Entra ID on Anything About IT

Microsoft Defender for Endpoint - Security Settings Management Internals 0x1

Sun, 28 Apr 2024 12:25:01 +0000

In this post, we take a closer look at how Microsoft Defender for Endpoint Security Settings Management works behind the scenes, especially for Windows Server scenarios.

Entra ID Device Registration

Because Intune policy assignment is group-based, devices need an object in Entra ID. If a server already has an existing registration (for example Hybrid Join), that object is reused. If not, a synthetic device identity is created in Entra ID so the device can retrieve policy.

Users can create AzureAD tenants

Tue, 22 Nov 2022 22:13:09 +0000

Hello there,

In this blog post we look at a setting within the Azure AD portal: “Users can create Azure AD tenants”. Unfortunately, this setting is enabled by default. Most organizations will probably want to turn this off. You can find it in the Azure AD portal under Settings > Users > User settings > Tenant creation.

Yes allows default users to create Azure AD tenants. No allows only users with the Global Administrator or Tenant Creator roles to create Azure AD tenants. Anyone who creates a tenant becomes the Global Administrator for that tenant.

Collecting AzureAD User Authentication Method Information

Sun, 07 Feb 2021 13:28:44 +0000

Hello everyone, last Friday I received an email from one of my customers, asking how to identify users in Azure AD that have enabled passwordless sign-in with the Microsoft Authenticator app. Previously I usually made use of the Script for Azure MFA authentication method analysis but that script uses the MSOnline PowerShell module where the Get-MsolUser cmdlet does not expose the information about these newer authentication methods.

So heading over to Microsoft Graph and there we can grab all authentication methods for users as shown in the example below.

Windows 7 Hybrid Join and MFA ramblings

Tue, 05 Feb 2019 19:36:58 +0000

Today I ran into an issue where Windows 7 would not hybrid join as expected. Before going into the details, for those who might not be aware like Windows 10 and Server 2016, you can also hybrid join down-level devices. The functionality is of course not built into Windows so you need to install the “Microsoft Workplace Join for non-Windows 10 computers” software.

One reason why you want to hybrid join Windows 7 devices is Conditional access. Let’s assume you plan to introduce Conditional access for your users where you want to enforce MFA when using a non-corporate device.