Multi Factor Authentication Archives - Practical 365

Practical Protection: MFA is Coming for You, Ready or Not

Paul Robichaux — Wed, 17 May 2023 14:41:03 +0000

Whether you like it or not, MFA is coming for you! You can either deploy and support MFA for your users, or Microsoft is going to do it for you. The choice is yours. Learn more about how Microsoft will be enforcing MFA in the future, and what you should do.

The post Practical Protection: MFA is Coming for You, Ready or Not appeared first on Practical 365.

Stop Using Phone-Based Responses for Multifactor Authentication

Thijs Lecomte — Tue, 09 May 2023 10:00:00 +0000

While some methods for MFA responses have security issues, people often overlook their practical advantages. Not everyone is ready to dump a valid authentication method. In this article, we take the journey to removing phone-based responses from your tenant while considering some practical implications.

The post Stop Using Phone-Based Responses for Multifactor Authentication appeared first on Practical 365.

Planning for Azure AD Conditional Access Policies

Thijs Lecomte — Thu, 10 Feb 2022 18:17:52 +0000

Conditional Access policies provide many security benefits, from the implementation of MFA in a user-friendly way, to the controls that can limit what data users access or download. However, the process of setting up CA policies is daunting to some at first. This article provides some thought processes and best practices to make this security initiative more manageable.

The post Planning for Azure AD Conditional Access Policies appeared first on Practical 365.

Hidden Gems in Microsoft 365 E3 Licensing

Kathleen Greenan — Fri, 29 Oct 2021 14:08:53 +0000

In many organizations, Microsoft 365 is a significant investment. However, you get so much with Microsoft 365 E3 licenses that many organizations are unaware of, including beneficial features across Productivity, Compliance, Security, and Device management. Kat Greenan shares some of her secrets and the hidden gems that can be found in a Microsoft 365 E3 license.

The post Hidden Gems in Microsoft 365 E3 Licensing appeared first on Practical 365.

Why a Potential Autodiscover Flaw is Just the Tip of an Iceberg

Steve Goodman — Tue, 28 Sep 2021 05:55:00 +0000

It's often helpful when security researchers like Guardicore shed light on flaws in Microsoft Exchange - however, the Autodiscover protocol isn't flawed in the way they describe. Even though the issue is hard to replicate, it shouldn't distract from the work you need to do to protect your organization from the underlying reason why people want your credentials.

The post Why a Potential Autodiscover Flaw is Just the Tip of an Iceberg appeared first on Practical 365.

For Heaven’s Sake, Just Turn on MFA Already

Paul Robichaux — Thu, 12 Aug 2021 07:06:00 +0000

Microsoft has recently made major strides to improve the capability and resiliency of multi-factor authentication in Azure AD; however, this article highlights the four practical ways in which you can take advantage of MFA in your Microsoft 365 estate, and just turn the darn thing on already!

The post For Heaven’s Sake, Just Turn on MFA Already appeared first on Practical 365.

The Most Important Steps an Administrator Can Take to Make Exchange Online Secure by Default

Sean McAvinue — Fri, 30 Jul 2021 14:08:22 +0000

There are many ways in which you can improve the security of your Exchange Online environment. In this article, Sean McAvinue details the most important steps that admins can immediately implement to align Exchange Online tenants with a good security baseline and posture.

The post The Most Important Steps an Administrator Can Take to Make Exchange Online Secure by Default appeared first on Practical 365.

Blocking Basic Authentication to Exchange Online

Steve Goodman — Thu, 01 Nov 2018 05:00:43 +0000

Steve Goodman writes on how you can use Authentication Policies in Exchange Online for blocking Basic Authentication in your Exchange Online tenant.

The post Blocking Basic Authentication to Exchange Online appeared first on Practical 365.

Multi-factor Authentication by Default for Administrators in Azure AD and Office 365

Paul Cunningham — Fri, 29 Jun 2018 14:52:52 +0000

How the Azure Active Directory baseline security policy enforces multi-factor authentication for privileged administrator accounts in Office 365 and Azure AD.

The post Multi-factor Authentication by Default for Administrators in Azure AD and Office 365 appeared first on Practical 365.

Using Azure Active Directory Conditional Access Policies to Secure Logins for Accounts with Privileged Directory Roles

Paul Cunningham — Mon, 14 May 2018 16:08:40 +0000

How to use Azure Active Directory conditional access policies to secure logins by accounts with privileged role permissions, such as enforcing multi-factor authentication for all Global Administrators.

The post Using Azure Active Directory Conditional Access Policies to Secure Logins for Accounts with Privileged Directory Roles appeared first on Practical 365.