Skip to main content
OSH INSIGHTS / FIELD NOTES

Notes from the operations desk.

Rants, write-ups, and the occasional opinion about M365, Google Workspace, DMARC, GravityZone, and the rest of the stack we manage day to day.

// All posts

Every insight, newest first

How to Manage BitLocker With Hexnode

How to manage BitLocker through Hexnode in 2026: TPM 2.0 prerequisites, XTS-AES policy, recovery-key escrow, Autopilot trade-offs and the …

May 08, 2026 Read →

How to Manage FileVault With Hexnode

How to set up FileVault in Hexnode: policy fields, personal recovery key escrow, Apple Silicon Bootstrap Token, deferred enablement, key …

May 08, 2026 Read →

Locking Down Windows Devices With Password and Screensaver Policies via Hexnode

How to set sensible Windows password and screensaver lock policies in Hexnode in 2026, NIST-aligned, with the lockout and GPO conflict …

May 08, 2026 Read →

Managing Windows Update and Settings From Hexnode

How to drive Windows Update for Business, deferral policies, reboot windows and the wider Windows settings catalogue from Hexnode without …

May 08, 2026 Read →

Migrating from Microsoft 365 to Google Workspace: A Zero-Downtime Field Guide

A practical, zero-downtime field guide to migrating from Microsoft 365 to Google Workspace. Tools, sequencing, mail flow, and the failure …

May 08, 2026 Read →

Migrating from On-Prem Exchange to Microsoft 365: A Practical Field Guide

A practical 2026 field guide to moving on-prem Exchange to Microsoft 365: cutover, staged, hybrid, IMAP. The right path, the real work, and …

May 08, 2026 Read →

Most Break-Glass Accounts Won't Work When They're Actually Needed

Most break-glass accounts are a tickbox. They fail on the day they're needed. Here is what working emergency access looks like on M365 and …

May 08, 2026 Read →

MS Authenticator: Hardening Your MFA Setup in 2026

How to harden Microsoft Authenticator and your MFA posture in 2026: number matching, Authentication Methods Policy, FIDO2, passkeys and …

May 08, 2026 Read →
Blogs

Multiple Domains on Google Workspace with Exclaimer Cloud Signatures

How to run Exclaimer Cloud Signatures across multiple domains on a single Google Workspace tenant: routing rules, aliases, DMARC and the …

May 08, 2026 Read →

QR Codes for Device Enrolment: Yes or No?

QR codes for device enrolment: yes for non-touch corporate Android and Windows BYOD, no for sensitive scenarios where SAML SSO and DEP are …

May 08, 2026 Read →

Reading Microsoft 365 and Google Workspace Email Headers Like a Pro

Read M365 and Google Workspace email headers without flinching. Six lines triage 90% of mail-flow questions, with worked phishing and …

May 08, 2026 Read →

Reseller or Direct? When to Buy Cloud Software From a Partner vs the Vendor

Should you buy Microsoft 365, Google Workspace and Bitdefender direct from the vendor or via a reseller? An honest 2026 partner-vs-direct …

May 08, 2026 Read →

Not sure which service you need?

Book a 60-minute discovery call. We will map your existing stack, flag the highest-ROI gaps, and tell you which of the six pillars to start with, even if the answer is none of them yet.