How to disable basic authentication in Office 365 with Conditional Access policy? You want to block basic authentication known as legacy authentication in Azure AD because you have modern authentication in place for Exchange Online and Exchange on-premises. Also, many…
Hybrid Modern Authentication (HMA) is implemented in the on-premises organization. This way, the users with an on-premises mailbox will use modern authentication instead of basic authentication. It's great because from now on, they will use Azure AD Conditional Access policies.…
How to enable Hybrid Modern Authentication (HMA) in Exchange Server on-premises? We want to secure the Exchange on-premises organization with modern authentication instead of basic authentication. This way, we can use MFA for on-premises user mailboxes and not only for…
Why do users have access to Azure AD administration portal? You only want administrators to have access and restrict users to access Azure portal. It's not relevant for standard users to have access. Is there a way to disable user…
We did migrate from ADFS to Password Hash Synchronization (PHS). The password sync time interval in AD Connect is 2 minutes. You may need to force password sync with Azure AD Connect. In this article, you will learn how to…
After you configure Azure AD MFA and SSPR, you might want to look at how to secure both registrations. For example, you don't want that a spray attack is carried, and the attacker registers for MFA or SSPR. You can…
You have a subscription for Azure AD Premium, and you want to take full advantage of Conditional Access. One of these features is named locations. If you have not configured MFA trusted IPs, you can directly configure named locations. If…
We like to give the users the option to reset their Microsoft 365/Office 365 password. The feature Azure AD Self-Service Password Reset is available for selected users or all the users. Configure Self-Service Password Reset (SSPR) for cloud-only tenant or…
We have an existing Azure AD Connect synchronization with Microsoft 365 tenant. We did create a new Microsoft 365 tenant, and we like to move Azure AD Connect to the new tenant. This means that the existing on-premises organization with…
Azure AD Connect stopped syncing to Azure AD. Looking in Azure AD Connect Synchronization Service Manager, the sync shows the status stopped-deletion-threshold-exceeded. In this article, you will learn why this is happening, and the solution for stopped deletion threshold exceeded.…
