sv":489,"post-sv--posts-2026-03-01-exchange-ad-split-permissions-hardening-d948cda78b15d":519,"authors_data":1237,"content-sv-list-7b291c2dd91a4":1591,"authors_data:Thorsten Kunzi":1822},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"sv":13},{"title":14,"url":15,"alt":16},"Hem","/sv","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"sv":21},{"title":22,"description":23},"Workplace","Microsoft 365-driven för smarta, säkra och flexibla arbetsmiljöer som förenar den senaste tekniken och identitetslösningar.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"sv":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"sv":34},{"title":35,"url":36},"Managed Intune","/sv/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"sv":40},{"title":41,"url":42},"Managed Entra","/sv/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"sv":46},{"title":47,"url":48},"Managed Workplace","/sv/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"sv":52},{"title":53,"url":54},"Consulting Services","/sv/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"sv":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"sv":64},{"title":65,"url":66},"Microsoft Entra Suite","/sv/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"sv":70},{"title":71,"url":72},"Microsoft Intune","/sv/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"sv":76},{"title":77,"url":78},"Microsoft Windows","/sv/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"sv":82},{"title":83,"url":84},"Windows 365 Cloud PC","/sv/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"sv":88},{"title":89,"url":90},"Cloud Workplace Foundation","/sv/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"sv":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"sv":100},{"title":101,"url":102},"Microsoft 365 Copilot","/sv/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"sv":106},{"title":107,"url":108},"Teams","/sv/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"sv":112},{"title":113,"url":114},"SharePoint & Power Platform","/sv/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"sv":118},{"title":119,"url":120},"Exchange Online","/sv/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"sv":124},{"title":125,"url":126},"Information Protection & Compliance","/sv/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"sv":130},{"title":131,"description":132},"Azure","Driv tillväxt med Azure: Sänk molnkostnaderna, öka effektiviteten och driv innovation genom IaaS och PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"sv":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"sv":142},{"title":143,"url":144},"Azure Managed Services","/sv/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"sv":148},{"title":149,"url":150},"Azure Consulting","/sv/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"sv":154},{"title":155},"Scenarier",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"sv":160},{"title":161,"url":162},"Planera ditt moln","/sv/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"sv":166},{"title":167,"url":168},"Migrera till molnet","/sv/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"sv":172},{"title":173,"url":174},"Förnya din verksamhet","/sv/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"sv":178},{"title":179,"url":180},"Ompröva din VMware-strategi","/sv/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"sv":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"sv":190},{"title":191,"url":192},"Azure Foundation","/sv/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"sv":196},{"title":197,"url":198},"Azure AI Foundation","/sv/azure/azure-ai-foundation",{"name":86,"languages":200},{"sv":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"sv":205},{"title":206,"url":207},"Azure Data Foundation","/sv/azure/azure-data-foundation",{"name":188,"languages":209},{"sv":210},{"title":211,"url":212},"Azure Container Foundation","/sv/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"sv":216},{"title":217,"url":218},"Managed Dark Tenant","/sv/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"sv":222},{"title":223,"url":224},"Cloud Adoption Framework","/sv/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"sv":228},{"title":229,"url":230},"Cloud Competence Center","/sv/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"sv":234},{"title":235,"description":236,"emergency":237},"Säkerhet","Vaksamhet i molnet med en prisbelönt managed service dygnet runt, incident response och toppmodernt skydd för din infrastruktur.",{"text":238,"href":239,"skin":240,"icon":241},"Attackerad?","/sv/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"sv":249},{"title":250,"url":251},"Managed Red Tenant","/sv/security/managed-red-tenant",{"name":214,"languages":253},{"sv":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"sv":259},{"title":260,"url":261},"Sentinel Data Lake","/sv/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"sv":265},{"title":266,"url":267},"Security Consulting","/sv/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"sv":274},{"title":275,"url":276},"Cloud Security Operations Center","/sv/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"sv":280},{"title":281,"url":282},"Global Secure Access","/sv/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"sv":286},{"title":287,"url":288},"MyWorkID","/sv/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"sv":295},{"title":296,"url":297},"Preventive Services","/sv/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"sv":301},{"title":302,"url":303},"Data Security Service","/sv/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"sv":307},{"title":308,"url":309},"Security Copilot Agents","/sv/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"sv":313},{"title":314,"url":315},"Implementera NIS2","/sv/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"sv":319},{"title":320,"description":321},"Produkter","Innovativa kompletterande produkter för en helt säker, 100% cloud-native Microsoft-miljö som förbättrar samarbete, nätverksautentisering och programvaruhantering.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"sv":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Molnbaserad programvarudistribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"sv":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certifikatdistribution från molnet",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"sv":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Arbeta lokalt med dina Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"sv":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrera dina data från en server till en annan",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"sv":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider för Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"sv":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Autentisering för ditt nätverk",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"sv":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Hitta kontakter i Microsoft Teams",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"sv":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-övervakning i realtid",{"name":396,"languages":397},"casestudies",{"sv":398},{"title":399,"url":400,"description":401},"Kundcase","/sv/casestudies","Pionjär i molnet: Din främsta Microsoft-partner för heltäckande molnlösningar med ett Blueprint-baserat tillvägagångssätt och expertis inom Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"sv":405},{"title":406,"description":401},"Företag",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"sv":411},{"title":412},"Om oss",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"sv":417},{"title":418,"url":419},"Fakta och siffror","/sv/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"sv":423},{"title":424,"url":425},"Kontakt