marioferrantejr

[marioferrantejr @marioferrantejr]

@acjuelich Seeing the same in my environment. Bypassing blocking apps during ESP, enrollment wrong in Intune, etc… @IntuneSuppTeam

[Nathan McNulty @NathanMcNulty]

Hahaha, wow... 😮

If you leave App passwords enabled and enforce MFA through per-user MFA, the MFA enrollment wizard actually makes the user to create an app password 🤯

[marioferrantejr @marioferrantejr]

@Danz_abella @TheBFWire Don’t forget Wake Island!

[marioferrantejr @marioferrantejr]

@cmtrace_dot_exe This is great!

[BlackRoomSec @blackroomsec]

Please share this far and wide. As far and wide as you can. NIST Password Guidelines for 2024 are in the process of being updated.

This is a HUGE pet-peeve of mine (when vendors in particular are still operating like its 2017 and keep changing passwords every 60 days, STOP DOING THIS, it's outdated and has been shown to put you MORE at risk than less -- NIST explains why it does in this document, meticulously outlining user behavior**) so I'm sharing this in the hopes all of you will pass it along to your bosses.

The Special Publication series governing passwords is SP 800-63 "Digital Identity Guidelines".

The 2024 version is 800-63-4.

Here: https://t.co/oX8YEJHxXg

The companion docs are also on that link. They are 800-63A, 800-63B and 800-63C. These are different documents for different scenarios in play at your org.

The previous update was in2020.

The changes in the 2020 version from the 2017 version were numerous but one of them was that the password verification method should NO LONGER require passwords be changed at specific intervals (i.e. every 60 days) but in the following circumstances instead:

1. After a breach/compromise
2. User request

2024 repeats this and adds a bunch more guidlines but here is a screenshot of page 13 of the new 800-63-4 (note the # 4 after it) which outlines how your systems should now and moving forward, be handling passwords.

This goes for Active Directory, too. All your systems which have passwords should align with these guidelines provided there isn't another standard or framework you must adhere to which overrules this.

Most frameworks, however, have moved away from arbitrary password resets and complexity rules.

**We cybersec researchers and hackers use wordlists from breaches in a variety of different ways. Hackers use them in tooling to crack passwords whereas researchers use breach dumps to see the kinds of passwords users are creating and the psychology behind them.

Using complexity rules gets you the user psychology of:

Password1
Password2
and so on

Use phrasing instead and allow for spaces, which is important. Humans type phrases with spaces. They also mention phish-resistant methods and most vendors are on-board with MS going to be turning off all Legacy Auth next month, across all free accounts and tenancies.

I'm so excited for the new changes!

Ok I'm off my soapbox.

Share the love! Thank you!

[Nick Foles @NickFoles]

After much thought and prayer, I've decided to retire from the NFL. It's been an incredible 11-year journey filled with unforgettable moments and amazing people. From being drafted by the Eagles to winning the Super Bowl, every step has been a blessing.

I'm excited to spend more time with my family and embrace the next chapter of my life. Thank you to all my teammates, coaches, team staff, and fans for your unwavering support. I am forever grateful.

[ALI TAJRAN @alitajran]

IMPORTANT: Starting September 1st, the Microsoft Entra ID Admin Center and the Microsoft Azure portal will no longer support the assignment of licenses through their user interfaces.

To manage license assignments for users and groups, administrators are required to use the Microsoft 365 Admin Center.

This update is designed to streamline the license management process within the Microsoft ecosystem. This change is limited to the user interface. API and PowerShell access remain unaffected.

All administrators are encouraged to familiarize themselves with the new procedures to ensure a smooth transition.

#EntraID #Microsoft365

[marioferrantejr @marioferrantejr]

@panusaukko Start small, for those of us using the manual method of approving, provide a select all box/mulitple select option for approvals.

[marioferrantejr @marioferrantejr]

@ncbrady Issues here. Latest changes made were to make company portal an offline install for all devices using @Mister_MDM method of deployment. We’re comanaged for both onprem CM devices and autopilot (aadj only).

[marioferrantejr @marioferrantejr]

@NiAndeIT @ncbrady Are you doing comanagement during AP provisioning?

[marioferrantejr @marioferrantejr]

@ncbrady @Mister_MDM Same for me, same scenario. Test device that doing protectedWipes and trying to re-enroll does not get the profile.

[marioferrantejr @marioferrantejr]

@JasonSandys @MMelkersen @ariaupdated Recommendation: add policy recommendations settings that should be followed and set using update rings in MEM

[marioferrantejr @marioferrantejr]

@bytenerd @MMelkersen @bdam555 @TheWMIGuy @ariaupdated @MEM_MVP @kidmystic @UpdatedavidM @Office365 This would be a godsend and would bring extra controls for patching m365 Apps with WuFB!

[marioferrantejr @marioferrantejr]

@StevenKister1 Same here.

[marioferrantejr @marioferrantejr]

@IanMikutel @uniederer @mtholfsen @MicrosoftTeams @jeffteper @Microsoft365 @MSFT365news This is great news!

[marioferrantejr @marioferrantejr]

@mkoivuka Drawing is much smoother on the hub but erasing has taken a step back. The erase functionality with the surface hub pen should be returned as it once was.

[marioferrantejr @marioferrantejr]

@MyNameIsMurray You should change your FU deferral period to 0 and manage through feature update rings instead.

[marioferrantejr @marioferrantejr]

@panusaukko @ariaupdated @ariaupdated nice addition! Any chance coming to Win10?

[marioferrantejr @marioferrantejr]

@bdam555 @ariaupdated Agree here and do not want to underscore what the community and other commerical/nonMS entities are doing, but...
For someone who spends multi-million $ a year in MS licensing, give me a magic button that spits out PowerBI/Update Compliance reports! #fortheSuits