You may already know Azure Bastion, the remote management (RDP or SSH) feature for Azure Virtual Machine allowing you to connect without using a public IP and opening the management port on NSG (see https://t.co/UBOCpnMD2k). Well, you can now enable Kerberos authentication when connecting using Azure Bastion. To do so, connect to your Azure portal
About 2 years ago, Microsoft has introduced administrative units on Azure Active Directory (see https://t.co/hyacW4j9Po for more). Until now, the membership rule for administrative units was only using direct assignment. Well, today you can now use dynamic rule. To be able to do so, you need: at least Azure AD P1 license for each administrators
Azure AD – You can now use dynamic membership rule for administrative units Read More »
As you may already know, administrators were able to set an idle timeout setting for SharePoint Online (see https://blog.hametbenoit.info/2017/11/10/sharepoint-online-configure-idle-session-timeout/) and Exchange Online (see https://docs.microsoft.com/en-us/powershell/module/exchange/set-organizationconfig?view=exchange-ps#:~:text=Exchange%20Server%202019-,%2DActivityBasedAuthenticationTimeoutEnabled,-The%20ActivityBasedAuthenticationTimeoutEnabled%20parameter&WT.mc_id=M365-MVP-7836) for quite some time when users use the web browser to access the services. This 2 options are independent with each other and configured by either the SharePoint or Exchange administrators
Office 365 – A new global idle timeout settings is available (preview) Read More »
This feature is currently in deployment – available for targeted tenant or rolling out starting mid-March up to mid-April for standard release. These reports are going to help security and compliance officers to identify if there is any gap, issue or misconfiguration on how files are shared or on applying sensitivity labels. To access these
As you know, Azure Active Directory is the heart of the Microsoft Cloud services for authentication, authorization and access management controls. Well, sometime it is difficult to keep up with updated (or outdated) best practices and/or recommendations. Well to help keeping up and provide customized recommendation to your own Azure AD tenant a new feature
Azure AD – Get customized recommendations to improve your Azure AD posture (preview) Read More »
As you know, Azure Active Directory is the heart of identity and access management to access Microsoft cloud platform services. If you have Azure AD P2, you also have the access review feature, which you should use to review access to your applications, groups or Teams (including for guest users) to ensure people continue to
Azure AD – You can now implement multi-stage review in your access reviews Read More »
As you may already know, Azure AD comes with the Identity Protection feature which helps you identify risky sign-ins and/or users; even if you don’t have an Azure AD P2, which is requires to configure the Identity Protection policies, you have the risky reports available. Well, until now, the Identity Protection was covering only user
As you may already know, you can use certificate-based authentication whit Active Directory Federation Service (ADFS). Well, good news, you can now also enable certificate-based authentication with Azure AD without the need to deploy a federation service infrastructure. You will still need to have properly deployed and configured your Public Key Infrastructure (PKI), which makes
As you know Power Platform provides low code/code less capabilities to develop applications (Power Apps) or automation (Power Automate). While these capabilities are powerful and useful it can provides challenges in term of security and data exfiltration. Well, good news, you can now ‘isolate’ your Power Platform tenant from other tenants. This capability is turned
Power Platform – You can now ‘isolate’ your Power Platform tenant (preview) Read More »
If you use Microsoft Power Apps or Power Automate in your company, administrators know it is difficult to have visibility on the Power Platform usage. Well, good news you can now enable tenant analytics to gain more visibility on how the Power Platform is being used. This option is turned off by default. To enable
Power Platform – New tenant analytics capability (preview) Read More »