och platser","/sv/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"sv":429},{"title":430,"url":431},"glueckkanja Schweiz","/sv/company/switzerland",{"name":433,"languages":434},"austria",{"sv":435},{"title":436,"url":437},"glueckkanja Österrike","/sv/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"sv":441},{"title":442},"Karriär",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"sv":447},{"title":448,"url":449},"Karriäröversikt","/sv/career",{"name":451,"languages":452},"company-young-professionals",{"sv":453},{"title":454,"url":455},"Young Professionals","/sv/young-professionals",{"name":457,"languages":458},"company-jobs",{"sv":459},{"title":460,"url":461},"Lediga jobb","/sv/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"sv":465},{"title":466},"Aktuellt",[468,474],{"name":469,"languages":470},"company-blog",{"sv":471},{"title":472,"url":473},"Blogg","/sv/blog",{"name":469,"languages":475},{"sv":476},{"title":477,"url":478},"Event","/sv/events",[480],{"name":481,"languages":482},"career-meta",{"sv":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"sv":487},{"title":488,"url":425,"active":484},"Kontakt",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksSv":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"Integritetspolicy","/sv/privacy",{"title":514,"url":515},"Juridisk information","/sv/imprint",{"title":517,"url":518},"Inga cookies","/sv/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":1194,"eventid":494,"extension":1209,"hideInRecent":484,"layout":1210,"meta":1211,"moment":1215,"navigation":325,"path":1233,"seo":1234,"stem":1235,"tags":494,"webcast":484,"__hash__":1236},"content_sv/posts/2026-03-01-exchange-ad-split-permissions-hardening.md","Exchange AD Split Permissions utan ånger",[523],"Thorsten Kunzi",{"type":525,"value":526,"toc":1193},"minimal",[527,532,536,543,549,568,571,578,583,587,596,611,617,620,625,661,685,689,697,706,711,727,731,737,742,747,808,813,850,853,857,872,879,895,906,910,913,959,962,971,980,983,998,1015,1028,1040,1045,1104,1108,1113,1133,1140,1164,1168,1171,1174,1189],[528,529,531],"h2",{"id":530},"tldr-tänk-om-vi-tar-bort-nackdelarna","TLDR: tänk om vi tar bort nackdelarna?",[533,534,535],"p",{},"Jag hittade ett sätt att återtilldela AD- och RBAC-behörigheter direkt där Exchange-användare, grupper och kontakter ligger, utan att kräva några ändringar för administratörer eller identity management-system. Enligt min erfarenhet har just den friktionen varit det främsta hindret för de flesta företag. Och vi behåller ändå säkerhetsvinsterna mot lateral förflyttning och kompromettering av domänen.",[533,537,538],{},[539,540],"img",{"alt":541,"src":542},"Active Directory","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_1.png",[533,544,545],{},[546,547,548],"strong",{},"Det görs i tre steg:",[550,551,553,562,565],"ol",{"style":552},"margin: 0.25rem 0",[554,555,556,557],"li",{},"Implementera ",[558,559,561],"a",{"href":560},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions#switch-to-active-directory-split-permissions","modellen AD split permissions",[554,563,564],{},"Ge Exchange-servrarna de förlorade AD-behörigheterna, men bara på de relevanta OU:erna",[554,566,567],{},"Tilldela Exchange RBAC för att återaktivera saknade PowerShell-cmdlets",[533,569,570],{},"Allt via Microsofts vägledning, AD-ACL:er eller Exchange RBAC-tilldelningar.",[572,573],"video-frame",{"thumb":574,"alt":575,"id":576,":full-width":577},"/thumbs/thumb-exchange-ad-split-permissions-webcast.jpg","A presenter sits in front of a laptop explaining a slide titled Step 1: Active Directory Permissions by glueckkanja. The slide covers how to implement Microsoft Exchange AD Split Permissions, including PowerShell commands for creating a delegation group (New-ADGroup, Add-ADGroupMember) and applying permissions via the script Add-ExchangeADSplitPermissionOnOU.ps1.","soNZkNRopSQ","true",[579,580,582],"div",{"style":581},"background:var(--color-gk-light-grey); margin-top:0.5rem; padding:0.5rem 1rem; font-size:0.85rem; color:var(--color-gk-dark-blue)","Webcast: Exchange AD Split Permissions utan ånger. En steg-för-steg-guide för implementeringen",[528,584,586],{"id":585},"varför-bryr-vi-oss-nu","Varför bryr vi oss (nu)?",[533,588,589,590,593,595],{},"Den har till stor del förbisetts eller ignorerats sedan den introducerades med Exchange 2010 SP1. Men standardmodellen med delade behörigheter (shared permissions) utgör en stor säkerhetsrisk för övertagande av Active Directory. Kombinerat med att Exchange varit ökänt för fjärrexploits de senaste åren är det dags att agera.",[591,592],"br",{},[591,594],{},"\nProblemet härrör från behörigheter som tilldelas domänens rot och som ärvs genom hela domänen.",[597,598,599,602,605,608],"ul",{"style":552},[554,600,601],{},"ändra behörigheter på användare och grupper (i praktiken full åtkomst)",[554,603,604],{},"ändra gruppmedlemmar",[554,606,607],{},"återställa lösenord på användare",[554,609,610],{},"skapa/ta bort användare och grupper",[533,612,613],{},[539,614],{"alt":615,"src":616},"Permissions","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_2.png",[533,618,619],{},"Endast vissa högprivilegierade Tier 0-användare och grupper skyddas av AdminSDHolder-processen (attributet admincount=1), och i många miljöer finns oskyddade användare eller grupper som kan möjliggöra kompromettering av domänen och/eller skogen, eller åtminstone orsaka allvarlig påverkan.",[533,621,622],{},[546,623,624],{},"Framträdande exempel:",[597,626,627,630,650],{"style":552},[554,628,629],{},"Entra Connect Sync-konto vid användning av Password Hash Sync",[554,631,632,633],{},"Standardgrupper",[597,634,636,639,647],{"style":635},"margin: 0",[554,637,638],{},"Allowed RODC Password Replication Group tillsammans med Entra Connect-konto (om en riktig Windows-RODC finns)",[554,640,641,642,646],{},"Se även ",[558,643,645],{"href":644,"target":330},"https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta","Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA) - SpecterOps"," som visar fler vägar (gruppen Account Operators är ett liknande hot)",[554,648,649],{},"Att tömma Protected Users för att skapa attackvägar genom att ta bort skydd",[554,651,652,653],{},"Oskyddade anpassade grupper eller admin-/tjänstekonton",[597,654,655,658],{"style":635},[554,656,657],{},"Skrivbehörighet på GPO:er (som tillämpas på domänkontrollant)",[554,659,660],{},"Hantera åtkomst till AD-backuper, backupserver, PKI-mallar, hypervisor, ...",[533,662,663,664,666,668,669,675,677,679,680],{},"Det är mycket svårt att i efterhand begränsa alla dessa nuvarande och framtida potentiella vägar. För den anpassade _ADM-OU:n kan du inaktivera ACL-arv, men de flesta standardobjekt kan inte flyttas från standard-OU:n Builtin eller containern Users och förblir sårbara.",[591,665],{},[591,667],{},"\nDet är mycket bättre att ta bort de kraftfulla behörigheterna från roten, vilket görs genom att implementera modellen Active Directory split permissions. ",[558,670,674],{"href":671,"rel":672},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions",[673],"nofollow","Configure Exchange Server for split permissions | Microsoft Learn",[591,676],{},[591,678],{},"\nOch Microsoft håller med: “…encouraged to implement Active Directory split permissions” ",[558,681,684],{"href":682,"rel":683},"https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-7-%E2%80%93-implementing-least-privilege/4366626",[673],"Active Directory Hardening Series - Part 7 – Implementing Least Privilege | Microsoft Community Hub",[528,686,688],{"id":687},"men-varför-gör-ingen-det","Men varför gör ingen det?",[533,690,691,692,694,696],{},"Eftersom split permissions inte fanns förrän Exchange 2010 SP1 hade