I feel you on that one, but like sir Andy says, practice practice. IT is the one field you are guaranteed to have to learn for life. It's a passion we get paid to follow!
We are so tired of our users clicking phishing links, entering their 365 passwords when prompted and getting their MFA token stolen from their browsers. We thought MFA would solve compromised mailboxes but bad actors always find a way...
If I may be so bold as to suggest some user training. Incorporate this into your security awareness program. Microsoft also has an excellent attack simulator that you can use.
When is Entra going to completely remove a user’s password like a consumer can currently with an outlook/hotmail account? Currently password- less still lets someone keep clicking on a signin more options until they can get a prompt for password. Password less really isn’t that at this time.
Hi as microsoft partnaire did you know the way to contact Microsoft when all your Microsoft Business Premium account are said doesn't exist. We are facing this issue since Friday but until now can't get in touch with the appropriate support to help us solve the issue. Thanks
@@AndyMaloneMVP I’ve been testing the passwordless experience for windows and saw the option to use a companion device for login. Do you have some insight into how that works? Passwordless experience basically remove the option to log in using passwords. But how does the companion device work and what devices do they refer to?
This solution is inherently a cloud based solution using Entra. It has no relevance to AD on-premise. The underlying thought process is that AD on-premise is generally used on an internal network protected by a firewall. 365 authentication goes out over the public internet which has much more inherent risk, and Microsoft is developing authentication protection like phishing resistant MFA to encourage people to trust 365. You can use phishing resistant MFA on premise, like Windows Hello for Business, and others using 3rd party solutions. But this is a Microsoft Entra/cloud specific video.
