Microsoft
This Microsoft application is primarily used for company email.
Exchange
Kandji is primarily used by our IT department to manage these devices.
What are Apple devices / iPads?
When an employee leaves the company, this should happen to their Equina account.
What is disable or remove the user's access?
The classic IT fix that somehow works way too often.
What is restart the device?
You should never give this to another employee, even someone from IT.
What is your password?
This Microsoft portal is commonly used to manage users, groups, and authentication.
What is Microsoft Entra ID
This Apple service allows company-owned devices to be assigned to an MDM such as Kandji.
What is Apple Business Manager?
Before giving someone Equina access, IT should confirm this.
What is approved business need / authorized access?
A user says, “The internet isn't working.” Name one thing you should check before blaming the entire network.
What is Wi-Fi/network connection?
This adds another verification step beyond a username and password.
What is multi-factor authentication (MFA)?
This Microsoft service allows IT to manage Windows devices, applications, and security policies.
What is Microsoft Intune?
During setup, seeing this screen indicates an iPad is attempting to activate and communicate with Apple.
What is the activation/setup screen?
A user says, “Equina isn't working.” Before changing anything, this should be your first question.
What error are you receiving?” / identify the actual problem?
User is saying that are not receiving a email. How do you check?
What is mimecast
An unexpected email asks you to urgently click a link and enter your Microsoft password. This is likely what type of attack?
What is phishing?
A user gets a new phone and can no longer approve Microsoft MFA requests. This is one thing IT may need to reset.
What are the user's authentication methods / MFA registration?
An iPad is enrolled in Kandji but is not receiving a newly assigned app. Name the first thing you should verify.
Whether the device is online and checking in with Kandji for blue print.
A user can sign into Equina but cannot access something another employee can. This should be checked before reinstalling anything.
What are their permissions or assigned access?
A user says their computer is “slow.” Name three things you should investigate.
Examples: CPU, memory, disk space, Task Manager, updates, startup apps, network, restart status, bad files.
Giving an employee only the system access necessary to perform their job follows this security principle.
What is least privilege?
An employee is terminated. Name three Microsoft-related actions IT should consider.
Disable the account, revoke sessions, reset password, remove licenses, remove group access, secure/convert the mailbox.
An iPad is factory reset, but it does not automatically enroll into Kandji during setup. What should IT check first?
Whether the device is assigned to the correct MDM server in Apple Business Manager.
IT discovers several former employees still have Equina accounts. What type of IT process likely failed?
What is the offboarding/access-removal process?
Ten users suddenly report the exact same problem at the same time. Your troubleshooting priority should shift from the individual devices to this.
What is a system-wide/service/network issue and reporting incidnet?
An employee leaves at 5:00 PM. Their accounts remain active until the following week. What security process needs improvement?
What is timely offboarding / access revocation?