We have Azure AD Connect V1 running in the organization. We like to upgrade from Azure AD Connect V1 to Azure AD Connect V2. We recommend you follow the article Upgrade Azure AD Connect when upgrading to the latest version.…
You have enabled remember Multi-Factor Authentication on trusted device in Office 365 Multi-Factor Authentication. When you look at the setting, you see that Microsoft recommends using Conditional Access sign-in frequency. Let's look at how to move from remember Multi-Factor Authentication…
How to disable basic authentication in Office 365 with Conditional Access policy? You want to block basic authentication known as legacy authentication in Azure AD because you have modern authentication in place for Exchange Online and Exchange on-premises. Also, many…
Hybrid Modern Authentication (HMA) is implemented in the on-premises organization. This way, the users with an on-premises mailbox will use modern authentication instead of basic authentication. It's great because from now on, they will use Azure AD Conditional Access policies.…
How to enable Hybrid Modern Authentication (HMA) in Exchange Server on-premises? We want to secure the Exchange on-premises organization with modern authentication instead of basic authentication. This way, we can use MFA for on-premises user mailboxes and not only for…
Why do users have access to Azure AD administration portal? You only want administrators to have access and restrict users to access Azure portal. It's not relevant for standard users to have access. Is there a way to disable user…
We did migrate from ADFS to Password Hash Synchronization (PHS). The password sync time interval in AD Connect is 2 minutes. You may need to force password sync with Azure AD Connect. In this article, you will learn how to…
After you configure Azure AD MFA and SSPR, you might want to look at how to secure both registrations. For example, you don't want that a spray attack is carried, and the attacker registers for MFA or SSPR. You can…
You have a subscription for Azure AD Premium, and you want to take full advantage of Conditional Access. One of these features is named locations. If you have not configured MFA trusted IPs, you can directly configure named locations. If…
We like to give the users the option to reset their Microsoft 365/Office 365 password. The feature Azure AD Self-Service Password Reset is available for selected users or all the users. Configure Self-Service Password Reset (SSPR) for cloud-only tenant or…