alla accepterat läget vid det laget, och det verkar som att säkerhetsteamen inte lyckades driva igenom det när det väl fanns.",[591,693],{},[591,695],{},"\nOch det hade tvingat fram ändringar i admin- och IDM-processer, som att först skapa användare eller distributionslistor i AD och först därefter använda Exchange för att “mail-aktivera” dem.",[698,699,700],"blockquote",{},[533,701,702,705],{},[546,703,704],{},"Info:"," Följande cmdlets kommer inte längre att vara tillgängliga eller fungera: Add-DistributionGroupMember, New-DistributionGroup, New-Mailbox, New-MailContact, New-MailUser, New-RemoteMailbox, Remove-DistributionGroup, Remove-DistributionGroupMember, Remove-Mailbox, Remove-MailContact, Remove-MailUser, Remove-RemoteMailbox, Update-DistributionGroupMember, Add-ADPermission, Remove-ADPermission",[533,707,708],{},[546,709,710],{},"Exempel på anpassning:",[597,712,713,724],{"style":552},[554,714,715,716],{},"New-Mailbox (där Exchange skriver till AD) skulle bli:",[597,717,718,721],{"style":635},[554,719,720],{},"New-ADUser (där adm.jdoe skriver till AD)",[554,722,723],{},"Enable-Mailbox",[554,725,726],{},"Add-ADPermission för SendAs-rättigheter skulle behöva göras via AD Users and Computers på säkerhetsfliken och kräver ofta ytterligare AD-behörigheter för vanliga administratörer.",[528,728,730],{"id":729},"visa-mig-alternativet-utan-ånger","Visa mig alternativet utan ånger",[533,732,733,736],{},[546,734,735],{},"Disclaimer",": Läs och förstå följande länkar och artiklar fullständigt, gör det i en testmiljö först, se till att AD-backuperna är aktuella och att rutiner för återställning finns på plats.",[738,739,741],"h3",{"id":740},"granska-nuvarande-användning","Granska nuvarande användning",[533,743,744],{},[546,745,746],{},"Du bör först kontrollera vilka av de berörda cmdlets som används på vilka OU:er:",[748,749,750,758,760,766,768],"code-block",{},[751,752,753,757],"span",{},[751,754,756],{"style":755},"color:var(--color-gk-orange)","$CsvPath"," = \"C:\\temp\\SplitPermissionAdminAuditLog.csv\"",[591,759],{},[751,761,762,765],{},[751,763,764],{"style":755},"$Cmdlets"," = \"Add-ADPermission\",\"Remove-ADPermission\",\"New-DistributionGroup\",\"Remove-DistributionGroup\",\"Add-DistributionGroupMember\",\"Update-DistributionGroupMember\",\"Remove-DistributionGroupMember\",\"New-Mailbox\",\"Remove-Mailbox\",\"New-RemoteMailbox\",\"Remove-RemoteMailbox\",\"New-MailUser\",\"Remove-MailUser\",\"New-MailContact\",\"Remove-MailContact\"",[591,767],{},[751,769,770,773,774,778,779,773,782,784,785,788,789,773,792,773,795,773,797,800,801,804,805],{},[751,771,772],{"style":755},"Search-AdminAuditLog"," ",[751,775,777],{"style":776},"color:var(--color-gk-mid-blue)","-ResultSize"," 99000 ",[751,780,781],{"style":776},"-Cmdlets",[751,783,764],{"style":755}," | ",[751,786,787],{"style":755},"Select-Object"," RunDate,Caller,ObjectModified,CmdletName,@{Name='CmdletParameters';Expression={[string]::join(\",\", ($\\_.CmdletParameters))}},succeeded,error | ",[751,790,791],{"style":755},"Export-Csv",[751,793,794],{"style":776},"-Path",[751,796,756],{"style":755},[751,798,799],{"style":776},"-Delimiter"," \";\" ",[751,802,803],{"style":776},"-Encoding"," Unicode ",[751,806,807],{"style":776},"-NoTypeInformation",[533,809,810],{},[546,811,812],{},"Snabbanalys av anropare och cmdlets:",[748,814,815,831,833,841,843],{},[751,816,817,820,821,773,824,773,826,773,828,830],{},[751,818,819],{"style":755},"$CSVs"," = ",[751,822,823],{"style":755},"Import-Csv",[751,825,794],{"style":776},[751,827,756],{"style":755},[751,829,799],{"style":776}," \";\"",[591,832],{},[751,834,835,784,837,840],{},[751,836,819],{"style":755},[751,838,839],{"style":755},"Group-Object"," Caller",[591,842],{},[751,844,845,784,847,849],{},[751,846,819],{"style":755},[751,848,839],{"style":755}," CmdletName",[533,851,852],{},"Analysera CSV-filen för att se var AD-behörigheter kommer att behövas. Optimera eventuellt genom att flytta alla Exchange-relevanta grupper till dedikerade OU:er.",[528,854,856],{"id":855},"aktivera-modellen-split-permissions","Aktivera modellen Split Permissions",[533,858,859,860,863,864,868],{},"Följ Microsofts instruktioner ",[546,861,862],{},"\"Switch to Active Directory split permissions\""," i\n",[558,865,674],{"href":866,"rel":867},"https://learn.microsoft.com/en-us/exchange/configure-exchange-server-for-split-permissions",[673],[869,870,871],"em",{},"(INTE RBAC split permissions)",[533,873,874,875,878],{},"I praktiken tar det bort de farliga behörigheterna för gruppen ",[546,876,877],{},"\"Exchange Windows Permissions\""," och tar även bort Exchange som gruppmedlem.",[748,880,881],{},[751,882,883,773,886,773,889,773,892],{},[751,884,885],{"style":755},"Setup.exe",[751,887,888],{"style":776},"/IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF",[751,890,891],{"style":776},"/PrepareAD",[751,893,894],{"style":776},"/ActiveDirectorySplitPermissions:true",[579,896,898,899,901,902],{"style":897},"background:#f4f4f4; border-left:4px solid var(--color-gk-petrol); border-radius:0 6px 6px 0; padding:0.75rem 1rem; margin:1rem 0; font-size:0.88rem; color:#000520;","\n  ",[546,900,704],{}," För att återgå, använd helt enkelt ",[903,904,905],"code",{},"/ActiveDirectorySplitPermissions:false",[738,907,909],{"id":908},"tilldela-ad-behörigheter","Tilldela AD-behörigheter",[533,911,912],{},"Skapa en anpassad AD-grupp och gör Exchange-servrarna till medlemmar.",[748,914,915,921,923,773,926,929,930,933,934,937,938,773,940,773,943,946,947,949,929,952,955,956],{},[751,916,917],{},[751,918,920],{"style":919},"color:var(--color-black-40)","# adjust OU Path first!",[591,922],{},[751,924,925],{"style":755},"New-ADGroup",[751,927,928],{"style":776},"-Name"," \"AD_Custom Exchange Split permissions replacement\" ",[751,931,932],{"style":776},"-GroupCategory"," Security ",[751,935,936],{"style":776},"-GroupScope"," DomainLocal ",[751,939,794],{"style":776},[546,941,942],{},"\"OU=Rights,OU=Groups,OU=T1,OU=_ADM,$((Get-ADDomain).DistinguishedName)\"",[751,944,945],{"style":776},"-Description"," \"replaces the permissions lost by split permissions on relevant OUs\"",[591,948],{},[751,950,951],{"style":755},"Add-ADGroupMember",[751,953,954],{"style":776},"-Members"," \"Exchange Trusted Subsystem\"\n",[751,957,958],{"style":919},"# reboot Exchange servers for permissions via group to work",[533,960,961],{},"Jag har skapat ett skript som gör det enkelt att delegera AD-behörigheterna per användningsfall.",[698,963,964],{},[533,965,966,967,970],{},"Utan dessa behörigheter skulle Exchange-servern få felet ",[903,968,969],{},"“INSUFF_ACCESS_RIGHTS”"," från AD.",[533,972,973,974,979],{},"Ladda ner ",[558,975,978],{"href":976,"rel":977},"https://github.com/glueckkanja/code-snippets/blob/main/ExchangeADSplitPermission/Add-ExchangeADSplitPermissionOnOU.ps1",[673],"Add-ExchangeADSplitPermissionOnOU.ps1"," från glueckkanja GitHub",[533,981,982],{},"Det kan tilldela följande PermissionTypes:",[533,984,986,989,991,992,994],{"style":985},"background:#f5f5f5;padding:0.5rem 1rem;margin:0.25rem 0;border-left:3px solid #d8d8d8;",[546,987,988],{},"CreateUserAndContact",[591,990],{},"Skapa/ta bort, ResetPassword och WriteAllProperties för Users och Contacts",[591,993],{},[995,996,997],"small",{},"Exchange-cmdlets: `New-Mailbox`, `New-RemoteMailbox`, `New-MailUser`, `New-MailContact` och matchande `Remove-*`",[533,999,1001,1004,1006,1007,1009],{"style":1000},"background:#f5f5f5;padding:0.5rem 1rem;margin:0.25rem 0;border-left:3px solid #d8d8d8",[546,1002,1003],{},"GroupManage",[591,1005],{},"Skapa/ta bort Groups, ändra Member",[591,1008],{},[995,1010,1011,1012,1014],{},"Exchange-cmdlets: `New-DistributionGroup`, `Remove-DistributionGroup`, `Add-DistributionGroupMember`, `Update-DistributionGroupMember`, `Remove-DistributionGroupMember`",[591,1013],{},"Även: