Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Microsoft GuyJflo
What is the Zero Trust Assessment?
We publish extensive guidance on how to configure Microsoft Entra, Microsoft Intune, Azure networks and Microsoft Purview for increased security, but manually checking these against a tenant's configuration can be time-consuming and error-prone.
Microsoft Entra ID Protection risk-based access policies - Microsoft Entra ID Protection
Article 02/05/2024 Access control policies can be applied to protect organizations when a sign-in or user is detected to be at risk. Such policies are called risk-based policies. Microsoft Entra Conditional Access offers two risk conditions: Sign-in risk and User risk. Organizations can create risk-based Conditional Access policies by configuring these two risk conditions and choosing an access control method.
Simulating risk detections in Microsoft Entra ID Protection
Sign in to the Microsoft Entra admin center as at least a Security Administrator. Browse to Identity > Applications > App registrations. Select New registration to register a new application or reuse an existing stale application. Select Certificates & Secrets > New client Secret , add a description of your client secret and set an expiration for the secret or specify a custom lifetime and select Add. Record the secret's value for later use for your GitHub Commit.
Cloud apps, actions, and authentication context in Conditional Access policy - Microsoft Entra
Article 09/21/2023 Target resources (formerly Cloud apps, actions, and authentication context) are key signals in a Conditional Access policy. Conditional Access policies allow administrators to assign controls to specific applications, services, actions, or authentication context.
Investigate risk Azure Active Directory Identity Protection - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 07/05/2023 In this article Identity Protection provides organizations with three reports they can use to investigate identity risks in their environment. These reports are the risky users, risky sign-ins, and risk detections. Investigation of events is key to better understanding and identifying any weak points in your security strategy.
Token protection in Azure AD Conditional Access - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/09/2023 6 minutes to read In this article Token protection (sometimes referred to as token binding in the industry) attempts to reduce attacks using token theft by ensuring a token is usable only from the intended device. When an attacker is able to steal a token, by hijacking or replay, they can impersonate their victim until the token expires or is revoked.
Securing privileged access overview
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/03/2023 In this article Organizations should make securing privileged access the top security priority because of the significant potential business impact (and high likelihood) of attackers compromising this level of access. Privileged access includes IT administrators with control of large portions of the enterprise estate and other users with access to business critical assets.
Why are privileged access devices important
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/03/2023 In this article This guidance is part of a complete privileged access strategy and is implemented as part of the Privileged access deployment End to end zero trust security for privileged access requires a strong foundation of device security upon which to build other security assurances for the session.
Developing a privileged access strategy
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/03/2023 In this article Microsoft recommends adopting this privileged access strategy to rapidly lower the risks to your organization from high impact and high likelihood attacks on privileged access. Privileged access should be the top security priority at every organization. Any compromise of these users has a high likelihood of significant negative impact to the organization.
The immutable laws of security
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/03/2023 In this article The original immutable laws of security (v2 updated below) identified key technical truths that busted prevalent security myths of those times. In that spirit, we're publishing a new complementary set of laws focused on busting prevalent myths in today’s world of ubiquitous cybersecurity risk.
What is risk? Azure AD Identity Protection - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 02/16/2023 In this article Risk detections in Azure AD Identity Protection include any identified suspicious actions related to user accounts in the directory. Risk detections (both user and sign-in linked) contribute to the overall user risk score that is found in the Risky Users report. Identity Protection provides organizations access to powerful resources to see and respond quickly to these suspicious actions.
Common Zero Trust identity and device access policies - Microsoft 365 for enterprise - Office 365
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 02/07/2023 16 minutes to read In this article Organizations have lots to worry about when deploying Microsoft 365 for their organization.
Securing privileged access overview
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 12/16/2022 2 minutes to read In this article Organizations should make securing privileged access the top security priority because of the significant potential business impact (and high likelihood) of attackers compromising this level of access. Privileged access includes IT administrators with control of large portions of the enterprise estate and other users with access to business critical assets.
Terms of use in Azure Active Directory - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/09/2023 In this article Azure AD terms of use policies provide a simple method that organizations can use to present information to end users. This presentation ensures users see relevant disclaimers for legal or compliance requirements. This article describes how to get started with terms of use (ToU) policies.
What is Conditional Access in Azure Active Directory? - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 06/22/2023 In this article Microsoft is providing Conditional Access templates to organizations in report-only mode starting in January of 2023. We may add more policies as new threats emerge. The modern security perimeter extends beyond an organization's network perimeter to include user and device identity. Organizations now use identity-driven signals as part of their access control decisions.
Conditional Access - Block access by location - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/16/2023 In this article With the location condition in Conditional Access, you can control access to your cloud apps based on the network location of a user. The location condition is commonly used to block access from countries/regions where your organization knows traffic shouldn't come from. For more information about IPv6 support, see the article IPv6 support in Azure Active Directory.
Require MFA for administrators with Conditional Access - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/10/2023 In this article Accounts that are assigned administrative rights are targeted by attackers. Requiring multifactor authentication (MFA) on those accounts is an easy way to reduce the risk of those accounts being compromised.
