Explaining Azure AD External Identities
Guest access for your company should be planned and understood by all stakeholders, documented in the company’s Security Policy, and then implemented and reviewed to maintain a clean Azure AD environment.
Guest access for your company should be planned and understood by all stakeholders, documented in the company’s Security Policy, and then implemented and reviewed to maintain a clean Azure AD environment.
In the Exchange Server 2019 “H1” updates, Microsoft finally supported removing the last Exchange Server. But what if you've already said goodbye to yours, and want to get into a supported state? Find out what you need to do..
Preparation, Preparation, and More Preparation Migrations in Microsoft 365 are a complex beast. It seems every time you feel like you have captured everything, more apps or functionalities appear. Every shiny new tool Microsoft releases is another consideration for migration teams and IT departments. Planning for migrations – tenant-to-tenant or otherwise – is a mammoth […]
In the very early Windows NT Days, we had computer accounts connected to domain controllers. This provided the early building blocks of securing data and computers in company networks. Since then, our entire digital landscape has transformed. With modern networking and cloud adoption across so much of our world, it makes sense for our computer accounts to make the move from on-prem Active Directory (AD) to Azure Active Directory (AAD).
Kerberos Delegations can be confusing, but it is important to understand how delegations behave when configured across trust boundaries.
After spending some time to better understand how Azure AD Connect Group Writeback v1.0 works with the attribute flow and some possible use cases, I’ve come up with some practical pointers for you to understand as you consider a deployment.
On July 6, Microsoft announced the public preview of Azure AD Group Writeback. As is usual with announcements of this nature, it created several questions. In this article, I want to explain some higher-level details about the new feature.
Practical365.com is a proud sponsor of The Experts Conference 2022. TEC is all about providing practical Microsoft 365 and Hybrid Activity Directory security, administration, and migration training without the fluff. All content is sourced from the very best in these fields, including Practical365.com authors, Microsoft MVPs, and Microsoft engineers.
The Exchange Recipient Admin Center (ERAC) is a free local web UI to help you manage Exchange-related attributes after you remove the last Exchange Server and install Microsoft's supported Management Tools onto your administrator workstation.
The reality is, remote employees and working situations are here to stay. Unfortunately, many organizations have regressed in terms of endpoint security, partly due to the pandemic as well as the subsequent rush to implement remote work solutions. To help make sense of the many technologies out there and determine the best approach for your organization, this article explores different options from the traditional Active Directory domain membership with group policy management, to co-management with Configuration Manager and Microsoft Intune.
When performing a cost-benefit analysis of the Microsoft 365 E5 license for users in your organization, cost is usually the deciding factor as the quality of the features are rarely disputed. However, there are some who argue that to maintain a "Better" Security and Compliance posture as suggested by Microsoft, some of these key security features should be made more widely accessible and affordable and therefore included in the E3 license structure. Microsoft MVP Peter Rising took his debate to Twitter, conducting a straw poll where the results show there is clearly an appetite for more choice when it comes to Microsoft 365 licensing.
For many organizations it is not possible to implement and manage Office 365 to the level of security necessary without Azure AD Premium. It is also not possible to effectively deploy and consume the capabilities of Azure AD Premium all at once. Recommending a phased deployment approach, Brian Desmond walks you through implementation of the four most important features you should start with.