användare som hanterar DistributionGroups de äger via EAC",[533,1016,1017,1020,1022,1023,1025],{"style":1000},[546,1018,1019],{},"UserSendAs",[591,1021],{},"Ändra AD-behörigheter på Users",[591,1024],{},[995,1026,1027],{},"Exchange-cmdlet: `Add-ADPermission`",[533,1029,1030,1033,1035,1036,1038],{"style":1000},[546,1031,1032],{},"GroupSendAs",[591,1034],{},"Ändra AD-behörigheter på Groups",[591,1037],{},[995,1039,1027],{},[533,1041,1042],{},[546,1043,1044],{},"Så här använder du skriptet:",[748,1046,1047,773,1049,1052,1053,1056,1057,1060,1061,1064,1066,773,1068,1070,1071,1073,1074,1060,1076,773,1078,1070,1080,1082,1083,1060,1085,773,1087,1089,1090,1092,1093,1060,1095,773,1097,1089,1099,1101,1102,1060],{},[751,1048,978],{"style":755},[751,1050,1051],{"style":776},"-TargetOU"," \u003COU> ",[751,1054,1055],{"style":776},"-PermissionType"," \u003CGroupManage|UserSendAs|GroupSendAs|CreateUserAndContact> ",[751,1058,1059],{"style":776},"-Trustee"," \"AD_Custom Exchange Split permissions replacement\"\n",[751,1062,1063],{"style":919},"# For example",[591,1065],{},[751,1067,978],{"style":755},[751,1069,1051],{"style":776}," \"OU=ExchangeGroups,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" ",[751,1072,1055],{"style":776}," GroupManage ",[751,1075,1059],{"style":776},[751,1077,978],{"style":755},[751,1079,1051],{"style":776},[751,1081,1055],{"style":776}," GroupSendAs ",[751,1084,1059],{"style":776},[751,1086,978],{"style":755},[751,1088,1051],{"style":776}," \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" ",[751,1091,1055],{"style":776}," UserSendAs ",[751,1094,1059],{"style":776},[751,1096,978],{"style":755},[751,1098,1051],{"style":776},[751,1100,1055],{"style":776}," CreateUserAndContact ",[751,1103,1059],{"style":776},[738,1105,1107],{"id":1106},"tilldela-exchange-rbac","Tilldela Exchange RBAC",[533,1109,1110],{},[546,1111,1112],{},"Återaktivera parametern -BypassSecurityGroupManagerCheck för cmdlets Add-DistributionGroupMember och Remove-DistributionGroupMember:",[748,1114,1115],{},[751,1116,1117,773,1120,1122,1123,1126,1127,1129,1130,1132],{},[751,1118,1119],{"style":755},"New-RoleGroup",[751,1121,928],{"style":776}," \"SplitPermission Security Group Creation and Membership\" ",[751,1124,1125],{"style":776},"-Roles"," \"Security Group Creation and Membership\" ",[751,1128,954],{"style":776}," \"Organization Management\",\"Recipient Management\" ",[751,1131,945],{"style":776}," \"Brings back -BypassSecurityGroupManagerCheck to Add-DistributionGroupMember, but also needs AD ACL for Exchange Server on target DLs\"",[698,1134,1135],{},[533,1136,1137,1139],{},[546,1138,704],{}," Annars får du \"-BypassSecurityGroupManagerCheck parameter is not available\" eller \"You don't have sufficient permissions. This operation can only be performed by a manager of the group\"",[533,1141,1142,1144,1147,1149],{},[591,1143],{},[546,1145,1146],{},"Återaktivera cmdlets New-Mailbox, New-RemoteMailbox, New-MailContact, Remove-... med nödvändiga parametrar:",[591,1148],{},[748,1150,1151,773,1153,1155,1156,1158,1159,1129,1161,1163],{},[751,1152,1119],{"style":755},[751,1154,928],{"style":776}," \"SplitPermission Mail Recipient Creation\" ",[751,1157,1125],{"style":776}," \"Mail Recipient Creation\" ",[751,1160,954],{"style":776},[751,1162,945],{"style":776}," \"Brings back New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact and matching Remove-... cmdlets, but additionally Exchange needs AD ACL for Exchange Server on target OUs\"",[528,1165,1167],{"id":1166},"slutsatser","Slutsatser",[533,1169,1170],{},"Jag hoppas att den här guiden hjälper fler organisationer att ta det viktiga steget att säkra sin Active Directory mot kompromettering via Exchange. Utifrån min erfarenhet av att implementera modellen Exchange AD Split Permissions hos flera kunder har jag inte stött på några problem, och införandet har gått smidigt.",[533,1172,1173],{},"Jag hoppas också att Microsoft inför ett inbyggt, OU-baserat sätt att uppnå den här granulariteten, i stället för dagens allt-eller-inget-modell, vilket skulle göra en bred adoption betydligt enklare.",[533,1175,1176,1177,1182,1183,1188],{},"En kommentar om AD Tiering: Logga inte in på Exchange-servrar med Domain Admin eller något annat Tier 0-konto. Behandla Exchange-servrar som Tier 1 och implementera AD Tiering så snart som möjligt. Som ett första steg rekommenderar jag att du använder ",[558,1178,1181],{"href":1179,"rel":1180},"https://www.pingcastle.com/",[673],"PingCastle"," eller ",[558,1184,1187],{"href":1185,"rel":1186},"https://www.semperis.com/purple-knight/",[673],"Purple Knight"," för att bedöma din AD-säkerhet och identifiera exponerade kontrollvägar.",[1190,1191,1192],"style",{},"\ncode {\n  font-size: inherit\n}\n",{"title":1194,"searchDepth":1195,"depth":1195,"links":1196},"",2,[1197,1198,1199,1200,1204,1208],{"id":530,"depth":1195,"text":531},{"id":585,"depth":1195,"text":586},{"id":687,"depth":1195,"text":688},{"id":729,"depth":1195,"text":730,"children":1201},[1202],{"id":740,"depth":1203,"text":741},3,{"id":855,"depth":1195,"text":856,"children":1205},[1206,1207],{"id":908,"depth":1203,"text":909},{"id":1106,"depth":1203,"text":1107},{"id":1166,"depth":1195,"text":1167},"md","post",{"lang":1212,"seoTitle":1213,"titleClass":1214,"date":1215,"blogtitlepic":1216,"socialimg":1217,"customExcerpt":1218,"keywords":1219,"scripts":1220,"asideNav":1221,"maxContent":325,"published":325},"sv","Exchange AD Split Permissions: Säkra Active Directory med Least Privilege","h2-font-size","2026-03-01","head-exchange-ad-split-permissions","/blog/heads/head-exchange-ad-split-permissions.jpg","Även organisationer som helt har migrerat sina postlådor till molnet kör ofta fortfarande Exchange-servrar on-premises, och med dem en underskattad säkerhetsrisk för Active Directory. Modellen \"AD Split Permissions\" fråntar Exchange de breda AD-behörigheter som angripare kan utnyttja för att kompromettera hela domänen. Hittills har införandet till stor del misslyckats på grund av de processförändringar det tvingar på administratörer. Den här artikeln visar hur du elegant tar dig förbi just det hindret: ett skript som selektivt återtilldelar de förlorade AD-behörigheterna enbart på de relevanta OU:erna, bevarar det välkända admin-arbetsflödet och ändå uppnår hela säkerhetsvinsten.","Exchange Server, Active Directory, AD split permissions, RBAC, Exchange-behörigheter, AdminSDHolder, minsta behörighet, AD ACL, PowerShell",{"slick":325,"form":325},{"menuItems":1222},[1223,1225,1227,1229,1231],{"href":1224,"text":531},"#tldr-tänk-om-vi-tar-bort-nackdelarna",{"href":1226,"text":586},"#varför-bryr-vi-oss-nu",{"href":1228,"text":688},"#men-varför-gör-ingen-det",{"href":1230,"text":730},"#visa-mig-alternativet-utan-ånger",{"href":1232,"text":1167},"#slutsatser","/posts/2026-03-01-exchange-ad-split-permissions-hardening",{"title":521,"description":1194},"posts/2026-03-01-exchange-ad-split-permissions-hardening","tJPnJjrIY4KJOkuHkoBms10oqMjJ2QrhC-Po6AT1Cpw",{"id":1238,"extension":1239,"meta":1240,"stem":8,"__hash__":1590},"authors_data/authors.json","json",{"path":1241,"Fritz Zurhorst":1242,"Alexander Schlindwein":1248,"Sophie Luna":1254,"Nadine Klein":1262,"Karsten Kleinschmidt":1268,"Julian Wendt":1276,"Holger Bunkradt":1281,"Ralf Mania":1287,"Oliver Kieselbach":1293,"Steffen Schwerdtfeger":1299,"Gunnar Winter":1307,"Jan Petersen":1312,"Thorsten Kunzi":1317,"Moritz Pohl":1320,"Thorben Pöschus":1325,"Christoph Hannebauer":1331,"Marco Scheel":1335,"Christopher Brumm":1340,"Florian Klante":1347,"Niklas Bachmann":1352,"Nils Krautkrämer":1357,"Patrick Treptau":1363,"Peter Beckendorf":1368,"Patrick Sobau":1373,"Jörg Wunderlich":1378,"Michael Breither":1382,"Christian