Тёмный

Don’t get Locked Out of Azure AD! Use Emergency Access Accounts 

Travis Roberts
Подписаться 32 тыс.
Просмотров 3,2 тыс.
50% 1

Do you use MFA to protect your Global Admin and other privileged accounts? In most cases this is best practice, but what do you do if MFA is down? If you use your cell phone for MFA, what happens if the phone is lost, or the cellular network is down? That’s what Azur emergency access or “break glass” accounts are for.
In this video, we start with an overview of the problem break glass accounts solve, then we look at specific requirements for emergency access accounts. After that, we review ways to protect and monitor access to these accounts. Finally, we log into the portal and configure an emergency access account and monitoring.
00:00 - Start
05:09 - Create Emergency Access Account
07:07 - Exclude from Conditional Access
08:57 - Send Azure AD Sign-in Logs to Azure Monitor
10:51 - Monitor Account Sign-in Attempts
Links
Free Azure guide! Subscribe to the newsletter
subscribepage.io/rbsIjt
Zero to Hero with Azure Virtual Desktop
www.udemy.com/course/zero-to-...
Hybrid Identity with Windows AD and Azure AD
www.udemy.com/course/hybrid-i...
Windows 365 Enterprise and Intune Management
www.udemy.com/course/windows-...
Cost Management in Azure
www.udemy.com/course/cost-man...
Blog Post with Code
www.ciraltos.com/dont-get-loc...

Наука

Опубликовано:

 

25 июл 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 9   
@amglover4361
@amglover4361 Год назад
Thanks, this is exactly what I do when configuring a new Tenant. It's also worth putting a recurring entry into your calendar (eg monthly) to verify that you can logon OK eg that MFA hasn't unwittingly been enabled for the account
@phillipank1213
@phillipank1213 3 месяца назад
I've excluded both of my break-glass accounts from MFA as explained, is there any way to skip the MFA registration that is required for all of our users?
@skrivyd9221
@skrivyd9221 10 месяцев назад
Thank you for the walkthrough but you didn't address SSPR for Admin accounts. How to do address this?
@Doctair
@Doctair 10 месяцев назад
Travis I have tried your method and everything works, except the SSPR wizard pops up as soon as I login. Can we control teh Password reset and exlcude break glass accounts?
@Kim-tr1fy
@Kim-tr1fy 5 месяцев назад
@@Doctair Hello. I am running into the same issue with SSPR. Wondering if you ever figured this out. On another channel it was suggested that we can turn off SSPR for admin account but it would then be off for all admin accounts which doesn't seam like a very good tradeoff.
@Doctair
@Doctair 3 месяца назад
@@Kim-tr1fy No I did not yet find a solution as of yet. I am guessing that SSPR is off entirely for tenant in these Videos, as I 've several that all run through it but never get prompted for registering the Cell number.
@TMitchellTech
@TMitchellTech Год назад
Good stuff
@rs-tarxvfz
@rs-tarxvfz 9 месяцев назад
My heart skipped a beat today when I switched my default directory and it kept giving me cookie errors. Until i logged into Entra ID whew !
@kanyon_ni_mang_simeon
@kanyon_ni_mang_simeon 10 месяцев назад
time will come you just need to tell the MS AI to do this exactly for you just say your requirement! GG IT sysadmin jobs lol jusy say "uhmm please create me an emergency access to our azure account so i cant be locked out, make it secured but no MFA, and also notify me every time this account logged in" 5 seconds later... AI: done, i have texted you the account details, anything else?
Далее
How to Configure a Conditional Access Policy for AVD
13:01
What are RBAC Roles in Azure and How to Use Them
8:44
Просмотров 2,4 тыс.
Flo Rida - Whistle НА РУССКОМ 😂🔥
00:29
Просмотров 645 тыс.
МОЙ НОВЫЙ ДОМ
1:01:04
Просмотров 1,5 млн
ПОДВОДНЫЙ ГЕЙМИНГ #shorts
00:22
Просмотров 658 тыс.
Entra ID Security For Beginners
10:07
Просмотров 4,9 тыс.
How to clean up inactive guest users in Azure
10:56
Просмотров 4,5 тыс.
How to Review and Search AVD Insights Data
18:20
Implementing FIDO2 authentication for Azure AD users
19:27
#engineering #diy #amazing #electronic #fyp
0:59
Просмотров 2 млн