Great session Andy!

@AndyMaloneMVP

2 жыл бұрын

Thank you kindly Sir 👍😊

Great video Andy!

@AndyMaloneMVP

2 жыл бұрын

Thanks Christian I really appreciate your kind comment.👍

Hi Andy, great content about Conditional Access. There are sometimes confusing discussions about MFA and conditional access. There ist still MFA around in Azure AD. But conditional access is the better way. For our customer we recommend MFA every time for high priviledged accounts like global admins etc. Or just implement PIM with MFA. Reduce your surface. PIM might be another topic for another video, for getting granular access with the least priviledges.

@AndyMaloneMVP

2 жыл бұрын

MFA is definitely the way to go. However you may want to also take a look at Microsoft’s break glass administrator account option in Microsoft docs. It recommends the creation of a backdoor administrator account with a very complex password that you would store in a tin box somewhere. I know, it sounds crazy doesn’t it? Personally however, I love the idea of PIM with MFA And I believe this is a great combination. I hope this helps and thanks for your great question. All the best, Andy

Great video

Thank you Andy!

@AndyMaloneMVP

2 жыл бұрын

Delighted you found it useful 👍

Fabulous - Thankyou

@AndyMaloneMVP

2 жыл бұрын

Thanks Jackie I really appreciate your kind comment and great to have you on board. All the best, Andy

Thank you for sharing the information, it is helpful! Question, on my tenant, in the user service setting, I don't have the "Trusted ips" where should I enable that option?

@AndyMaloneMVP

2 жыл бұрын

Thank you for your nice comments. In terms of seeing a trusted IP address tap. Perhaps you are on a small business plan and do not have access to this feature. Thanks again, and all the best.

Merci pour la vidéo

@AndyMaloneMVP

Жыл бұрын

You’re welcome and Merci

Thank you

@AndyMaloneMVP

Жыл бұрын

Welcome!

I have a single person business so only one user/administrator, it would be great to have a video based on the admin also being the user

@AndyMaloneMVP

7 ай бұрын

So noted I’ll see what I can do for you.

Andy, when you showed the Authentication Methods > User registration details, is that for MFA registration or for registration to one of the authentication methods enabled in Policies (also under Authentication Methods)? I ask because I just sent up a new tenant and none of those policies are enabled. However, I setup a CA policy to require MFA. I logged in with a test user for the first time and it made me register for MFA as expected. However, when I look in the User Registration details, there are no results. I just want to make sure I haven't misunderstood something. I'd also like to see who has currently registered for MFA and what method they chose if possible. Thanks!

@AndyMaloneMVP

Жыл бұрын

Often with logs there is a delay in the UI. It sounds like you’ve done everything correctly.

I appreciate your helpful videos.What is the differenece between MFA and two-step verification ?

@AndyMaloneMVP

Жыл бұрын

MFA uses at least three factors. Username, password, device and biometric.

Andy, you need a small carpet on the wall.. room's acoustics like room 101 from the popular book. Good vid though! Thanks.

@AndyMaloneMVP

2 жыл бұрын

I’m aware of this but convincing my wife to put a carpet on the wall, well that’s another matter😂🤣

@tomekkrakowiak2398

2 жыл бұрын

@@AndyMaloneMVP All good!

What is the ongoing user experience like, not just the first time? We use Microsoft 365 with desktop Outlook and also get email pulled into our iPhones using iPhone native Mail client. Does the user have to input a code once a day at work and every time they look at their phone email or only after a reboot? Thanks, appreciate the presentation.

@AndyMaloneMVP

2 жыл бұрын

To successfully implement MF a I would recommend enabling the trusted locations feature. This will allow you to exclude any IP address ranges for branch offices and so on. The idea is that when the user signs in conditional access detects that they are in a trusted location and this will not prompt them. You can also adjust the conditional access policy so that it can remember signing for a number of days. However this works if you choose the all cloud apps not individual apps as I discussed in the video. I hope this helps and by all means please take a look at the reference documents at docs.microsoft.com they do some great articles on the multifactor authentication.

Hi Andy, I have 2 questions. 1. Is there a conditional access if the pc has not sign in over period of day (ex: 30 days), block the device to use company resources. 2.Is there a template or easy way to uninstall Window default apps? thank you

@AndyMaloneMVP

Жыл бұрын

Q1. Yes you can do this is conditional access via session controls, along with Intune Compliance policy settings. Q2 I don't know, but i'd try Autopilot if I was you. Sorry I don't know a specific setting sorry. Try the Microsoft tech community.