Kanja":1387,"Zeba Hoffmann":1393,"Jochen Fröhlich":1398,"Jan Geisbauer":1402,"Gerrit Reinke":1414,"Christian Kordel":1420,"Stephan Wälde":1424,"Carolin Kanja":1429,"Adrian Ritter":1435,"Marvin Bangert":1440,"Thorsten Pickhan":1446,"Christian Lorenz":1452,"Denis Böhm":1457,"Fabian Bader":1462,"Juan Jose Fernandez Perez":1468,"Mahschid Sayyar":1473,"Benjamin Dassow":1478,"Markus Walschburger":1483,"Jonathan Haist":1488,"Daniel Rohregger":1493,"Thomas Naunheim":1498,"Florian Stöckl":1503,"Pascal Asch":1508,"Markus Kättner":1513,"Anna Ulbricht":1520,"Annette Brauns":1527,"body":1533,"title":1589},"/authors",{"display_name":1243,"avatar":1244,"permalink":1245,"linkedin":1246,"imageOffsetTop":1247},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":1249,"avatar":1250,"permalink":1251,"twitter":1252,"linkedin":1253},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1255,"avatar":1256,"permalink":1257,"twitter":1258,"linkedin":1259,"imageOffsetLeft":1260,"imageOffsetTop":1261},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1263,"avatar":1264,"permalink":1265,"twitter":1266,"linkedin":1267,"imageOffsetTop":1247},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1269,"avatar":1270,"permalink":1271,"twitter":1272,"linkedin":1273,"imageOffsetTop":1274,"imageOffsetLeft":1275},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1277,"avatar":1278,"permalink":1279,"linkedin":1280},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1282,"avatar":1283,"permalink":1284,"linkedin":1285,"twitter":1286},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1288,"avatar":1289,"permalink":1290,"linkedin":1291,"twitter":1292},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1294,"avatar":1295,"permalink":1296,"linkedin":1297,"twitter":1298},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":1300,"avatar":1301,"permalink":1302,"linkedin":1303,"twitter":1304,"imageOffsetTop":1305,"imageOffsetLeft":1306},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1308,"avatar":1309,"permalink":1310,"twitter":1258,"linkedin":1311},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1313,"avatar":1314,"permalink":1315,"twitter":1258,"linkedin":1316},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":523,"avatar":1318,"permalink":1319,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},"people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1321,"avatar":1322,"permalink":1323,"twitter":1258,"linkedin":1324},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1326,"avatar":1327,"permalink":1328,"twitter":1329,"linkedin":1330},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1332,"avatar":1333,"permalink":1334,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1336,"avatar":1337,"permalink":1338,"twitter":1339,"linkedin":1339},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1341,"avatar":1342,"permalink":1343,"twitter":1344,"linkedin":1345,"imageOffsetTop":1346},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1348,"avatar":1349,"permalink":1350,"linkedin":1351,"twitter":1258},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1353,"avatar":1354,"permalink":1355,"linkedin":1356,"twitter":1258},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1358,"avatar":1359,"permalink":1360,"twitter":1361,"linkedin":1362},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1364,"avatar":1365,"permalink":1366,"linkedin":1367,"twitter":1258},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1369,"avatar":1370,"permalink":1371,"linkedin":1372,"twitter":1258,"imageOffsetTop":1247},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1374,"avatar":1375,"permalink":1376,"linkedin":1377,"twitter":1258},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1379,"avatar":1380,"permalink":1381,"twitter":1258},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1383,"avatar":1384,"permalink":1385,"twitter":1258,"linkedin":1386},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1388,"avatar":1389,"permalink":1390,"twitter":1391,"linkedin":1392},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1394,"avatar":1395,"permalink":1396,"linkedin":1397,"twitter":1258},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1399,"avatar":1400,"permalink":1401,"twitter":1258,"linkedin":1311},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1403,"avatar":1404,"permalink":1405,"twitter":1406,"linkedin":1406,"imageOffsetTop":1247,"socials":1407},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1408,1411],{"text":1409,"href":1410},"Blog","https://emptydc.com",{"text":1412,"href":1413},"Podcast","https://hairlessinthecloud.com",{"display_name":1415,"avatar":1416,"permalink":1417,"twitter":1418,"linkedin":1419},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1421,"avatar":1422,"permalink":1423,"twitter":1258,"linkedin":1311},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1425,"avatar":1426,"permalink":1427,"twitter":1428,"linkedin":1311},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1430,"avatar":1431,"permalink":1432,"twitter":1433,"linkedin":1434},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1436,"avatar":1437,"permalink":1438,"twitter":1439,"linkedin":1439},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1441,"avatar":1442,"permalink":1443,"twitter":1444,"linkedin":1445},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1447,"avatar":1448,"permalink":1449,"twitter":1450,"linkedin":1451},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1453,"avatar":1454,"permalink":1455,"linkedin":1456,"twitter":1258},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1458,"avatar":1459,"permalink":1460,"linkedin":1461,"twitter":1258},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1463,"avatar":1464,"permalink":1465,"linkedin":1466,"twitter":1467},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1469,"avatar":1470,"permalink":1471,"linkedin":1472},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1474,"avatar":1475,"permalink":1476,"linkedin":1477},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1479,"avatar":1480,"permalink":1481,"linkedin":1482},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1484,"avatar":1485,"permalink":1486,"linkedin":1487},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1489,"avatar":1490,"permalink":1491,"linkedin":1492,"imageOffsetTop":1247},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1494,"avatar":1495,"permalink":1496,"linkedin":1497,"imageOffsetTop":1247},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1499,"avatar":1500,"permalink":1501,"linkedin":1502,"imageOffsetTop":1346},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1504,"avatar":1505,"permalink":1506,"linkedin":1507,"imageOffsetTop":1346},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1509,"avatar":1510,"permalink":1511,"linkedin":1512,"imageOffsetTop":1346},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1514,"avatar":1515,"permalink":1516,"linkedin":1517,"imageOffsetTop":1518,"imageOffsetLeft":1519},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1521,"avatar":1522,"permalink":1523,"linkedin":1524,"imageOffsetTop":1525,"imageOffsetLeft":1526},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1528,"avatar":1529,"permalink":1530,"linkedin":1531,"imageOffsetTop":1532,"imageOffsetLeft":1274},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1534,"Alexander Schlindwein":1535,"Sophie Luna":1536,"Nadine Klein":1537,"Karsten Kleinschmidt":1538,"Julian Wendt":1539,"Holger Bunkradt":1540,"Ralf Mania":1541,"Oliver Kieselbach":1542,"Steffen Schwerdtfeger":1543,"Gunnar Winter":1544,"Jan Petersen":1545,"Thorsten Kunzi":1546,"Moritz Pohl":1547,"Thorben Pöschus":1548,"Christoph Hannebauer":1549,"Marco Scheel":1550,"Christopher Brumm":1551,"Florian Klante":1552,"Niklas