We currently use Microsoft's default passkey configuration, allowing both passkey types without attestation. I'm considering whether to create different authentication strengths for various user groups. For highly privileged…
We currently use Microsoft's default passkey configuration, supporting both synced and device-bound passkeys without attestation. I'm trying to work out whether we should create different authentication strengths and…
We've seen device-code phishing attacks where an attacker uses an OAuth token to register a rogue device in Entra ID and obtain a Primary Refresh Token (PRT). Because…
I'm deploying a Conditional Access policy that requires MFA for medium- and high-risk sign-ins, plus password reset and MFA for users identified as high risk. The tenant currently…
I want to get hands-on experience with the Microsoft 365 admin center in a safe test environment. Is there still a practical way to create a trial or…
Several operations teams need to email groups containing both employees and external customers, contractors, and other partners. The current approach is to create external users in Entra ID…
I'm deploying a Conditional Access policy for a customer that requires MFA for medium- and high-risk sign-ins, plus password reset and MFA for users with a high user-risk…
We've been investigating device-code phishing attacks where an attacker authenticates through a device-code flow, obtains OAuth tokens, and then registers or joins a rogue device to Entra. The…
Is anyone else having trouble accessing the Microsoft Entra or Intune admin portals? I'm seeing error pages from the EU region and want to know whether this is…
I'm putting together a disaster-recovery plan for a Microsoft tenant deauthentication or outage scenario. The difficult case is Entra-joined, Intune-managed workstations: if normal workstation sign-in fails and Intune…
Our MSP was unexpectedly locked out of a large customer's Microsoft admin portal by an unskippable passkey enrollment prompt. Microsoft's documentation suggested the campaign was aimed at users…
We use Azure Virtual Desktop to let offshore users access systems while keeping the underlying data in the UK. Conditional Access blocks access from outside the AVD environment…
Is anyone else having trouble accessing the Entra or Intune administration portals? I'm seeing error pages from the EU region and wondering whether there's a wider service disruption…
We're currently piloting Microsoft Global Secure Access in an environment with roughly 400 users and 300 devices. So far, Microsoft 365 traffic routing and the Private Access profile…
We use Azure Virtual Desktop to keep company data in the UK while allowing some overseas users to work remotely. Conditional Access blocks Office access outside AVD and…
For those using Microsoft Entra Application Proxy with custom domains, how are you managing certificate renewals? As far as I can tell, there is no straightforward automated ACME…
For those using Microsoft Entra Application Proxy with custom domains, how are you managing certificate renewals? As far as I can tell, there is no straightforward automated ACME…
I'm evaluating Duo Security for a Microsoft 365 and Entra setup that still uses on-premises Active Directory. Does Duo support this kind of hybrid environment, and are there…
We've used Privileged Identity Management for more than a year, and it works well for native Entra ID roles and Azure resources. The problem is the legacy and…
I have a Windows Server 2022 VM in Azure that hosts an application and two SMB file shares. Users sign in to Microsoft Entra-joined Windows 365 Cloud PCs,…