With the move to the cloud, many organizations synchronize identities to Azure Active Directory. This makes an attacker’s job easier as they have a single point where they can attempt to compromise accounts. In this article, Thijs Lecomte walks through the protection and detection mechanisms available to repel password spray attacks.
When performing a cost-benefit analysis of the Microsoft 365 E5 license for users in your organization, cost is usually the deciding factor as the quality of the features are rarely disputed. However, there are some who argue that to maintain a "Better" Security and Compliance posture as suggested by Microsoft, some of these key security features should be made more widely accessible and affordable and therefore included in the E3 license structure. Microsoft MVP Peter Rising took his debate to Twitter, conducting a straw poll where the results show there is clearly an appetite for more choice when it comes to Microsoft 365 licensing.
For many organizations it is not possible to implement and manage Office 365 to the level of security necessary without Azure AD Premium. It is also not possible to effectively deploy and consume the capabilities of Azure AD Premium all at once. Recommending a phased deployment approach, Brian Desmond walks you through implementation of the four most important features you should start with.
Microsoft is notifying Office 365 customers of their recommendation to turn off password expiration for their Office 365 and Azure AD user accounts.