Bachmann":1553,"Nils Krautkrämer":1554,"Patrick Treptau":1555,"Peter Beckendorf":1556,"Patrick Sobau":1557,"Jörg Wunderlich":1558,"Michael Breither":1559,"Christian Kanja":1560,"Zeba Hoffmann":1561,"Jochen Fröhlich":1562,"Jan Geisbauer":1563,"Gerrit Reinke":1567,"Christian Kordel":1568,"Stephan Wälde":1569,"Carolin Kanja":1570,"Adrian Ritter":1571,"Marvin Bangert":1572,"Thorsten Pickhan":1573,"Christian Lorenz":1574,"Denis Böhm":1575,"Fabian Bader":1576,"Juan Jose Fernandez Perez":1577,"Mahschid Sayyar":1578,"Benjamin Dassow":1579,"Markus Walschburger":1580,"Jonathan Haist":1581,"Daniel Rohregger":1582,"Thomas Naunheim":1583,"Florian Stöckl":1584,"Pascal Asch":1585,"Markus Kättner":1586,"Anna Ulbricht":1587,"Annette Brauns":1588},{"display_name":1243,"avatar":1244,"permalink":1245,"linkedin":1246,"imageOffsetTop":1247},{"display_name":1249,"avatar":1250,"permalink":1251,"twitter":1252,"linkedin":1253},{"display_name":1255,"avatar":1256,"permalink":1257,"twitter":1258,"linkedin":1259,"imageOffsetLeft":1260,"imageOffsetTop":1261},{"display_name":1263,"avatar":1264,"permalink":1265,"twitter":1266,"linkedin":1267,"imageOffsetTop":1247},{"display_name":1269,"avatar":1270,"permalink":1271,"twitter":1272,"linkedin":1273,"imageOffsetTop":1274,"imageOffsetLeft":1275},{"display_name":1277,"avatar":1278,"permalink":1279,"linkedin":1280},{"display_name":1282,"avatar":1283,"permalink":1284,"linkedin":1285,"twitter":1286},{"display_name":1288,"avatar":1289,"permalink":1290,"linkedin":1291,"twitter":1292},{"display_name":1294,"avatar":1295,"permalink":1296,"linkedin":1297,"twitter":1298},{"display_name":1300,"avatar":1301,"permalink":1302,"linkedin":1303,"twitter":1304,"imageOffsetTop":1305,"imageOffsetLeft":1306},{"display_name":1308,"avatar":1309,"permalink":1310,"twitter":1258,"linkedin":1311},{"display_name":1313,"avatar":1314,"permalink":1315,"twitter":1258,"linkedin":1316},{"display_name":523,"avatar":1318,"permalink":1319,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},{"display_name":1321,"avatar":1322,"permalink":1323,"twitter":1258,"linkedin":1324},{"display_name":1326,"avatar":1327,"permalink":1328,"twitter":1329,"linkedin":1330},{"display_name":1332,"avatar":1333,"permalink":1334,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},{"display_name":1336,"avatar":1337,"permalink":1338,"twitter":1339,"linkedin":1339},{"display_name":1341,"avatar":1342,"permalink":1343,"twitter":1344,"linkedin":1345,"imageOffsetTop":1346},{"display_name":1348,"avatar":1349,"permalink":1350,"linkedin":1351,"twitter":1258},{"display_name":1353,"avatar":1354,"permalink":1355,"linkedin":1356,"twitter":1258},{"display_name":1358,"avatar":1359,"permalink":1360,"twitter":1361,"linkedin":1362},{"display_name":1364,"avatar":1365,"permalink":1366,"linkedin":1367,"twitter":1258},{"display_name":1369,"avatar":1370,"permalink":1371,"linkedin":1372,"twitter":1258,"imageOffsetTop":1247},{"display_name":1374,"avatar":1375,"permalink":1376,"linkedin":1377,"twitter":1258},{"display_name":1379,"avatar":1380,"permalink":1381,"twitter":1258},{"display_name":1383,"avatar":1384,"permalink":1385,"twitter":1258,"linkedin":1386},{"display_name":1388,"avatar":1389,"permalink":1390,"twitter":1391,"linkedin":1392},{"display_name":1394,"avatar":1395,"permalink":1396,"linkedin":1397,"twitter":1258},{"display_name":1399,"avatar":1400,"permalink":1401,"twitter":1258,"linkedin":1311},{"display_name":1403,"avatar":1404,"permalink":1405,"twitter":1406,"linkedin":1406,"imageOffsetTop":1247,"socials":1564},[1565,1566],{"text":1409,"href":1410},{"text":1412,"href":1413},{"display_name":1415,"avatar":1416,"permalink":1417,"twitter":1418,"linkedin":1419},{"display_name":1421,"avatar":1422,"permalink":1423,"twitter":1258,"linkedin":1311},{"display_name":1425,"avatar":1426,"permalink":1427,"twitter":1428,"linkedin":1311},{"display_name":1430,"avatar":1431,"permalink":1432,"twitter":1433,"linkedin":1434},{"display_name":1436,"avatar":1437,"permalink":1438,"twitter":1439,"linkedin":1439},{"display_name":1441,"avatar":1442,"permalink":1443,"twitter":1444,"linkedin":1445},{"display_name":1447,"avatar":1448,"permalink":1449,"twitter":1450,"linkedin":1451},{"display_name":1453,"avatar":1454,"permalink":1455,"linkedin":1456,"twitter":1258},{"display_name":1458,"avatar":1459,"permalink":1460,"linkedin":1461,"twitter":1258},{"display_name":1463,"avatar":1464,"permalink":1465,"linkedin":1466,"twitter":1467},{"display_name":1469,"avatar":1470,"permalink":1471,"linkedin":1472},{"display_name":1474,"avatar":1475,"permalink":1476,"linkedin":1477},{"display_name":1479,"avatar":1480,"permalink":1481,"linkedin":1482},{"display_name":1484,"avatar":1485,"permalink":1486,"linkedin":1487},{"display_name":1489,"avatar":1490,"permalink":1491,"linkedin":1492,"imageOffsetTop":1247},{"display_name":1494,"avatar":1495,"permalink":1496,"linkedin":1497,"imageOffsetTop":1247},{"display_name":1499,"avatar":1500,"permalink":1501,"linkedin":1502,"imageOffsetTop":1346},{"display_name":1504,"avatar":1505,"permalink":1506,"linkedin":1507,"imageOffsetTop":1346},{"display_name":1509,"avatar":1510,"permalink":1511,"linkedin":1512,"imageOffsetTop":1346},{"display_name":1514,"avatar":1515,"permalink":1516,"linkedin":1517,"imageOffsetTop":1518,"imageOffsetLeft":1519},{"display_name":1521,"avatar":1522,"permalink":1523,"linkedin":1524,"imageOffsetTop":1525,"imageOffsetLeft":1526},{"display_name":1528,"avatar":1529,"permalink":1530,"linkedin":1531,"imageOffsetTop":1532,"imageOffsetLeft":1274},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1592,"authors":1809},[1593,1611,1625,1639,1655,1668,1681,1694,1706,1722,1736,1751,1769,1780,1793],{"id":1594,"title":1595,"author":1596,"cta":494,"description":1194,"hideInRecent":484,"layout":1210,"meta":1597,"moment":1603,"path":1604,"stem":1605,"tags":1606,"webcast":484},"content_sv/posts/2026-09-22-end-of-mfa-sms.md","Slutet för MFA-SMS",[1269],{"lang":1212,"date":1598,"categories":1599,"blogtitlepic":1601,"customExcerpt":1602},"2026-09-21",[1600],"Security","head-conditional-access.jpg","Varför företag nu bör gå över till phishingresistenta och så långt möjligt lösenordsfria inloggningsmetoder.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[1600,1607,1608,1609,1610],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1612,"title":1613,"author":1614,"cta":494,"description":1194,"hideInRecent":484,"layout":1210,"meta":1615,"moment":1598,"path":1619,"stem":1620,"tags":1621,"webcast":484},"content_sv/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. När användaren är exploiten, och hur ni stoppar det",[1243,1263],{"lang":1212,"date":1598,"categories":1616,"blogtitlepic":1617,"customExcerpt":1618},[1600],"head-clickfix.jpg","ClickFix gör användare till sin egen angripare: ett förfalskat CAPTCHA, en copy-paste, och skadlig kod körs i minnet utan att något landar på disken. Hur Microsoft Defender upptäcker attacken, var detekteringen når sina gränser och hur ni stänger luckan med en RunMRU-hunt och fyra skyddslager.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1622,1623,1624],"Defender","SOC","Endpoint Security",{"id":1626,"title":1627,"author":1628,"cta":494,"description":1194,"hideInRecent":484,"layout":1210,"meta":1629,"moment":1598,"path":1633,"stem":1634,"tags":1635,"webcast":484},"content_sv/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin och vardag på samma dator? Game Over.",[1403],{"lang":1212,"date":1598,"categories":1630,"blogtitlepic":1631,"customExcerpt":1632},[1600],"head-game-over-en.jpg","Varför en tenant inte räcker för CIO:er, och varför den andra sällan tänks med. Managed Red Tenant separerar administrativt arbete arkitektoniskt från kontorsmiljön, Managed Dark Tenant håller företaget handlingskraftigt när försvaret ändå faller. Vad det betyder för driftmodell, SOC-signal och bevisplikterna enligt NISG 2026.