The head
Entra ID
Identity decides who gets in and what they can touch. Every other piece takes orders from here.
- Conditional Access and MFA design
- Hybrid identity with on-prem Active Directory
- Sign-in investigations and root cause analysis
Five pieces. One tenant.
I'm Marwen Mahmoud, an L3 engineer. For eight years I've been fitting Entra ID, Intune, Exchange, SharePoint and Teams together until they work as one system.
Each piece is sealed somewhere below. Collect all five and see what the full tenant can do.
The five pieces
Each one is a part of Microsoft 365 I run at L3 level. Alone, each is useful. Together, they're a tenant that stops generating tickets.
0 of 5 pieces
The seal holds.
The left arm
Exchange
Mail is where users notice problems first, so it's where fixes need to be fastest.
- Exchange Online mail flow and message trace
- Shared mailboxes, permissions and migrations
- Data loss prevention policies
The right arm
Intune
Every laptop and phone, enrolled, compliant and patched without anyone touching it.
- Autopilot and device enrolment
- Compliance and configuration policies
- App deployment and endpoint troubleshooting
The left leg
Teams
Meetings, chat and calls that just work, which only happens when the other four pieces are right.
- Teams policies and governance
- Meeting and calling issue resolution
- Team lifecycle and guest access
The right leg
SharePoint
The company's files and intranet, organised so people find things and only the right people can open them.
- SharePoint Online sites and architecture
- Permissions, sharing and access issues
- Content migration and governance
Also in my deck
L3 troubleshooting and root cause analysis
Incident and problem management (ITIL)
Active Directory, GPO, DNS, DHCP
Windows Server
VMware
ManageEngine and endpoint management
Backup and service continuity
Networking
Asset management
Side projects
Tools I build to make support teams faster. Everything I can share goes on GitHub.
RR Assigner
A browser extension that assigns unassigned ServiceNow incidents and tasks to your team in rotation. It skips anyone who's off that day, keeps separate rotations for incidents and tasks, and runs on a button press or automatically. It works with any ServiceNow instance, and it's headed for the Chrome, Edge and Firefox stores.
View on GitHubNext piece of the workshop
Scripts, guides and tools for M365 admins. New ones land on GitHub first.
My card
Add it to your team. Click the card to flip it for my contact details.
Marwen Mahmoud
Engineer / Modern Workplace / L3
When this card joins your team, identity, devices, mail, files and meetings stop being separate problems. Incidents are traced to their root cause and closed for good.
8 years in the fieldEXT-0001
Marwen Mahmoud
L3 Modern Workplace engineer with eight years in enterprise IT. I take the escalations nobody else could close, find out why they happened, and make sure they don't come back.
- Focus
- Microsoft 365: Entra ID, Intune, Exchange, SharePoint, Teams
- Level
- L3 investigations, root cause analysis, incident and problem management
- Based in
- Tunisia, open to relocation
- Languages
- Arabic, French, English
Fuel the summoner
The scripts and guides here are free. If one saved you a long night, a coffee helps the next one get built.