https://www.juanpazo.com/Recent content in Microsoft 365 security, from architecture to the battlefield. on Juan PazóHugoenThu, 13 Aug 2026 00:00:00 +0000https://www.juanpazo.com/posts/device-cleanup/Thu, 13 Aug 2026 00:00:00 +0000https://www.juanpazo.com/posts/device-cleanup/<p>The cleanest Intune portal is not necessarily the healthiest device estate. A record can be stale because a device was replaced, rebuilt, offline for legitimate reasons, or managed through a different channel. It can also be the only remaining evidence that a device still has a BitLocker recovery key or an Entra identity.</p>https://www.juanpazo.com/posts/entra-app-hygiene/Thu, 13 Aug 2026 00:00:00 +0000https://www.juanpazo.com/posts/entra-app-hygiene/<p>An Entra application called <code>test</code>, <code>old</code>, or <code>do-not-use</code> is not evidence that it is safe to remove. The same is true in reverse: a reassuring display name does not make an application safe. Start with what the workload identity can do, how it authenticates, and who can explain its purpose.</p>https://www.juanpazo.com/posts/governing-byoai/Thu, 13 Aug 2026 00:00:00 +0000https://www.juanpazo.com/posts/governing-byoai/<p>BYOAI is usually framed as shadow IT with a better user experience. Someone has a question, a deadline, or a document that needs improving. A public AI tool is one browser tab away. The risk is real, but the human need is real too.</p>https://www.juanpazo.com/posts/guest-hygiene/Thu, 13 Aug 2026 00:00:00 +0000https://www.juanpazo.com/posts/guest-hygiene/<p>A guest account is the technical trace of a business relationship. Removing old guests can be useful, but a date field alone cannot tell you whether a supplier engagement, project, legal matter, or shared workspace is still active.</p> <h2 id="start-with-the-resource">Start with the resource</h2> <p>The useful question is not “when did this guest last sign in?” It is “what does this person still have access to, who sponsored it, and when should that access end?” A guest can be inactive and still be the only external owner of a shared artefact. A recently active guest can still have access that is no longer justified.</p>https://www.juanpazo.com/posts/orphaned-onedrive/Thu, 13 Aug 2026 00:00:00 +0000https://www.juanpazo.com/posts/orphaned-onedrive/<p>An unlicensed or inactive OneDrive is not automatically disposable. It can contain project evidence, personal working files required for a case, or content subject to retention. “Orphaned” should be a conclusion from evidence, not a label created by a storage report.</p>https://www.juanpazo.com/posts/sharepoint-archival/Thu, 13 Aug 2026 00:00:00 +0000https://www.juanpazo.com/posts/sharepoint-archival/<p>Archiving a SharePoint site is a change to access, ownership, recovery, and compliance. Storage cost matters, but it is the last question I ask, not the first.</p> <h2 id="begin-with-a-decision-record">Begin with a decision record</h2> <p>For each site, document the business purpose, accountable owner, last meaningful activity, external sharing, sensitivity and retention state, eDiscovery considerations, expected retrieval time, and future disposition date. “No recent edits” is a useful signal. It is not an archival decision by itself.</p>https://www.juanpazo.com/posts/retention-storage/Thu, 13 Aug 2026 00:00:00 +0000https://www.juanpazo.com/posts/retention-storage/<p>Large files are visible. Retention side effects often are not. That is why a storage incident can become a compliance incident when somebody responds by changing a policy before understanding what is preserving the content.</p> <h2 id="deletion-and-storage-reclamation-are-different-events">Deletion and storage reclamation are different events</h2> <p>When SharePoint or OneDrive content is retained, Microsoft can preserve the original version in the Preservation Hold library after a user edits or deletes it. The user may see a file disappear while the tenant still retains a copy. Microsoft explains the workload-specific behaviour in <a href="https://learn.microsoft.com/en-us/purview/retention-policies-sharepoint">retention for SharePoint and OneDrive</a>.</p>https://www.juanpazo.com/about/Mon, 01 Jan 0001 00:00:00 +0000https://www.juanpazo.com/about/<p>I am a Technology Specialist focused on making Microsoft 365 security work in the real world.</p> <p>My route into tech was not a straight line. I have been a golf-course gardener, flipped burgers at McDonald’s, opened a pub at 23, worked in Apple Support in Ireland, and spent time in digital marketing before moving into technology. I am a multipotentialite. I like learning widely, connecting ideas, and making difficult things feel understandable.</p>