Thank you for your videos. How can I make it so that external users are required to register MFA when they try to access files / folders shared from an internal users OneDrive? And that without manually addiing them to AAD. I can see that when I invite users to an Teams they are getting an guestaccount in the AAD, so then I can add a conditional policy, but not when they are shared files and folders from a users OneDrive.

@AndyMaloneMVP

Жыл бұрын

You can do this via Teams but I’m not sure from the OneDrive app. Also conditional access. This is quite a specific technical support questions. I would probably take a look at the Microsoft Tech community or submit a support query. Thanks again and good luck.

Where is the first Conditional Access link that you mentioned (around minute 3)?

@AndyMaloneMVP

8 ай бұрын

Entra ID Admin centre - Protection - conditional access. You need a P1 licence to access.

Hi Andy, thanks for your video. I am wondering, how about guest users? If MFA is activated for all, what happens with their acces? An also, we have our zimbra mail connected with outlook by imap, if modern auth is activated ( imap desactivé) will it cut this acces? Thanks a lot

@AndyMaloneMVP

Жыл бұрын

Hey Nora, that’s a great question. MFA will be mandatory for all Microsoft products pretty soon as well as Google and so on. So at some point in the chain I guess Tudor will have to MFA their way in. You can also enforce this with conditional access for guests coming in to your organisation. Thanks again, and all the best, Andy

The issue I'm having is with in the hybrid environment. The 365 client desktop app. Won't prompt an mfa and people are stuck on the log in loop.

@AndyMaloneMVP

Жыл бұрын

I think this is a known issue. Check Microsoft support. Or lookup the Microsoft tech community. Good luck 👍

This needs to be updated, the new MFA setup page is much simpler for users.

@AndyMaloneMVP

2 жыл бұрын

Totally Agree :-)

@keaco73

2 жыл бұрын

It seems 365 changes almost daily functionality (which is good) and mostly unnecessarily and drastically changes page location (most annoying).

@AndyMaloneMVP

2 жыл бұрын

@@keaco73 agreed

Hello Andy, the audio of this video keeps skipping. For example if you go to time stamp 5:23 the audio drops or skips.

@AndyMaloneMVP

Жыл бұрын

Strange, I’ll check it out. Although to be honest as a publisher video, there’s not much I can do at this stage. I’m very sorry for the inconvenience.

@kb8570

Жыл бұрын

@@AndyMaloneMVP No problem Andy.

our external users frequently struggle when MFA is required on our side (the host) and on their side (guest employee using their org. MFA). double MFA set-up is confusing. I've found plenty of demos that use guest gmail accounts but I've not found one demonstrating a guest user trying to authenticate into a different tenant with their M365 account. Have you seen any guidance for that?

@AndyMaloneMVP

10 ай бұрын

Yes and I'll cover it soon in a session.. It's a setting in the external colab settings in Entra ID

Does MS MFA support a radius setup (legacy) or is NPS server mandatory? (Other MFA system supports Radius setup)

@AndyMaloneMVP

2 жыл бұрын

Hi Jorgen Hmm not sure about NPS. However yes you can interstate it’s with Windows Server but in Hybrid. I would check out docs.Microsoft.com thanks again and all the best.

@PiglemsgamingTV

Жыл бұрын

There is a NPS extension for Azure MFA that you can install on your NPS server. This will allow you to use MFA with radius authentication. Be aware that if you install this and you are using NPS for enterprise WiFi auth then you will need to look at the documentation and add in a reg key with your WiFi IP addresses to allow them to bypass the MFA.

So how do you suggest protecting those users not enrolled yet from password sprays and enrolling themselves gaining access?

@AndyMaloneMVP

2 жыл бұрын

You can encourage your users to use MFA by going into Azure active directory admin centre, authentication methods and taking a look at the registration campaign. This tool will help your users register for MFA. Forget password is they’re so 90s.

@jstump1972

2 жыл бұрын

@@AndyMaloneMVP oh I know how to get them to enroll, That isn’t the problem, the problem is forcing them to do it before some bad actor does a password spray.

@AndyMaloneMVP

2 жыл бұрын

@@jstump1972 then just enforce it. The next time long in they’ll be forced to register. Password spay issues can be solved by either company security policy, education and good IT management. You have the tools, it’s over to you now my friend 😊

Ive had some phones stolen or lost but email accounts are old ones my wife set up for me . But the addss for one is showing 220 mcdowell st.

