Azure Active Directory 17 - Benoit's Corner

Azure AD – Users can now review their sign-in activities by themselves

Leave a Comment / Azure Active Directory, Security / Benoit HAMET / October 18, 2019 / AAD, AAD My Account, Azure Active Directory, Azure Active Directory My Account, Azure AD, Azure AD My Account, My Account, Sign-In, Sign-In Activities, Sign-In Activity

This is a capability which has been there for quite long time for Microsoft Account (https://account.live.com/Activity?mkt=en-US&refd=account.microsoft.com&refp=security&fref=security.cards.review-activity&uaid=9e64b34b59604f468d1cb65aa1d973b9), the ability to review sign-in activities. Well, this is now available for corporate account (Azure AD, Office 365). To let you end-users review their sign-in activities, let them go to https://mysignins.microsoft.com/ – or https://myprofile.microsoft.com and check the My Sign-ins […]

Azure AD – Users can now review their sign-in activities by themselves Read More »

Azure AD Connect – You can now synchronize your password policy and force the password change at next logon (preview)

2 Comments / Azure Active Directory, Beta / Preview, Office 365 / Benoit HAMET / October 9, 2019 / AAD, AAD Connect, Azure Active Directory, Azure Active Directory Connect, Azure AD, Azure AD Connect, Cloud Password Policy, Force password change, Force password change at logon, Password Policy

As you know, you have been able to synchronize your user’s passwords with Azure AD Connect for quite some time now thanks to the password hash synchronization feature. However, there has been a small gap there: you were not able to get the “User must change password at next logon” attribute value synchronized to request

Azure AD Connect – You can now synchronize your password policy and force the password change at next logon (preview) Read More »

Azure AD – You can now perform bulk actions on users and groups from the portal (preview)

Leave a Comment / Azure Active Directory, Beta / Preview / Benoit HAMET / October 8, 2019 / AAD, Azure Active Directory, Azure AD, Bulk, Bulk Group Management, Bulk User Management, Group Management, User Management

You may already have quite few scripts at your disposal to perform bulk actions on cloud user accounts and/or groups on Azure Active Directory (AAD). Well, maintaining (or using) these scripts is no longer a requirement as the Azure AD portal has been updated to allow you bulk actions on user accounts/groups. Bulk actions are

Azure AD – You can now perform bulk actions on users and groups from the portal (preview) Read More »

Azure AD / Office 365 – New Global Reader built-in role is coming

Leave a Comment / Azure Active Directory, Office 365 / Benoit HAMET / October 3, 2019 / AAD, Admin Role, Administration Role, Azure Active Directory, Azure AD, O365, Office 365

It has been a long awaited capability: being able to give a complete read-access only to Azure AD/Office 365 administration. Well good news, a read-only administrative access role is coming – called Global Reader. The deployment will start on September 24 and scheduled to be completed by October. It worth noting that few limitations will

Azure AD / Office 365 – New Global Reader built-in role is coming Read More »

Azure AD – A new major version of Azure AD Connect has been released

Leave a Comment / Azure Active Directory, Office 365 / Benoit HAMET / September 30, 2019 / AAD, AAD Connect, Azure Active Directory, Azure Active Directory Connect, Azure AD Connect, Directory Synchronization, DirSync

UPDATE Oct 8th, 2019 it has been reported that some issues with Self-Service Password Reset (SSPR) and Hybrid Azure AD join have been reported. Microsoft has recommended to post-pone upgrading to the 1.4.18.0 version until root cause has been identified and solved. Regarding the SSPR, a new version has been already released for auto-upgrade only

Azure AD – A new major version of Azure AD Connect has been released Read More »

Azure AD – You can now create your own custom administration roles

Leave a Comment / Azure Active Directory, Beta / Preview / Benoit HAMET / August 5, 2019 / AAD, Admin Role, Administration Role, Azure Active Directory, Azure AD, Roles

As you may already know, you can grant administrative access to Azure Active Directory (AAD) and associated resources using built-in administration role. Well, this is going one step further as an update has been deployed on Azure Active Directory which let you create your own custom administration role. During the preview, this capability is available

Azure AD – You can now create your own custom administration roles Read More »

SCCM – You can now synchronize your device collections as Azure AD groups

Leave a Comment / Azure Active Directory, System Center / Benoit HAMET / July 29, 2019 / AAD, Azure Active Directory, Azure AD, SCCM, SCCM 1906, SCCM Current Branch, SCCM Current Branch 1906, System Center, System Center Configuration Manager, System Center Configuration Manager 1906, System Center Configuration Manager Current Branch, System Center Configuration Manager Current Branch 1906

With the release of System Center Configuration Manager Current Branch 1906 (SCCM Current Branch), you can now synchronize your device collections to Azure Active Directory, allowing you to use your on-premises grouping rules to the cloud. This is a one way SCCM to Azure AD process; any membership updates done in Azure AD will not

SCCM – You can now synchronize your device collections as Azure AD groups Read More »

SCCM – You can now discover your Azure AD Security Groups with SCCM

The release of System Center Configuration Manager Current Branch 1906 (SCCM Current Branch) is providing an updated discovery method to your Azure AD tenant. As you may be already aware, you have been able to discover your Azure AD users objects with SCCM for quite some time now. Well, this Azure AD discovery functionality has

SCCM – You can now discover your Azure AD Security Groups with SCCM Read More »

Azure AD – You can now use FIDO2 keys and Microsoft Authenticator App to authenticate against Azure AD

Leave a Comment / Azure Active Directory, Security / Benoit HAMET / July 15, 2019 / AAD, Authenticator App, Authenticator Application, Azure Active Directory, Azure AD, FIDO2, Microsoft Authenticator App, Microsoft Authenticator Application, Password Less, PasswordLess

You can now enable password-less authentication to Azure AD, including Azure AD Application, with Microsoft Authenticator App, Fido2 Keys or Windows Hello. To start using the new password-less authentication methods, logon to your Azure AD portal (https://aad.portal.azure.com/) or Azure portal (https://portal.azure.com) and reach out the Authentication methods blade From there you can enable FIDO2 Security

Azure AD – You can now use FIDO2 keys and Microsoft Authenticator App to authenticate against Azure AD Read More »

Azure AD – New insights reporting authentication methods activity in preview

Leave a Comment / Azure Active Directory, Security / Benoit HAMET / July 5, 2019 / AAD, Azure Active Directory, Azure AD, Security

After having introduced in preview the Usage and Insights for Azure AD Application (see https://t.co/0TLTScRjWI), you can now also have the same insights for the authentication methods used to authenticate against Azure AD. To start using this ‘reporting’ feature, logon to your Azure AD (https://aad.portal.azure.com) or your Azure (https://portal.azure.com/) portal and reach out the Azure

Azure AD – New insights reporting authentication methods activity in preview Read More »