Conditional Access templates - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/10/2023 2 minutes to read In this article Conditional Access templates provide a convenient method to deploy new policies aligned with Microsoft recommendations. These templates are designed to provide maximum protection aligned with commonly used policies across various customer types and locations.
Require MFA for Azure management with Conditional Access - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/16/2023 In this article Organizations use many Azure services and manage them from Azure Resource Manager based tools like: Azure portal Azure PowerShell Azure CLI These tools can provide highly privileged access to resources that can make the following changes: Alter subscription-wide configurations Service settings Subscription billing To protect these privileged resources, Microsoft recommends requiring...
Require MFA for all users with Conditional Access - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/10/2023 In this article As Alex Weinert, the Directory of Identity Security at Microsoft, mentions in his blog post Your Pa$$word doesn't matter: The guidance in this article will help your organization create an MFA policy for your environment.
The immutable laws of security
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 10/27/2022 4 minutes to read In this article The original immutable laws of security (v2 updated below) identified key technical truths that busted prevalent security myths of those times. In that spirit, we're publishing a new complementary set of laws focused on busting prevalent myths in today’s world of ubiquitous cybersecurity risk.
Providing a default level of security in Azure Active Directory - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/23/2023 In this article Microsoft is making security defaults available to everyone, because managing security can be difficult. Identity-related attacks like password spray, replay, and phishing are common in today's environment. More than 99.9% of these identity-related attacks are stopped by using multifactor authentication (MFA) and blocking legacy authentication.
Block legacy authentication - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/10/2023 In this article To give your users easy access to your cloud apps, Azure Active Directory (Azure AD) supports a broad variety of authentication protocols including legacy authentication. However, legacy authentication doesn't support things like multifactor authentication (MFA). MFA is a common requirement to improve security posture in organizations.
Continuous access evaluation in Azure AD - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 02/08/2023 15 minutes to read In this article Token expiration and refresh are a standard mechanism in the industry. When a client application like Outlook connects to a service like Exchange Online, the API requests are authorized using OAuth 2.0 access tokens. By default, access tokens are valid for one hour, when they expire the client is redirected to Azure AD to refresh them.
What is Azure Active Directory Identity Protection? - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 07/05/2023 In this article Azure AD Identity Protection helps organizations detect, investigate, and remediate identity-based risks. These identity-based risks can be further fed into tools like Conditional Access to make access decisions or fed back to a security information and event management (SIEM) tool for further investigation and correlation.
Developing a privileged access strategy
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 09/02/2022 10 minutes to read In this article Microsoft recommends adopting this privileged access strategy to rapidly lower the risks to your organization from high impact and high likelihood attacks on privileged access. Privileged access should be the top security priority at every organization. Any compromise of these users has a high likelihood of significant negative impact to the organization.
Why are privileged access devices important
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 09/02/2022 6 minutes to read In this article This guidance is part of a complete privileged access strategy and is implemented as part of the Privileged access deployment End to end zero trust security for privileged access requires a strong foundation of device security upon which to build other security assurances for the session.
The Conditional Access What If tool - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/16/2023 2 minutes to read In this article The Conditional Access What If policy tool allows you to understand the impact of Conditional Access policies in your environment. Instead of test driving your policies by performing multiple sign-ins manually, this tool enables you to evaluate a simulated sign-in of a user. The simulation estimates the impact this sign-in has on your policies and generates a simulation report.
Securing privileged access overview
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/16/2022 2 minutes to read In this article Organization's should make securing privileged access the top security priority because of the significant potential business impact (and high likelihood) of attackers compromising this level of access. Privileged access includes IT administrators with control of large portions of the enterprise estate and other users with access to business critical assets.
Developing a privileged access strategy
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/16/2022 10 minutes to read In this article Microsoft recommends adopting this privileged access strategy to rapidly lower the risks to your organization from high impact and high likelihood attacks on privileged access. Privileged access should be the top security priority at every organization. Any compromise of these users has a high likelihood of significant negative impact to the organization.
Location condition in Azure Active Directory Conditional Access - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 02/28/2023 8 minutes to read In this article Conditional Access policies are at their most basic an if-then statement combining signals, to make decisions, and enforce organization policies. One of those signals is location. Important IPv6 is coming to Azure Active Directory (Azure AD). We will begin introducing IPv6 support into Azure AD services in a phased approach, starting April 3, 2023.
Location condition in Azure Active Directory Conditional Access - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/15/2022 11 minutes to read In this article As explained in the overview article Conditional Access policies are at their most basic an if-then statement combining signals, to make decisions, and enforce organization policies. One of those signals that can be incorporated into the decision-making process is location.
Enable Enterprise State Roaming in Azure Active Directory - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/15/2022 4 minutes to read In this article Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device. Enterprise State Roaming operates similar to the standard consumer settings sync that was first introduced in Windows 8.