@AndyMaloneMVP

Жыл бұрын

Sorry but I’m not sure what you’re asking me here?

hello I have activated MFA on an office 365 account and since then, I can't connect on this account with Outlook client, it is always the server exchange connection problem. I even deleted the current profile to create another one, but it didn't always work. I have done several resolution tests but I still have the same problem. I even uninstalled Office and then reinstalled it but when I want to add the outlook account again, there is always the server connection problem that appears. I don't know what to do anymore. Do you have any other solution for me? After applying the MFA, all other applications work except outlook I have this same problem since I activated the mfa, outlook client does not work anymore

@AndyMaloneMVP

Жыл бұрын

Thanks for your question. Too be honest this is more of a technical support issue which I’m sure you understand can not provide support for. However, here’s a couple of things I found and I wish you luck. docs.microsoft.com/en-us/answers/questions/600738/enabled-mfa-and-can-no-longer-access-outlook-deskt.html and here www.alitajran.com/outlook-needs-password-after-hybrid-modern-authentication-implementation/ and here community.spiceworks.com/topic/2096292-outlook-stuck-in-an-mfa-loop Good luck👍😊

How do people tend to manage users that don't have a company phone and refuse to register MFA with a personal device? Would you create a conditional access policy to then block that person from being able to sign in to 365 services from anywhere other than a trusted location like a company office?

@AndyMaloneMVP

Жыл бұрын

MFA Can be accomplished by an App authentication code or phone call.

Hi Andy got one question. if I add an account say pay pal into my Microsoft authenticator (MA) on one primary Android phone. then I have another secondary phone to serve as a backup in case I lost or damage the primary phone. I have Microsoft authenticator on both phones. i can see my personal Microsoft account on both phones but cannot see the pay pal code on the secondary phone. it only shows on my primary phone. why is that? please advise. I also use Google authenticator for other accounts like Facebook, Zoom, and Twitter and it will show codes across both devices. thanks a lot, in advance.

@AndyMaloneMVP

Жыл бұрын

Honestly my friend. I'm not sure. This is a support Q. I could BS you, their you are are an honest answer :-) Have you tried the Microsoft Tech community?

@feichai01

Жыл бұрын

@@AndyMaloneMVP thanksfor being honest . i will ask Microsoft tech community .

Bonjour, je ne n'ai pas bien compris la partie de l'authentification moderne, vous conseillez de l'activer ou de ne pas l'activer?

@AndyMaloneMVP

Жыл бұрын

I really wish KZread had a built in translation tool.

@stephanielemejouk8127

Жыл бұрын

@@AndyMaloneMVP Hi, I didn't quite understand the modern authentication part, do you advise to enable it or not?

@AndyMaloneMVP

Жыл бұрын

@@stephanielemejouk8127 Modern authentication supports new next gen protocols including SAML, OAuth 2.0 etc and includes the capabilities for technologies like multifactor authentication and conditional access. Whereas older clients such as Microsoft outlook 97, and older versions of Microsoft exchange Would require a user to simply login using a username and password, which is easily Hackable. I hope this helps.

@stephanielemejouk8127

Жыл бұрын

@@AndyMaloneMVP Thanks very much

I seem to be experiencing an issue with your video. The sound seems to cut off at the end of your sentences. I have tried to view your webpage with several devices and it is the same. I do not have this problem with any other KZread videos. However, nobody else seems to have mentioned it in the comments below.

@AndyMaloneMVP

2 жыл бұрын

Thanks for letting me know. Is it just this video or any others?

@Tigs62

2 жыл бұрын

@@AndyMaloneMVP Hi. I have listened to 2 more of your Videos and the sound seems fine on those. Here are a few timestamps of where I hear it in this video: 4:30 5:09 5:24 6:07 I think that it is only a fraction of a second missing each time, but it is like the last word in a sentence. I found myself saying out loud what i thought the word should be.

@AndyMaloneMVP

2 жыл бұрын

@@Tigs62 thanks Chris

@jobisha6704

Жыл бұрын

I faced the same problem. Audio seems to be cut in between, but it is manageable. I just came to the comments to check if anyone else faced the problem :)

@nickparrish1451

Жыл бұрын

I also get this, it's on a lot of your videos, as stated its manageable, I use KZread app on a Samsung phone phone. Like your videos, great content in easily manageable chunks.

how can you tie in endpoint mfa with this?

@AndyMaloneMVP

8 ай бұрын

Conditional Access

why are some audio missing

@AndyMaloneMVP

Жыл бұрын

Strange no one else mentioned that. I’ll check

seems outdated to me. Microsoft recommends using Conditional Access for MFA and not use the "old" MFA portal anymore.

@AndyMaloneMVP

Жыл бұрын

Totally agreed, but while its there it has to be known :-)

Great content, but bad editing. A lot of cuts before the statements end.

@AndyMaloneMVP

5 ай бұрын

I’m trying my best sorry

Thank you Andy!

@AndyMaloneMVP

2 жыл бұрын

You’re very welcome I hope you found it useful 😊