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[1600,1636,1637,1638],"Privileged Access","Zero Trust","NIS2",{"id":1640,"title":1641,"author":1642,"cta":494,"description":1643,"hideInRecent":484,"layout":1210,"meta":1644,"moment":1645,"path":1650,"stem":1651,"tags":1652,"webcast":484},"content_sv/posts/2026-08-08-isg-germany-2026.md","Fyra gånger Leader. glueckkanja i ISG-studien Tyskland 2026",[1430],"ISG har bytt namn på sin studie i år. Microsoft Cloud Ecosystem blev Microsoft AI and Cloud Ecosystem, och med namnet har måttstocken förskjutits: det som bedöms är inte längre vem som inför Microsoft-plattformar, utan vem som driver Copilot, agenter och AI-workloads kontrollerbart. På vår position har den nya måttstocken inte ändrat något. ISG Provider Lens®-studien Tyskland 2026 positionerar oss som Leader i fyra kvadranter: Microsoft Productivity and Business Process Services och Azure Managed Services, i både Large Market och Mid Market. Efter 2021, 2023, 2024 och 2025 är det den femte Leader-placeringen i Tyskland, i Schweiz kom steget in i Leader-kvadranten två veckor tidigare.",{"lang":1212,"date":1645,"categories":1646,"blogtitlepic":1648,"customExcerpt":1649},"2026-08-08",[1647],"Corporate","head-isg-de-2026.png","ISG Provider Lens®-studien 2026 positionerar glueckkanja i Tyskland som Leader i fyra kvadranter: Microsoft Productivity and Business Process Services och Azure Managed Services, i både Large och Mid Market. Studien heter nu Microsoft AI and Cloud Ecosystem, och måttstocken har förskjutits: det som bedöms är vem som driver AI- och agent-workloads kontrollerbart.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1653,1654],"Award","ISG",{"id":1656,"title":1657,"author":1658,"cta":494,"description":1659,"hideInRecent":484,"layout":1210,"meta":1660,"moment":1661,"path":1665,"stem":1666,"tags":1667,"webcast":484},"content_sv/posts/2026-07-31-isg-switzerland-2026.md","Från Rising Star till Leader. glueckkanja i ISG-studien Schweiz 2026",[1430],"2024 grundade vi glueckkanja Switzerland AG och flyttade in i ett kontor i zentroom på Bahnhofplatz 10b i Bern. 2025 placerade ISG oss som Rising Star på den schweiziska marknaden, som den leverantör som analytikerna tror kan ta steget in i Leader-kvadranten. Nu är steget dokumenterat: ISG Provider Lens®-studien 2026 positionerar oss i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inom områdena Azure Managed Services och Microsoft Productivity and Business Process Services.",{"lang":1212,"date":1661,"categories":1662,"blogtitlepic":1663,"customExcerpt":1664},"2026-07-31",[1647],"head-isg-ch-2026.png","ISG Provider Lens®-studien 2026 positionerar glueckkanja i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inom områdena Azure Managed Services och Microsoft Productivity and Business Process Services. Två år efter marknadsinträdet i Bern, ett år efter Rising Star-utmärkelsen.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1653,1654],{"id":1669,"title":1670,"author":1671,"cta":494,"description":1194,"hideInRecent":484,"layout":1210,"meta":1672,"moment":1673,"path":1677,"stem":1678,"tags":1679,"webcast":484},"content_sv/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Vad OpenAI/Hugging-Face-incidenten avslöjar och vad den inte avslöjar",[1403],{"lang":1212,"date":1673,"categories":1674,"blogtitlepic":1675,"customExcerpt":1676},"2026-07-24",[1600],"head-outbreak.jpg","En AI-agent bryter sig ut ur sin testmiljö, hittar en zero-day och hackar ett annat företag. Låter som filmmanus, men hände faktiskt i juli 2026. Tid för en nykter placering: med lite psykologi, två security-veteraner och frågan om vad det betyder för ert försvar.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1680,1623,1637],"AI",{"id":1682,"title":1683,"author":1684,"cta":494,"description":1685,"hideInRecent":484,"layout":1210,"meta":1686,"moment":1687,"path":1691,"stem":1692,"tags":1693,"webcast":484},"content_sv/posts/2026-07-22-isg-cybersecurity-2026.md","Leader och Rising Star. glueckkanja i ISG:s cybersecurity-studie 2026",[1430],"Ny i kvadranten och direkt Leader: ISG Provider Lens®-studien \"Cybersecurity – Services and Solutions 2026\" positionerar glueckkanja som Leader inom Next-Gen SOC/MDR Services för medelstora företag i Tyskland. I totalmarknaden för Next-Gen SOC/MDR Services utser ISG oss till Rising Star, alltså den leverantör som analytikerna tror kan ta steget in i Leader-kvadranten inom de närmaste 12 till 24 månaderna.",{"lang":1212,"date":1687,"categories":1688,"blogtitlepic":1689,"customExcerpt":1690},"2026-07-22",[1647],"head-isg-cybersecurity-2026.png","ISG Provider Lens®-studien Cybersecurity 2026 utser glueckkanja till Leader i kvadranten Next-Gen SOC/MDR Services (Midmarket). I totalmarknaden för Next-Gen SOC/MDR Services är vi Rising Star. ISG intygar att vi har tillväxt över snittet, djup Microsoft-security-expertis och ett 24/7-SOC från Tyskland.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1653,1654,1600],{"id":1695,"title":1696,"author":1697,"cta":494,"description":1698,"hideInRecent":484,"layout":1210,"meta":1699,"moment":1700,"path":1703,"stem":1704,"tags":1705,"webcast":484},"content_sv/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: vad AI verkligen behöver för att arbeta",[1430],"Ett tillverkande företag vill veta vilka av dess 14 000 SKU:er som faktiskt är lönsamma. Svaret ligger i tre system som aldrig har utbytt en enda datapunkt med varandra. Fram till helt nyligen kostade det tre avdelningar, två veckor och en hel del god vilja att få fram det. Sedan början av 2026 kan en AI besvara den frågan på minuter: söka igenom data, upprätta samband, producera en rekommendation. Förutsatt att den har åtkomst.",{"lang":1212,"date":1700,"categories":1701,"blogtitlepic":1702},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1680,131],{"id":1707,"title":1708,"author":1709,"cta":494,"description":1710,"hideInRecent":484,"layout":1210,"meta":1711,"moment":1712,"path":1716,"stem":1717,"tags":1718,"webcast":484},"content_sv/posts/2026-07-01-onboarding-process.md","Kontraktet är påskrivet: så går din onboarding till hos oss",[1521],"Hur går egentligen er onboarding till? En fråga som möter oss gång på gång i samtal med sökande, för många har redan varit med om att en onboarding går knaggligt. Desto viktigare är det för oss att ge dig en bra känsla från början.",{"lang":1212,"date":1712,"categories":1713,"blogtitlepic":1714,"customExcerpt":1715},"2026-07-01",[1647],"Onboarding_Blogheader","Kontraktet är påskrivet, det första stora steget är taget. Men hur går det vidare nu? Vi tar med dig bakom kulisserna på vår onboarding, från preboarding till första veckan i teamet.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1719,1720,1721],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1723,"title":1724,"author":1725,"cta":494,"description":1726,"hideInRecent":484,"layout":1210,"meta":1727,"moment":1728,"path":1732,"stem":1733,"tags":1734,"webcast":484},"content_sv/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: vi hör till",[1430],"I Microsofts partnerekosystem finns en hel rad erkännanden, och ändå skiljer sig Frontier Partner Badge i sin uppläggning från de övriga utmärkelserna. Den går inte att ansöka om, utan tilldelas på Microsofts initiativ till en exklusiv krets av partner som måste övertyga i flera discipliner parallellt, i stället för att briljera i en enda. Microsoft prövar därvid påvisad kompetens inom Cloud & AI Platforms, inom AI Business Solutions och inom Security på lika villkor, och vänder sig därmed till företag som inte uppfattar AI som ett påhäng på befintlig IT, utan som resultatet av en genomgående arkitektur som bär från identiteten via endpointen ända in i produktiv AI-drift.",{"lang":1212,"date":1728,"categories":1729,"blogtitlepic":1730,"customExcerpt":1731},"2026-06-26",[1647],"head-frontier-partner-badge.jpg","Sedan en tid tillbaka finns det en ny topputmärkelse i Microsoft AI Cloud Partner Program, Frontier Partner Badge. Microsoft tilldelar den uteslutande till en exklusiv krets av partner världen över som levererar bärkraftiga AI-projekt på hela Microsoft-stacken, från arbetsplatsen via molnplattformen och security ända in i själva AI-tillämpningen, och som har bevisat den ambitionen i praktiken. I DACH-området räknar den här gruppen bara en handfull företag, och vi är ett av dem.