
Microsoft MVP
Ricardo Barbosa
Microsoft MVP | Microsoft Certified Trainer | Cloud & Security Specialist
Founder & CEO of ISolutions CloudX and author of CyberCloudOps.
I am a Microsoft MVP (Intune) and Microsoft Certified Trainer (MCT) with 30 years of hands-on experience designing, implementing, and securing modern endpoint and cloud environments.
My work spans cloud and on-premises infrastructures, with a strong focus on Microsoft 365, Azure, endpoint management, Conditional Access, Microsoft Defender integration, and DevOps-driven automation.
Through CyberCloudOps I share field-tested guidance on Microsoft Intune, Entra, Defender, Purview and Zero Trust. At ISolutions CloudX I lead architecture, security and governance work for organizations that need predictable Microsoft environments.
Articles by Ricardo Barbosa
View allMicrosoft Intune
Shell Launcher Is Not Broken: Diagnosing Shell Policy Conflicts with Microsoft Intune
A kiosk terminal that keeps showing the desktop instead of the app it was built for is not broken, it is being overridden by a policy nobody documente...
Microsoft Intune
Cutting Man-in-the-Middle Risk on Domain Controller Traffic with Microsoft Intune
Every authentication request a domain-joined device sends travels across the network, and an attacker positioned on that path does not need your passw...
Microsoft Intune
Closing the USB Data Leakage Gap: Enforcing Removable Drive Encryption with Microsoft Intune
A single USB stick, plugged in for thirty seconds, can move gigabytes of confidential data past every firewall, DLP rule, and network control you have...
Microsoft Intune
Hardening Windows Endpoints: Configuring Microsoft Entra Kerberos TGT Retrieval at Sign-In with Microsoft Intune
A sign-in that looks routine can quietly rely on a fallback authentication path that no one is watching. Microsoft Entra Kerberos exists to close that...
Microsoft Intune
Hardening Windows Endpoints: Automatic Remediation for Hotpatch Devices with Microsoft Intune
A missed reboot should never mean a missed patch. The Windows Hotpatch program lets eligible devices receive security updates without a full restart,...
Microsoft Intune
Hardening Windows Endpoints: Storage Sense Configuration with Microsoft Intune
A forgotten download folder can hold more forensic evidence than a full audit log. Windows accumulates data constantly: temporary installer files, bro...