Enable Enterprise State Roaming in Azure Active Directory - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/10/2023 In this article Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device. Enterprise State Roaming operates similar to the standard consumer settings sync that was first introduced in Windows 8.
Terms of use in Azure Active Directory - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 09/09/2022 18 minutes to read In this article Azure AD terms of use policies provide a simple method that organizations can use to present information to end users. This presentation ensures users see relevant disclaimers for legal or compliance requirements. This article describes how to get started with terms of use (ToU) policies.
Manage devices in Azure AD using the Azure portal - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/15/2022 9 minutes to read In this article Azure Active Directory (Azure AD) provides a central place to manage device identities and monitor related event information. You can access the devices overview by completing these steps: Sign in to the Azure portal. Go to Azure Active Directory > Devices.
What is Conditional Access in Azure Active Directory? - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/15/2022 2 minutes to read In this article The modern security perimeter now extends beyond an organization's network to include user and device identity. Organizations can use identity-driven signals as part of their access control decisions. Conditional Access brings signals together, to make decisions, and enforce organizational policies.
Common Conditional Access policies - Azure Active Directory - Microsoft Entra
Common Conditional Access policies Article 08/15/2022 2 minutes to read 2 contributors In this article Security defaults are great for some but many organizations need more flexibility than they offer. Many organizations need to exclude specific accounts like their emergency access or break-glass administration accounts from Conditional Access policies. The policies referenced in this article can be customized based on organizational needs.
Continuous access evaluation in Azure AD - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/15/2022 13 minutes to read In this article Token expiration and refresh are a standard mechanism in the industry. When a client application like Outlook connects to a service like Exchange Online, the API requests are authorized using OAuth 2.0 access tokens. By default, access tokens are valid for one hour, when they expire the client is redirected to Azure AD to refresh them.
Securing Domain Controllers Against Attack
Article 04/10/2023 Applies to: Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012 Law Number Three: If a bad guy has unrestricted physical access to your computer, it's not your computer anymore. - . Domain controllers provide the physical storage for the Active Directory Domain Services (AD DS) database, in addition to providing the services and data that allow enterprises to effectively manage their servers, workstations, users, and applications.
Administrative tools and logon types reference - Windows Server
Article 08/15/2022 This reference information is provided to help identify the risk of credential exposure associated with different administrative tools for remote administration. In a remote administration scenario, credentials are always exposed on the source computer so a trustworthy privileged access workstation (PAW) is always recommended for sensitive or high impact accounts.
Continuous access evaluation for workload identities in Azure AD - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 07/27/2022 2 minutes to read In this article Continuous access evaluation (CAE) for workload identities provides security benefits to your organization. It enables real-time enforcement of Conditional Access location and risk policies along with instant enforcement of token revocation events for workload identities. Continuous access evaluation doesn't currently support managed identities.
Securing privileged access intermediaries
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 06/08/2022 12 minutes to read In this article Security of intermediary devices is a critical component of securing privileged access. Intermediaries add link to the chain of Zero Trust assurance for the user or administrator's end to end session, so they must sustain (or improve) the Zero Trust security assurances in the session.
How Azure AD device registration works - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 02/15/2022 9 minutes to read In this article Device Registration is a prerequisite to cloud-based authentication. Commonly, devices are Azure AD or hybrid Azure AD joined to complete device registration.
Azure Active Directory security defaults - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/22/2022 8 minutes to read In this article Microsoft is making security defaults available to everyone, because managing security can be difficult. Identity-related attacks like password spray, replay, and phishing are common in today's environment. More than 99.9% of these identity-related attacks are stopped by using multi-factor authentication (MFA) and blocking legacy authentication.
Conditional Access - Block access by location - Azure Active Directory - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 09/09/2022 2 minutes to read In this article With the location condition in Conditional Access, you can control access to your cloud apps based on the network location of a user. The location condition is commonly used to block access from countries/regions where your organization knows traffic shouldn't come from. Note Conditional Access policies are enforced after first-factor authentication is completed.
Conditional Access - Require MFA for administrators - Azure Active Directory - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/15/2022 2 minutes to read In this article Accounts that are assigned administrative rights are targeted by attackers. Requiring multi-factor authentication (MFA) on those accounts is an easy way to reduce the risk of those accounts being compromised.
Configure authentication session management - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/15/2023 10 minutes to read In this article In complex deployments, organizations might have a need to restrict authentication sessions.
Block legacy authentication - Azure Active Directory - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/15/2022 8 minutes to read In this article To give your users easy access to your cloud apps, Azure Active Directory (Azure AD) supports a broad variety of authentication protocols including legacy authentication. However, legacy authentication doesn't support multifactor authentication (MFA). MFA is in many environments a common requirement to address identity theft.
Why are privileged access devices important
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/16/2022 6 minutes to read In this article This guidance is part of a complete privileged access strategy and is implemented as part of the Privileged access deployment End to end zero trust security for privileged access requires a strong foundation of device security upon which to build other security assurances for the session.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Microsoft
Contact Microsoft, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack