Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

279
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#entraid

0 posts0 participants0 posts today
Public
Phil Gastwirth :imagination:

Just spent like 3 days trying to figure out another Azure Tenants Intune rbac roles not applying... it was caused by the intune license group being nested under another group. Nested groups are a wonderful concept but the amount of times they have been the root of random issues is very high. #azure #intune #entraID

Public
Brian Clark

Really interesting article on this ransomware operators tactics, this part especially so:

“Early Warnings Suggest Entra Connect Is Next Target”
I think it’s worth your time to harden your Microsoft #EntraID Connect (formerly Azure AD Sync) configuration as this is not the first article I’ve seen noting attackers targeting your IAM infrastructure. #cybersecurity

From: @nopatience
swecyb.com/@nopatience/1140239

Swedish Cyber Security CommunityChristoffer S. (@nopatience@swecyb.com)ReliaQuest Inside the World’s Fastest Rising Ransomware Operator - BlackLock https://www.reliaquest.com/blog/threat-spotlight-inside-the-worlds-fastest-rising-ransomware-operator-blacklock/ Somewhat of a deep dive into a relatively new RaaS (BlackLock), a very active group both on RAMP and with adding new victims to their leaksite. Employing significant amount of techniques to prevent analysis (also on their leaksite(!). #Ransomware #CyberSecurity #ThreatIntel #BlackLock #ScreamingGoat
Public
Brian Clark

At this point, most organizations don’t need the old Azure AD Seamless SSO configuration as they use the more modern Entra ID Native or Hybrid join features. AFAIK the Seamless SSO feature was used to support Windows 8 and 2012 systems. If you don’t have any of those, you should be ok to disable this vulnerable feature. Here’s some documentation on how to do so:

learn.microsoft.com/en-us/answ

#cybersecurity #EntraID #microsoft

From: @r1cksec
infosec.exchange/@r1cksec/1140

learn.microsoft.comTurning off Seamless single sign-on - AZUREADSSOACC - Seamless SSO object for Microsoft Entra Connect - Microsoft Q&AI need some help and guidance in Turning off Seamless single sign-on as we are already using Hybrid Azure AD / Entra ID with Password Hash Sync. There is an AD object called AZUREADSSOACC - Seamless SSO object for Microsoft Entra Connect. What will be…
Public
Tony Redmond

Maester Framework Continues to Prosper

The Maester project continues to prosper with a bunch of new features added, including several in the DevOps space. Maester usually tests tenant settings to find and highlight misconfigurations or potential issues. Some new custom tests look for missing user account properties, which is great except for the problem of finding the right accounts to check. All discussed here.

office365itpros.com/2025/02/07
#Microsoft365 #EntraID

Office 365 for IT Pros · Maester Framework Continues to Prosper - Office 365 for IT ProsThe Maester project continues to prosper with a bunch of new features added, including several in the DevOps space. Testing user accounts might be too far.
Public
Brian Clark

Was poking around in Microsoft #EntraID today and looking at the Secure Score for Identity. Good recommendations there—check it out!

I also saw a notice on the page to check out the “new Secure Score experience” so I did. It’s terrible. Why does Microsoft insist on downgrading their UI when they “improve” things? The new experience doesn’t allow you add or remove columns in the recommendations. It also doesn’t allow you to sort columns. These features are valuable and were available in the “old” experience.

Also, I noticed that the score was different depending on whether I was in the new or old experience — with no explanation for the difference in the Entra portal.
#cybersecurity

Public
Brian Clark

When using #microsoft #EntraID for your Identity Platform (IdP) you have many options to improve your #cybersecurity by using Conditional Access policies. Here’s a good one to prevent logins from the Tor network

“Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID”

lab539.com/blog/conditional-ac

Lab539 - Tailored Cyber DefenceConditional Access Policies to Block Tor IPs — Lab539How to create a conditional access policy in Microsoft Entra ID that blocks logins from Tor exit node IP addresses.
Public
kurtsh

Attn Microsoft 365 & Entra ID admins:

Entra ID Connect Sync service needs to be upgraded to the minimum req'd version of 2.3.2 by Sept 23rd, 2024 to avoid disruption to auto-upgrade & alerting functionality.

Yes, in 2 weeks. Final warning.

learn.microsoft.com/en-us/entr

learn.microsoft.comSecurity hardening to the autoupgrade process for Microsoft Entra Connect and Microsoft Entra Connect Health - Microsoft Entra IDThis article describes security improvements to improve autoupgrade.
#entraid#azuread#microsoft365
ExploreLive feeds
About