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1653,1735,1680],"Microsoft Partner",{"id":1737,"title":1738,"author":1739,"cta":494,"description":1740,"hideInRecent":484,"layout":1210,"meta":1741,"moment":1742,"path":1746,"stem":1747,"tags":1748,"webcast":484},"content_sv/posts/2026-06-09-vair-run.md","160 kilometer för ett gott ändamål",[1528],"Söndag morgon, klockan 8:30, Holbeinsteg vid Main. Elva kollegor i enhetliga NinjaCat-tröjor, redo för Frankfurter Runden. Regn, blixt och åska inkluderat. Att springa för ett gott ändamål var motivation nog för att snöra på löparskorna trots det dåliga vädret.",{"lang":1212,"date":1742,"categories":1743,"blogtitlepic":1744,"customExcerpt":1745},"2026-06-08",[1647],"frankfurter-runden.png","Elva kollegor, 16 varv, 160 kilometer, ett åskoväder och en pallplats: glueckkanja var med på Frankfurter Runden 2026 och skänkte pengar till VAIR e.V. för varje sprunget varv. Föreningen bygger en inkluderande sport- och kulturpark i Offenbach.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1749,1719,1750],"Top Arbeitgeber","Soziales Engagement",{"id":1752,"title":1753,"author":1754,"cta":494,"description":1755,"hideInRecent":484,"layout":1210,"meta":1756,"moment":1757,"path":1761,"stem":1762,"tags":1763,"webcast":484},"content_sv/posts/2026-04-10-incident-to-intelligence.md","Anatomin hos en okänd AMOS Stealer: Från larm till immunitet på timmar",[1509],"När ett larm utlöses i vårt SOC börjar klockan ticka: inte bara för den drabbade kunden, utan för alla organisationer under vårt skydd. Det farligaste ögonblicket i dagens hotlandskap är the Intelligence Gap, tidsfönstret mellan den första användningen av en ny malware-variant och den dag branschen får kännedom om den.",{"lang":1212,"date":1757,"categories":1758,"blogtitlepic":1759,"customExcerpt":1760},"2026-04-10",[1600],"head-amos-stealer.png","En hittills odokumenterad AMOS-Stealer-variant komprometterade en macOS-endpoint. Inga kända hashvärden, inga C2-data i offentliga databaser. Vårt SOC monterade ner sex obfuskeringslager, extraherade alla indikatorer och distribuerade skyddet till alla SOC-kunder inom timmar, innan branschen ens hade sett samplet.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1764,1765,1766,1767,1768],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1770,"title":1771,"author":1772,"cta":494,"description":1773,"hideInRecent":484,"layout":1210,"meta":1774,"moment":1775,"path":1778,"stem":1779,"tags":494,"webcast":484},"content_sv/posts/2026-03-21-microsoft-edge-corporate-browser.md","Därför bör Edge vara er enda Corporate Browser",[1300],"Valet av webbläsare är i företagsmiljöer ett strategiskt beslut: det påverkar direkt hur mycket säkerhet och administrativ börda ni faktiskt har. Google Chrome var länge det närliggande alternativet, men Microsoft Edge har utvecklats till en webbläsare som griper direkt in i den befintliga stacken, framför allt när Microsoft 365 används och administrationen sker via Intune.",{"lang":1212,"date":1775,"blogtitlepic":1776,"customExcerpt":1777},"2026-03-21","head-microsoft-edge-default-browser.jpg","Inget företag har egentligen valt Chrome; den fanns bara där, med egen synklogik, egen kontohantering, eget policygränssnitt. Microsoft Edge däremot griper direkt in i den infrastruktur som ändå redan är igång: Entra ID, Intune, Defender. Det här inlägget visar hur bytet ser ut, hur Chrome via en Intune-policy omdirigeras till en landningssida och vad som faller bort när man slutar köra två webbläsare parallellt.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1781,"title":1782,"author":1783,"cta":494,"description":1784,"hideInRecent":484,"layout":1210,"meta":1785,"moment":1786,"path":1790,"stem":1791,"tags":1792,"webcast":484},"content_sv/posts/2026-03-20-stryker-attack-intune-privilege.md","Ett adminkonto var allt som krävdes.",[1403],"Onsdag den 11 mars 2026. Medarbetare på Strykers kontor i 79 länder slog på sina datorer och fann dem tomma. Inloggningsskärmar ersatta med en logotyp. Företagsdatorer, tjänstemobiler, privata enheter som var registrerade i företagets BYOD-program – alla raderade samtidigt, över natten. Ingen ransomware, inga signaturer för skadlig kod, ingenting som ett endpoint-detection-verktyg hade kunnat upptäcka.",{"lang":1212,"date":1786,"categories":1787,"blogtitlepic":1788,"customExcerpt":1789},"2026-03-20",[1600],"head-stryker.jpg","Den 11 mars 2026 raderade Handala enheter i 79 länder, och allt som krävdes för det var ett komprometterat Intune-adminkonto. Ingen skadlig kod, ingen exploit, bara legitima hanteringsverktyg vända mot sina ägare. Vad som hände, varför det fungerade och vilka två arkitektoniska luckor som måste stängas.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[71,1636,1637],{"id":1794,"title":1795,"author":1796,"cta":494,"description":1797,"hideInRecent":484,"layout":1210,"meta":1798,"moment":1799,"path":1803,"stem":1804,"tags":1805,"webcast":484},"content_sv/posts/2026-03-16-ai-agent-hackathon.md","Sex Agents. Fyra veckor. Skarp drift.",[1430],"Hur många timmar per vecka lägger er IT-avdelning på uppgifter som en agent skulle kunna klara på minuter?",{"lang":1212,"date":1799,"categories":1800,"blogtitlepic":1801,"customExcerpt":1802},"2026-03-16",[1647],"head-ai-agent-hackathon.jpg","Sex företag, fyra veckors byggfas, sex fungerande AI Agents – det var den första glueckkanja AI Agent Hackathon. Kiekert, Dr. Oetker, Eckes-Granini, igefa och lila logistik byggde i Copilot Studio agents som idag körs i produktion. Vad som blev resultatet och hur formatet fungerar.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1680,1806,1807,1808],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1810,"Fritz Zurhorst":1811,"Nadine Klein":1812,"Jan Geisbauer":1813,"Carolin Kanja":1817,"Anna Ulbricht":1818,"Annette Brauns":1819,"Pascal Asch":1820,"Steffen Schwerdtfeger":1821},{"display_name":1269,"avatar":1270,"permalink":1271,"twitter":1272,"linkedin":1273,"imageOffsetTop":1274,"imageOffsetLeft":1275},{"display_name":1243,"avatar":1244,"permalink":1245,"linkedin":1246,"imageOffsetTop":1247},{"display_name":1263,"avatar":1264,"permalink":1265,"twitter":1266,"linkedin":1267,"imageOffsetTop":1247},{"display_name":1403,"avatar":1404,"permalink":1405,"twitter":1406,"linkedin":1406,"imageOffsetTop":1247,"socials":1814},[1815,1816],{"text":1409,"href":1410},{"text":1412,"href":1413},{"display_name":1430,"avatar":1431,"permalink":1432,"twitter":1433,"linkedin":1434},{"display_name":1521,"avatar":1522,"permalink":1523,"linkedin":1524,"imageOffsetTop":1525,"imageOffsetLeft":1526},{"display_name":1528,"avatar":1529,"permalink":1530,"linkedin":1531,"imageOffsetTop":1532,"imageOffsetLeft":1274},{"display_name":1509,"avatar":1510,"permalink":1511,"linkedin":1512,"imageOffsetTop":1346},{"display_name":1300,"avatar":1301,"permalink":1302,"linkedin":1303,"twitter":1304,"imageOffsetTop":1305,"imageOffsetLeft":1306},{"id":1238,"extension":1239,"meta":1823,"stem":8,"__hash__":1590},{"Thorsten Kunzi":1824},{"display_name":523,"avatar":1318,"permalink":1319,"twitter":1258,"linkedin":1311,"imageOffsetTop":1247},1791383950301]