Active Directory – Set-AzWebApp -name "Anything Microsoft and other stuff on the side"

Section 4 – Mitigate identity threats part 2 of 2

Posted by Harri Jaakkonen Posted on 05/03/2023 0 Comments

Posted in Active Directory, ADFS, Authentication methods, Azure, Azure AD, Certificates, Conditional access, Cross-tenant, Defender, Entra, Hybrid, Identity, On-premises, SC-200, Security, Zero trust

Identity protecting is challenging if you don’t know what you should protect and when you do, you should know how to protect it. In the second part we will be discovering more on Conditional Access as a dynamic boundary in…

Do’s and don’ts concerning security for Identity part 8

Posted by Harri Jaakkonen Posted on 27/11/2022 0 Comments

Posted in Active Directory, ADFS, Authentication methods, Azure, Azure AD, Azure ARC, Certificates, Hybrid, IAM, Identity, Identity Platform, Key vault, Security, Storage

Continuing from last post with the same topic but now from the negative side of things. What could go wrong if you don’t do it right. This post will assume that you are still having on-premises AD with ADCS and…

Do’s and don’ts concerning security for Identity part 2

Posted by Harri Jaakkonen Posted on 15/10/2022 0 Comments

Posted in AAD Connect, Active Directory, Azure, Azure AD, Defender, Hybrid, Identity, Security

Continuing with the do’s of Identity and supposing that you have a Hybrid identity setup. If you still need (haven’t convinced you otherwise) federation services in on-premises, use should use Defender for Identity sensors for ADFS What it needs? ADFS…

Certificate-based authentication is generally available!

Posted by Harri Jaakkonen Posted on 12/10/2022 0 Comments

Posted in Active Directory, Azure, Azure AD, Entra, Hybrid, Identity, Identity Platform, Microsoft Sentinel, Security

Microsoft announced today at Ignite 2022 that Certificate-Based Authentication is officially out of preview and ready to use! Why CBA was created? “In May of 2021, the President issued Executive Order 14028, Improving the Nation’s Cybersecurity calling for the Federal Government to modernize…

Conditional access and authentication strength (preview)

Posted by Harri Jaakkonen Posted on 09/10/2022 0 Comments

Posted in Active Directory, Azure, Certificates, Conditional access, Entra, Hybrid, Identity, Security

First I wanted to mention the link problems inside Azure Portals. For a while and for some people portal.azure.com didn’t show the Authentication strengths in their portal, this has now been fixed in normal Azure portal. Entra portal on the…

Azure MFA migration tool and how to setup MFA NPS extension

Posted by Harri Jaakkonen Posted on 01/09/2022 0 Comments

Posted in Active Directory, Azure, Conditional access, Hybrid, Security

Well, this is nice. Microsoft has released a migration tool to get rid of your On-premises MFA server. Scenarios Moving the registered MFA phone numbers is only part of the migration from MFA Server to Azure AD Multi-Factor Authentication. The…

Section 5 – Design security for infrastructure – Design a strategy for securing server and client endpoints

Posted by Harri Jaakkonen Posted on 24/08/2022 0 Comments

Posted in AAD Connect, Active Directory, ADFS, Azure, Azure AD, Azure Policy, Certificates, Key vault, Security, Zero trust

Wednesday is here and time for the next post to my SC-100 exam cram. NOTE: includes hybrid and multi-cloud Specify security baselines for server and client endpoints Specify security requirements for servers, including multiple platforms and operating systems Specify security…

2022 H1 Cumulative Updates for Exchange Server

Posted by Harri Jaakkonen Posted on 21/04/2022 0 Comments

Posted in AAD Connect, Active Directory, Azure, Azure AD, Defender, Exchange, Identity, Microsoft 365, Migrate, Office 365, Onpremise, Powershell, Security

What was released? With 2022 H1 there came some significant update to how You manage and license your Exchange-servers in a Hybrid setup. Exchange Management Tools Update You don’t anymore need Exchange Server for management purposes (Management Hybrid) you can…

Section 3 – Manage application access – Integrate single sign-on (SSO) and identity providers for authentication

Posted by Harri Jaakkonen Posted on 04/02/2022 0 Comments

Posted in AAD Connect, Active Directory, Azure, Azure AD, Identity, Security

This is section 3 of AZ-500 preparation guide and starting with IdP and SSO. What is IdP? Azure AD is also consider as IdP, it can authenticate Your with different cloud services like Google and AWS. An identity provider (IdP)…

Azure B2C with AFD and custom domain(s)

Posted by Harri Jaakkonen Posted on 05/01/2022 0 Comments

Posted in Active Directory, Azure, Azure B2C, Identity, Security

Be default Azure B2C comes with onmicrosoft.com login url. If you want to change it, you have to make use of custom domains via Azure Frontdoor. How to? Microsoft has an excellent article to establish this requirement. In the article…

Category: Active Directory