Why Am I Receiving Payment Verification Emails From an Old AWS Account?
I created an AWS account around 2018 to explore the free tier while working for a former employer. I don't remember creating any resources or doing much with…
MFA
Why Is an Inactive AWS Account Asking Me to Verify Payment Information?
I created an AWS account around 2018 to explore the free tier while working for a previous employer. I never knowingly deployed resources, and I stopped using the…
How many Entra ID P2 licenses are required for risk-based Conditional Access?
I'm deploying a Conditional Access policy that requires MFA for medium- and high-risk sign-ins, plus password reset and MFA for users identified as high risk. The tenant currently…
What Authentication Should Users Complete Before Accessing an Internal Network Remotely?
We are mostly cloud-based but still have a legacy on-premises service that staff need to access for things such as terminal services, network drives, printers, and directory-integrated applications.…
How many Entra ID P2 licenses are required for risk-based Conditional Access?
I'm deploying a Conditional Access policy for a customer that requires MFA for medium- and high-risk sign-ins, plus password reset and MFA for users with a high user-risk…
Why is Microsoft forcing passkey enrollment for an account that already has authenticator methods?
Our MSP was unexpectedly locked out of a large customer's Microsoft admin portal by an unskippable passkey enrollment prompt. Microsoft's documentation suggested the campaign was aimed at users…
YubiKey Sign-In Loops in Azure Virtual Desktop
We use Azure Virtual Desktop to let offshore users access systems while keeping the underlying data in the UK. Conditional Access blocks access from outside the AVD environment…
What’s the Least Painful Way to Set Up Passkeys on iPhones?
Microsoft is making passkeys the default authentication experience, and I'm trying to find a smooth setup process for iPhone users. On Windows, Windows Hello for Business is fairly…
Why is Microsoft pushing passkey enrollment even when we use Authenticator?
Our company recently started pushing passkey enrollment, and the messaging has created a lot of confusion. We initially understood that employees using the Microsoft Authenticator app could bypass…
Why are Microsoft passkey prompts forcing users to set up a PIN?
Our company recently began receiving Microsoft passkey enrollment prompts, and the rollout messaging has created a lot of confusion. We originally understood that employees using the Microsoft Authenticator…
YubiKey authentication repeatedly fails inside Azure Virtual Desktop
We use Azure Virtual Desktop to keep company data in the UK while allowing some overseas users to work remotely. Conditional Access blocks Office access outside AVD and…
What’s the best way to set up separate Google Workspace admin accounts?
I currently use two accounts in my Microsoft 365 tenant: a licensed account for everyday work and a separate, unlicensed global administrator account. I'm now responsible for a…
What’s the safest backup plan for Duo MFA if I lose my phone?
I'm setting up Duo Security on my work PC and want to be prepared for situations where my phone is lost, damaged, or unavailable. Is there an option…
Can Duo Security Be Used with Microsoft 365 in a Hybrid Entra Environment?
I'm evaluating Duo Security for a Microsoft 365 and Entra setup that still uses on-premises Active Directory. Does Duo support this kind of hybrid environment, and are there…
Can Duo Security Be Used with Microsoft 365 in a Hybrid Entra Environment?
I'm evaluating Duo Security for Microsoft 365 and Entra ID, but our organization still uses a hybrid environment with on-premises Active Directory. Has anyone deployed Duo in this…
What’s the Best Way to Protect PII on Windows SMB Shares?
Our new Compliance group will be handling personally identifiable information for field technicians and vendors. We have a Windows file server with SMB shares, and BitLocker is already…
What’s the best way to protect PII on Windows SMB shares?
Our new Compliance group will be handling personally identifiable information for field technicians and vendors. We use Windows file servers with SMB shares, and BitLocker is already enabled…
What no-cost, phone-free MFA options work with Microsoft Entra?
Microsoft plans to retire Microsoft-provided SMS and voice authentication starting February 1, 2027. Organizations that want to keep using those methods will need to configure and pay for…
What’s the best phone-free, no-cost MFA option for a hybrid Entra environment?
Microsoft plans to retire its built-in SMS and voice authentication services beginning February 1, 2027. Organizations that want to keep using those methods will need to configure and…
Can KDC Proxy and an RODC provide secure pre-MFA Group Policy access for remote devices?
We're deploying an always-on SASE connection that requires MFA before users can access on-premises resources. I'd like domain-joined endpoints to authenticate to Active Directory and receive computer and…