Just want to say Thank You for making these videos. They really helped me in learning for my exams and now I have passed Ms-100, 101 and 500. Thanks again!

@ConceptsWork

4 жыл бұрын

Thank you for kind words :-)

Brilliantly explanied and demonistrated. Many thanks.

thanks so so much, what a crisp and clear explanation!! Hats off !!

@ConceptsWork

Жыл бұрын

Glad it helped.

Thank you so much, such a nice and simple way of explanation ...

Thanks Mate for the good video ... very nicely explained and above all .. the best thing about your video is .. you made sure to test it and not only leave it at the theory/ learning part.. great stuff mate.. Stay well and blessed.

@ConceptsWork

3 жыл бұрын

Glad it helped

Great video. Thank you for this clear explanation & tutorial.

@ConceptsWork

3 жыл бұрын

Glad you enjoyed it!

What a wonderful explanation !

@ConceptsWork

4 жыл бұрын

Glad you liked it

Excellent explanation, made it very easy to understand, Thanks Mate for this. Cheers.

@ConceptsWork

8 ай бұрын

Glad it helped

No words, Just simply brilliant . Keep it up good work. Thanks. :)

@ConceptsWork

4 жыл бұрын

Thank you!

@yatinpatil1115

4 жыл бұрын

@@ConceptsWork Just one thing to add, Port 135 need to open from Domain Controller to communicate between DC and Proxy server.

Many Thanks, great video and very helpful

@ConceptsWork

2 жыл бұрын

We cover everything in our videos, you may like the entire playlist. Please watch and share your valuable feedback.

Amazing explanation!!

Best channel on the web. Love U. Thanks

@ConceptsWork

2 жыл бұрын

Thank you so much 😀

Awesome video. Thanks 😊

Hi --Wonderful explanation. Thank you. I have few questions on implementation, can I install the proxy agent in a sever currently holding AD Connect and Pass-through agents installed ? If we need to install the proxy agents on two machines for redundancy, what is the installation procedure on 2nd machine? do we need to run all three commands on 2nd machine after installing the proxy agent? Please reply...

Great video! This video tells about setting up Password protection in On-prem environment. How we will set this up in portal.azure.com? Like, how do we setup "enforce" and "audit" modes? Our service desk uses portal.office.com to reset password, which then writes back to our domain controllers.

Thanks much for the explanation, however I would like to know does the event IDs contains the logs for service accounts too along with the user one?

Thanks for this video, it was very helpful.

@ConceptsWork

3 жыл бұрын

Glad it was helpful!

Great content, Subscribed

Great vid as always! Do you need to Register Forest on every server the proxy agent is installed?

@ConceptsWork

3 жыл бұрын

You can have one proxy agent installed for all the forests, it offers better resiliency. As every DC agent contacts the proxy agent to make sure password dll is updated.

Have a query here.. Isn't adselfservice plus a better alternative to azure ad password protection? Does Microsoft recommend it over ad password protection for hybrid environment?? Also your videos are really helpful ❤️

Hi @concepts work thank you for this great video. even 4 years later, this continues to be of good use. How does Microsoft or Entra perform it's password checks? what's the service that they are using to look up if the entered word/password is safe or not?

Great work, and thank you

@ConceptsWork

3 ай бұрын

Thanks for watching!

Simply Brilliant

@ConceptsWork

4 жыл бұрын

Thanks !!

Thanks for the structured and detailed explanation. Can we install the proxy service in the azure ad connect server.

@ConceptsWork

3 жыл бұрын

Yes you can install, but don't install if you have pass through authentication enabled.

very helpful:)

I would like to know the experience of configuring Azure AD Smart Lock out in the portal and account Lock out conditions in Group Policy in On-premise domain controller. So without these agents, configuring GPO in On-premise and Azure AD Smart Lock out would lock the user correct?? We need these agents for password protection not for Authentication lock outs?? Plz correct me if I am wrong as I am looking for policy for locking out usee after brute force attack...

@ConceptsWork

3 жыл бұрын

No these agents are only required for password reset check.

FYI --- if you have 2 proxy server, you can execute tenant registration will be done only on 1 server. No need to execute registration on all proxy server.

Can we have same Password Protection Proxy agent service running from same server for multiple domain in different forests under same tenant ID ?

@ConceptsWork

4 жыл бұрын

Each Azure AD Password Protection proxy can only support domain controllers from the forest that it's joined to. The Azure AD Password Protection software in any forest is unaware of password protection software that's deployed in other forests, regardless of Active Directory trust configurations. - docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy#multiple-forest-considerations

In your video, if Pim's password had been one of the banned passwords when the service started, would Pim's be locked out? In other words, is this only for password changes, or would it apply to current passwords. I don't want to turn it on, and all of a sudden a bunch of users are locked out because their current passwords don't meet the requirements. Hopefully they will just have to create an acceptable password when their current password expires.

@ConceptsWork

3 жыл бұрын

No this will only impact password change requests.

If you're using 2 proxy servers, do you have to run the Register-AzureADPasswordProtectionForest on both servers, OR just one?

@runmadhu2161

3 ай бұрын

good question. So what is it? :)

If the Password Protection policy apply to local ad also then the default domain policy for Password will work or not ?

@kingshuksarkar5752

4 жыл бұрын

asking because, we do deploy password policy through GOP, but if we deploy Password Protection policy do the local policy will work

@ConceptsWork

4 жыл бұрын

Default domain policiy will still work.